Last updated: 10/27/2026
This notice explains how Twin Harbor Ventures LLC, a Wyoming limited liability company ("Twin Harbor", "we", "us"), handles personal information collected through regulatorypath.app and twinharborventures.com (together, the "Site"), when you sign up for updates or a waitlist, and when you buy a RegulatoryPath product. RegulatoryPath and VendorPath are products of Twin Harbor Ventures LLC.
Orders. When you buy a RegulatoryPath product, we collect your name, email address, company name, billing details and what you bought, so we can deliver your files and keep a record of the sale. Payment goes through Stripe. Stripe collects and processes your card or bank account details, and we don't see or store your full card or account number.
Sign-ups. When you join a waitlist (such as VendorPath), ask for a free sample, or ask to hear when a product or state opens, we store your email address (and, for a free sample, your name, company and the state you asked about), which form you used (for example "VendorPath waitlist" or "free sample"), the date and time, and whether you ticked the box to get other RegulatoryPath emails.
Emails you send us. If you email us, we receive your email address, name and whatever you choose to include.
Visitor analytics. Our host, Lovable, counts visits to the Site for us. For each visit it records the page viewed, the referring site, your browser type (user agent), your browser language and an approximate country worked out from your device's time zone, linked to a random visit identifier that lasts up to 30 minutes. We use it only to see overall traffic. It doesn't identify you, build a profile or follow you across visits, and we don't use advertising trackers.
Performance and error data. Lovable also records how pages load and whether errors occur (for example load times, the page path, the referring site's domain and screen size), linked to a random session identifier. We use it to keep the Site working.
Server logs. When you visit, our hosting and security providers (Lovable and Cloudflare) automatically receive your IP address, browser type, the pages requested and the time, to deliver the Site and protect it from abuse.
Cookies. The Site uses three cookies: two that run and protect it, Cloudflare's bot-protection cookie (about 30 minutes) and a hosting cookie that keeps you on the current version of the Site (about 1 day), and a 30-minute visit counter for analytics. We don't use advertising cookies. Stripe's checkout sets its own cookies on Stripe's site, under Stripe's privacy policy.
We don't ask for government ID or any sensitive information. Please don't send it to us by email.
Orders: to process your payment, deliver your files and download links, send your receipt, give support and meet tax and accounting rules.
Sign-ups: to do only what you signed up for. For a waitlist, we send you one email when that product opens. For a free sample, we send you the sample. We send you other RegulatoryPath emails only if you ticked the box for them. Every marketing email has an unsubscribe link.
Emails you send us: to read and reply to you and to keep a record of our correspondence.
Analytics, performance data and server logs: to see overall traffic, keep the Site running and secure, and fix problems.
We don't sell or rent personal information, and we don't share it for advertising. We don't add you to a mailing list unless you asked us to.
We share personal information only with service providers who handle it for us:
Hosting, database, analytics and order emails: Lovable, including Lovable Cloud (Supabase), which stores orders and sign-ups in a database. Order and download-link emails are sent from orders@notify.regulatorypath.app.
Security and content delivery: Cloudflare.
Payments and sales tax: Stripe, which processes payments, including invoice payments, and calculates sales tax for us. Stripe handles your payment information under its own privacy policy.
Email: Google Workspace (Google), which hosts our mailboxes at twinharborventures.com and getregulatorypath.com, including contact@twinharborventures.com. Google may process this mail in the United States and other countries.
Email for support@regulatorypath.app: Migadu, which hosts this mailbox and may store mail in the European Union.
We may also disclose information if the law requires it, or to protect our rights or someone's safety.
Order and sign-up data is stored in a database run by our host, Lovable Cloud. Some of our providers, such as Stripe, Cloudflare and Google, may also process data in other countries where they operate, and Migadu may store support@regulatorypath.app mail in the European Union.
Orders and payment records: as long as tax and accounting law requires.
Waitlist sign-ups: until we send the email saying the product has opened. After that we delete the sign-up unless you opted in to other emails.
Free-sample requests and marketing choices: up to 3 years, or until you unsubscribe.
Unsubscribes: if you unsubscribe, we keep your email address on a do-not-email list so we don't email you again.
Emails you send us: as long as needed to deal with your message and any follow-up, then up to 3 years for our records, unless the law requires longer.
Analytics, performance data and server logs: kept by Lovable and Cloudflare under their own retention schedules.
Unsubscribe: use the unsubscribe link in any email we send, or email us.
Access, correction and deletion: email contact@twinharborventures.com to ask us to see, correct or delete the personal information we hold about you, or to stop contacting you. We'll reply within 30 days. We may keep records the law requires us to keep, such as order records, and your email on our do-not-email list.
Analytics: you can block or delete cookies in your browser. The Site still works.
Depending on where you live, you may have other rights under local law.
We use reasonable measures to protect the information we receive, including access controls and encrypted connections (HTTPS). No method of transmission or storage is completely secure.
The Site is for businesses and isn't directed at children under 16. We don't knowingly collect their information. If you think a child has given us information, email us and we'll delete it.
We may update this notice. The "Last updated" date at the top shows the latest version. If a change affects how we use information you've already given us, we'll tell you before it applies.
Twin Harbor Ventures LLC, 30 N Gould St, Ste R, Sheridan, WY 82801. contact@twinharborventures.com