Privacy Policy

Last updated: March 27, 2026

Who we are

Ravariant Labs (“we”, “us”, “our”) operates the website ravariant.com. We are the data controller responsible for your personal data collected through this site.

What we collect

When you register to access our research, we collect your email address. This is the only personal data we collect. We do not collect names, payment information, IP addresses for tracking, or any other personal identifiers.

We also store a local identifier in your browser (localStorage) to remember that you have verified your email. This is not a cookie and does not track you across sites.

Why we collect it

We collect your email address to verify your identity and grant access to our research publications. The legal basis for this processing is your consent, given when you submit your email and verify it with a one-time code.

How we use it

Your email is used to send you a verification code when you register, and occasionally to notify you about new research publications. We do not sell, rent, license, or share your email address with any third party for marketing purposes.

Third-party processors

We use Resend (resend.com) to send verification emails and to store your email address as a contact. Resend processes data in the United States. Their privacy policy is available at resend.com/legal/privacy-policy. We use Vercel (vercel.com) to host this website. No personal data is stored on Vercel beyond standard server logs.

Data retention

We retain your email address for as long as you wish to access our research. You may request deletion at any time. Upon receiving a deletion request, we will remove your data within 30 days from both our systems and our third-party processors.

Your rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access — request a copy of the data we hold about you.
  • Rectification — request correction of inaccurate data.
  • Deletion — request that we delete your data.
  • Portability — request your data in a machine-readable format.
  • Withdraw consent — you may withdraw your consent at any time by requesting deletion.

Security

Verification codes are generated using cryptographic methods (HMAC-SHA256) and expire after 10 minutes. All data transmission between your browser and our servers is encrypted via TLS. We do not store passwords.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected in the “Last updated” date at the top. Continued use of the site after changes constitutes acceptance of the revised policy.

Contact

For any questions about this policy or to exercise your rights, contact us at daniel@ravariant.com.