1. Introduction
Relationship Design Lab ("RDL," "we," "us," or "our") operates the website located at relationshipdesignlab.com and associated services. We are committed to protecting your personal information and your right to privacy, in accordance with the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and all applicable laws.
2. Information We Collect
We collect information that you provide directly to us:
- Account Information: Name, email address, and authentication data provided through Google Sign-In.
- Survey Responses: Your answers to relationship assessment questionnaires.
- Conversation Data: Messages exchanged with our AI coaching system.
- Assessment Reports: Generated PDF reports containing your analysis.
We automatically collect:
- Usage Data: Pages visited, features used, session duration.
- Device Information: Browser type, operating system, device identifiers.
3. How We Use Your Information
- Provide and personalize our AI-powered coaching services
- Generate relationship assessments and reports
- Maintain and optimize service performance (user conversations and journal entries are strictly isolated and never used to train third-party foundation models)
- Communicate with you about your account
- Comply with legal obligations
We do not sell your personal information to third parties.
4. Data Storage and Security
- Encrypted at rest with AES-256-GCM using per-user envelope keys managed in Google Cloud KMS; encrypted in transit via TLS 1.3
- Fine-grained access controls, automated role separation, and cryptographic audit logging for data operations
5. Third-Party Services (Processors)
We work with trusted third-party enterprise subprocessors under confidentiality agreements that prohibit training on user data:
- Google Cloud (Cloud KMS, Cloud SQL, Cloud Run, Gemini API): Envelope key encryption, primary PostgreSQL database, serverless backend hosting, and dedicated AI inference
- Clerk: User authentication, session management, and JWT attestation
- Qdrant: Isolated vector embedding storage for semantic memory recall
- Crisp: Customer support chat, feedback routing, and ticketing
- Resend: Secure transactional email notifications and cadence dispatching
- Cloudflare: DDoS mitigation, DNS resolution, and edge security
6. Your California Privacy Rights (CCPA/CPRA)
As a California resident, you have the right to:
- Know what personal information we collect, use, and disclose
- Delete your personal information by contacting privacy@relationshipdesignlab.com or through account settings
- Opt-out of the sale of personal information (we do not sell data)
- Non-discrimination for exercising your privacy rights
- Correct inaccurate personal information
7. Data Retention
We retain your personal information for as long as your account is active. You may request deletion at any time by deleting your account or contacting us at privacy@relationshipdesignlab.com. We process verified deletion requests promptly in accordance with applicable laws.
8. Children's Privacy
Our services are not intended for individuals under 18. We do not knowingly collect personal information from minors.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date.