Privacy Policy

1. Who We Are

This Privacy Policy describes how R&M Technologies LLC, doing business as EndpointLabs ("EndpointLabs," "we," "us," or "our"), collects, uses, and shares information in connection with your use of our website at endpointlabs.io, the EndpointLabs app builder, and any related services (collectively, the "Services").

EndpointLabs provides an AI-powered builder that creates websites and applications for businesses, along with custom software development services. We are located at 6741 Brookhurst Cir, Lake Worth, FL 33463.

2. Information We Collect

Information You Provide to Us

• Account Information: When you create an account, we collect your name, email address, and any other information you choose to provide.
• Project Content: When you use the Services, we collect what you give us to build with: prompts and chat messages, project descriptions, uploaded files (such as logos, images, screenshots, and documents), the code and content generated for your projects, and any settings or service keys you add.
• Communications: When you contact us or communicate through the Services, we collect the content of those communications.
• Payment Information: If you make a purchase, our payment processor (Stripe) collects your payment card information. We do not store full payment card numbers on our servers.

Information Collected Automatically

• Device and Usage Data: We automatically collect information about your device and how you interact with the Services, including IP address, browser type, operating system, referring URLs, pages viewed, and the date and time of your visits.
• Cookies and Similar Technologies: We use cookies and similar technologies. See Cookies and Analytics below.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, maintain, and improve the Services
• Build, host, and deploy the websites and applications you request
• Process transactions and send related information
• Send technical notices, updates, security alerts, and support messages
• Respond to your comments, questions, and support requests
• Send promotional communications about our products and services (you can opt out at any time)
• Monitor and analyze usage and trends in connection with the Services
• Detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms of Service, including automated screening of prompts and published apps for phishing and other prohibited content
• Comply with legal obligations

4. AI Processing of Your Content

The Services use artificial intelligence models provided by third parties to generate code, designs, text, and answers. To do this, your project content (such as prompts, messages, uploaded files, and existing project code) is sent to AI model providers, which may include Anthropic and models such as DeepSeek accessed through the Vercel AI Gateway. Providers may change over time.

We use these providers' business and API offerings, and we do not sell your project content. We do not use your project content to train our own AI models. Each provider processes data under its own terms and policies. Do not include information in your prompts or files that you are not permitted to share with these providers.

5. Data in Apps You Build

Apps you build with the Services may collect information from your own visitors and customers ("App End-User Data"), such as form submissions, leads, bookings, or account details. For App End-User Data, you are the business responsible for that data, and we process it on your behalf to host and run your app.

You are responsible for having a lawful basis to collect App End-User Data, for giving your visitors any required notices (including your own privacy policy), and for responding to their requests. We do not use App End-User Data for our own marketing.

6. Legal Bases for Processing

Where required by law, we process personal information based on:

• Performance of a Contract: Processing necessary to provide the Services you request.
• Legitimate Interests: Processing for our legitimate business interests, such as improving the Services, marketing, security, and fraud prevention.
• Consent: Processing based on your consent, such as for certain marketing communications.
• Legal Obligations: Processing necessary to comply with applicable laws.

7. Cookies and Analytics

We use cookies and similar technologies, including:

• Google Analytics: To understand how visitors use our website, including pages visited, session duration, and traffic sources. Learn more at policies.google.com/privacy.
• Meta Pixel: To measure the effectiveness of our advertising. Learn more at facebook.com/privacy/policy.
• Vercel Analytics: To monitor website performance and visitor metrics.
• Authentication Cookies: To keep you signed in and maintain your session.

You can control cookies through your browser settings. Disabling cookies may affect how the Services work.

8. How We Share Your Information

We do not sell your personal information.

We may share information in these circumstances:

• Service Providers: We share information with providers that perform services for us, including hosting and deployment (Vercel, Fly.io), databases (InstantDB, Neon, Supabase), code storage (GitHub), AI models (Anthropic and providers accessed through the Vercel AI Gateway), email delivery (Resend), payments (Stripe), authentication (Clerk), DNS (Cloudflare), and background job processing (Inngest). These providers may only use the information to provide their services to us.
• Legal Requirements: If required by law or in response to valid legal requests, such as subpoenas, court orders, or government demands.
• Protection of Rights: To protect the rights, property, or safety of EndpointLabs, our users, or others, including to investigate abuse.
• Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• With Your Consent: For other purposes with your consent or at your direction, such as when you transfer a project's code to your own GitHub account or connect a third-party service.

9. Data Retention

We retain personal information for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Project content is kept for as long as your account or project is active and for a reasonable period afterward.

If you request deletion of your account, we will delete or anonymize your personal information, except where we must keep it for legal or legitimate business reasons. Backups may persist for a limited period before they are overwritten. You are responsible for exporting any project you want to keep before deleting it.

10. Security

We use technical and organizational measures designed to protect personal information, including encryption in transit (TLS), encryption of sensitive values at rest, separate databases for builder projects, and access controls.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your login credentials, passcodes, and service keys confidential.

11. Your Rights and Choices

Depending on where you live, you may have the right to:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to exceptions.
• Opt-Out of Marketing: Unsubscribe from marketing emails using the link in any email or by contacting us.

To exercise these rights, contact us at ryan@endpointlabs.io. We may need to verify your identity first.

12. California and US State Privacy Rights

If you are a California resident, you have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, including the right to know, delete, and correct your personal information, and the right not to be discriminated against for exercising these rights.

We do not sell personal information for money. Our use of advertising cookies such as the Meta Pixel may count as "sharing" for cross-context behavioral advertising under California law. You can opt out by blocking these cookies in your browser or by contacting us. Residents of other US states may have similar rights. Contact us at ryan@endpointlabs.io to exercise them.

13. Children's Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have, contact us and we will delete it.

14. International Users

The Services are operated in the United States. If you use them from outside the United States, your information will be transferred to, stored, and processed in the United States and other countries where our providers operate, where data protection laws may differ from those in your country.

15. Third-Party Links

The Services may link to or integrate with third-party websites and services that we do not control. This Privacy Policy does not apply to them. Review their privacy policies before using them.

16. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy here and update the Effective Date. Your continued use of the Services after changes take effect means you accept the updated policy.

17. Contact Us

If you have questions about this Privacy Policy, contact us:

See also our Terms of Service.