GDPR, CCPA, and jurisdiction.

LADLE PBC is a Delaware US corporation. Our data is stored on Amazon Web Services infrastructure in the US East (Virginia) region. Inference runs on Anthropic's infrastructure, primarily in the US.

**GDPR** (EU/UK): We honor the standard subject rights — access, rectification, erasure, portability, restriction, objection. You can exercise all of them via Settings inside the product (export, delete, edit your account) or by emailing privacy@ladle.chat. Response time for email requests is under 30 days per statute; typically same-week.

We do not have an EU representative under Article 27 because we don't systematically process EU personal data at a scale that triggers that requirement. If your organization's compliance requires an EU rep, email us — for enterprise-scale interactions we can appoint one, but it's not part of the current standard offering.

**CCPA / CPRA** (California): We honor the standard rights (know, delete, opt-out of sale, correct). We do not sell personal data, so the opt-out is a no-op — but the right is still available to exercise formally if a compliance record is needed.

**Data residency**: Our data is not stored in EU/UK data centers. Chats you send are processed by Anthropic in the US. If EU-only data residency is a hard requirement for your organization, LADLE isn't compliant with that policy today. This is a real limitation we'd need to redesign our infrastructure to address; it's not on the near-term roadmap.

**Other jurisdictions**: Brazil (LGPD), Canada (PIPEDA), Australia (APP) — we operate consistently with these regimes' subject-rights principles. If you need specific documentation for your local regulator, email privacy@ladle.chat.