Privacy Policy

1. Introduction

LaserData, Inc. ("the Company," "we," "us," or "our") provides laserdatahq.com and the LaserData API platform, together called the "Service." The Company is an AI-native data backend for engineering teams deploying real-time AI agents. Developers can store agent context, stream real-time events, and run low-latency queries through one API.

This Privacy Policy describes the information we collect, its use and protection, and your available choices. It covers information gathered through the Service and direct communications. Our address is 530 Lytton Avenue, Suite 200, Palo Alto, CA 94301. Contact us at [email protected].

As a developer infrastructure platform, the Company distinguishes between two data types covered by this Policy:

• Account and Site Data: information collected from visitors and registered developers, including contact details, API usage metadata, and site analytics. The Company controls this information.
• Developer-Submitted Service Data: agent context objects, streaming events, documents, and other data engineering teams send through the API for their applications and end users. The Company processes it as a service provider, following the developer account holder's instructions. Developers are responsible for data they store with us, including personal information in that data.

The sections that follow concern Account and Site Data unless stated otherwise.

2. Information We Collect

2.1 Information You Provide

We collect the following when you register, request an API key, or contact us:

• Contact details: name, work email, and job title;
• Company information you provide, such as employer, team size, and project context;
• Messages submitted through contact forms or email;
• Billing information handled by our third-party payment processor. We do not store raw card numbers on our servers.

2.2 Information Collected Automatically

Visits to laserdatahq.com and API interactions generate limited technical information automatically:

• IP address and approximate city- or region-level location, not precise coordinates;
• Browser, operating system, and device class;
• Pages on laserdatahq.com, referring URLs, and time on page;
• API usage metadata, including query counts, endpoint identifiers, response latency, storage consumption, and authentication events. We do not log query content or data in agent contexts for our own analytics.
• Cookies and similar identifiers (see Section 5).

2.3 Developer-Submitted Service Data

Your AI agents' context objects, streaming events, documents, and query results are stored and processed at your direction. The Company does not inspect, analyze, or use this data beyond carrying out requested operations, and does not use Service Data to train machine-learning models. You must have authority to submit personal information in Service Data and notify your end users as required by law.

2.4 We Do Not Knowingly Collect Children's Data

laserdatahq.com is a developer tool not directed to children under 13. We do not knowingly collect children's personal information. If you believe a child provided information, contact [email protected] and we will promptly delete it.

3. How We Use Information

We use Account and Site Data to:

• Operate the LaserData API platform, authenticate API keys, and enforce usage limits;
• Answer technical questions and support engineering teams;
• Send service updates and security notices, plus product communications where consent is required;
• Evaluate and improve Service performance, reliability, and developer experience;
• Identify, investigate, and prevent abuse or unauthorized infrastructure access;
• Handle billing and meet contractual duties to account holders;
• Meet legal obligations.

We do not sell personal information for monetary value. If applicable law treats advertising arrangements as a "sale" or "share," consult the California section below.

4. Sharing of Information

Personal information is shared only with:

• Service providers working for us, including cloud hosting, email delivery, payment processing, and site analytics providers, under confidentiality terms barring independent data use;
• Legal authorities when legally required or needed to protect rights, safety, or property;
• A successor entity after a merger, acquisition, or asset sale, subject to this Policy.

We neither sell personal information to third parties nor share it with advertisers for cross-context behavioral advertising.

5. Cookies and Tracking

Cookies and similar technologies support the developer portal, authenticated sessions, and measurement of laserdatahq.com usage. See our Cookie Policy for details and choices.

6. Data Retention

We keep Account and Site Data only as needed for the purposes here, legal or accounting duties, and dispute resolution:

• Developer account data: kept for the account's life and afterward as applicable law requires;
• API usage metadata (query counts, latency, authentication logs): retained 90 days, then aggregated into statistical form;
• Developer-submitted Service Data: retained under account settings and deleted within 30 days of account termination or upon your explicit API or support deletion request;
• Site analytics: retained up to 13 months, then purged;
• Marketing and contact data: inactive contacts are purged after 24 months.

7. Security

Administrative, technical, and physical safeguards protect information, including TLS in transit, encrypted at-rest storage for sensitive account data, restricted databases, and least-privilege engineering access. No system is perfectly secure, so absolute protection from every threat cannot be guaranteed.

8. Your General Rights

Depending on your jurisdiction, rights may include access, correction, deletion, and limits on certain processing. To request one, email [email protected]. We respond within the period required by law. California residents have additional rights below.

9. California Residents (CCPA / CPRA)

The California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA") give California residents specific rights concerning personal information collected about them. This section supplements the rest of the Policy.

9.1 Categories We Collect

During the past 12 months, we collected these categories defined under Cal. Civ. Code §1798.140: identifiers, including name, work email address, API key identifiers, and IP address; commercial information, including subscription plan, query usage counts, and billing records; internet activity, including pages visited on laserdatahq.com and API endpoint access logs; and inferences from those categories for service capacity planning and improvement. Through our direct collection practices, we do not collect sensitive personal information as defined in Cal. Civ. Code §1798.140(ae).

9.2 Sources, Purposes, Disclosure

We receive this information from you through registration and contact forms, and automatically through the Service. We use it to operate and improve the LaserData platform, authenticate API access, communicate with developers, process billing, and satisfy legal obligations. Disclosure is limited to contracted service providers and legal authorities when required.

9.3 Your CCPA / CPRA Rights

• Right to Know: request the categories and specific pieces of personal information we have collected about you in the past 12 months.
• Right to Delete: request deletion of personal information we collected from you, subject to legal exceptions.
• Right to Correct: request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing: we do not sell personal information; we do not "share" it for cross-context behavioral advertising as defined under CPRA.
• Right to Limit Use of Sensitive PI: we do not use sensitive personal information for purposes beyond those permitted without authorization.
• Right to Non-Discrimination: we will not deny services, charge different prices, or provide a different level of service because you exercised a right.

9.4 How to Exercise

Submit a verifiable request by emailing [email protected] with the subject line "California Privacy Request." Include enough detail for us to verify you are the person whose information is the subject of the request. We respond within 45 days, with a possible 45-day extension for which we will notify you.

9.5 Authorized Agents

You may designate an authorized agent to make a request on your behalf. The agent must provide proof of authorization; we may also require you to verify your identity directly.

9.6 "Shine the Light"

California Civil Code §1798.83 entitles California residents to request information regarding our disclosure of personal information to third parties for direct marketing. We do not disclose personal information for third-party direct marketing.

9.7 Do Not Track and Global Privacy Control

Under the California Online Privacy Protection Act (Cal. Bus. & Prof. Code §22575), we disclose how we respond to "Do Not Track" (DNT) browser signals. Because there is no common industry standard for interpreting DNT signals, we do not currently respond differently to them. We do not authorize third parties to collect personally identifiable information about your activity across different websites when you use the Service. We honor an opt-out preference signal sent by a platform or browser that complies with the CPRA, such as the Global Privacy Control (GPC); when we detect a GPC signal, we treat it as a valid request to opt out of the sale or sharing of personal information for that browser or device.

10. Changes to This Policy

This Policy may change periodically. Material revisions will show a new "Last updated" date and, when appropriate, a Service notice. Using the Service after an updated Policy takes effect means you accept the revisions.

11. Contact

Send questions, requests, or complaints to: