Last updated June 8, 2026 · DropRail is a service of LabCMD, LLC (147 Kennicott Rd, Chehalis, WA 98532).
These Terms of Service ("Terms") govern your access to and use of DropRail (the "Service"), operated by LabCMD, LLC ("LabCMD", "we", "us"). By creating an account, installing the DropRail agent, or using the Service you ("Customer", "you") agree to these Terms. If you use the Service on behalf of an organization, you represent that you are authorized to bind it.
DropRail is software that helps businesses automate the operational work of complying with the California Delete Act and its Delete Request and Opt-out Platform ("DROP") — retrieving deletion-request lists, matching them against your records using one-way hashes, deleting matched records in your own systems, cascading notices to your processors, and maintaining a tamper-evident audit log. DropRail is a tool and service provider; it is not itself a data broker and does not decide your legal obligations.
You must provide accurate registration information, keep your credentials secure, and are responsible for all activity under your account. You must be a business eligible to use the Service and authorized to process the records you connect to it.
You remain the business responsible for your obligations under the Delete Act and applicable law. In particular, you are responsible for: (a) registering as a data broker with the California Privacy Protection Agency ("CPPA") where required and paying any State registration or DROP access fees, which are owed to the State and are separate from your DropRail subscription; (b) obtaining and safeguarding your own DROP API credentials; (c) the accuracy and lawful processing of the records you connect; and (d) timely processing of deletion requests. DropRail provides automation and records to assist you; it does not assume your legal duties.
DropRail and its documentation are provided for operational and informational purposes and do not constitute legal advice. We are not your attorneys. Consult qualified counsel regarding your obligations under the Delete Act, the CCPA/CPRA, or any other law.
Paid plans are billed in advance on a recurring monthly basis through our payment processor, and renew automatically until you cancel. The free trial requires no payment method and never converts to a paid plan automatically — you are only charged if you explicitly subscribe; when the trial is used up, cycles simply pause until you do. Fees are non-refundable except where required by law. We may change pricing on notice; changes apply to subsequent billing periods. State fees payable to California are not part of, and are not collected through, your DropRail subscription.
When you run the DropRail agent in your environment, your consumers' personal information stays in your systems. Only one-way SHA-256/Base64 hashed identifiers (used to match the State's list) and per-request status codes are exchanged with the Service. We encrypt stored credentials at rest and apply reasonable safeguards. Our processing of any information you provide is described in our Privacy Policy. To the extent we process personal information on your behalf, we act as your service provider and will not sell it or use it except to provide the Service.
You will not misuse the Service, including by: reverse-engineering or reselling it without authorization; uploading unlawful content or data you lack the right to process; attempting to breach security or access other customers' data; or using the Service to violate any law. We may suspend accounts that pose a security, legal, or abuse risk.
The Service, including the DropRail software and agent, is owned by LabCMD and licensed to you, not sold. We grant you a limited, non-exclusive, non-transferable license to use the Service and to run the agent within your organization for the term of your subscription. You retain all rights to your data.
THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. We do not warrant that the Service will be uninterrupted or error-free, or that it will ensure your compliance with any law.
TO THE MAXIMUM EXTENT PERMITTED BY LAW, LABCMD WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF DATA, PROFITS, OR REGULATORY PENALTIES. OUR TOTAL LIABILITY ARISING FROM OR RELATED TO THE SERVICE WILL NOT EXCEED THE AMOUNTS YOU PAID US IN THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM.
You will indemnify and hold LabCMD harmless from claims arising out of your data, your use of the Service, or your violation of these Terms or applicable law.
These Terms apply while you use the Service. You may cancel at any time; your subscription remains active through the paid period. We may suspend or terminate for breach, non-payment, or legal/security reasons. On termination you should uninstall the agent; your audit logs remain in your possession.
We may update the Service and these Terms. Material changes will be posted here with an updated date and, where appropriate, communicated by email. Continued use after changes take effect constitutes acceptance.
These Terms are governed by the laws of the State of Washington, without regard to conflict-of-laws rules. The exclusive venue for disputes is the state and federal courts located in Washington, and you consent to their jurisdiction.
Questions? [email protected]. These terms are written in good faith for a business-to-business compliance tool and are not legal advice for your business; review your own obligations with counsel.