Compliance & Data Privacy

We take data privacy and security extremely seriously. All of our data is stored in secure Amazon AWS databases with very strict access controls. In addition, the data is stored in an encrypted form.

In terms of user privacy, we follow industry best practices as well as all laws and regulations including GDPR and CCPA. We don’t share your data or any of the users’ data with any third parties. One exception we make is in the case of OpenAI since we use their APIs to generate answers, we have to share some data that's relevant to the user’s question/input so they can help us generate the answer.

As for handling checkout, Radiance Labs has completed merchant level assessment for PCI compliance, based on the PCI compliance Guide. We do not store any cardholder data on our servers. We create plugins and extensions for end Merchants’ ecommerce platforms, in order to enable the repurchase of products that an end consumer had already purchased before with the end merchant. Our main API calls, webhooks, and postbacks are with the third party vendors (e.g., Shopify, Magento, WooCommerce, Stripe, PayPal, Braintree, Salesforce)

When the end user places an order through messaging, we make an API call to the merchant’s ecommerce platform. Our business does not use network segmentation to affect the scope of your PCI DSS environment.