Privacy policy

Account information includes your name if supplied, email address, authentication records and account role. Purchase information includes selected collections, payment references, payment status, amount, currency and collection access. We also process saved template favorites and messages you send for support or refunds.

A guide request includes the email needed to deliver the PDF. Security and operational information may include request times, technical error records, device/network information handled by our service providers, and hashed identifiers used to limit abuse. When you allow analytics, we process page and product views, checkout activity, purchase events and permitted campaign identifiers.

Stripe handles payment-card information within its payment interface. Labescape does not receive your full card number through the application. Information you send directly to an AI provider is governed by that provider’s policies. Labescape’s template editor does not itself submit your details to an AI model.

Where a legal basis is required, we rely on performance of a contract or steps you request before a contract to manage your account, deliver purchases, provide requested guides and handle purchase support. We rely on legal obligations for records or disclosures required by law.

We rely on legitimate interests, where permitted and balanced against your rights, to secure the service, prevent abuse, diagnose failures, handle complaints and establish or defend claims. Optional analytics relies on your consent. Declining analytics does not prevent shopping or library access.

Account and purchase information necessary to supply the service is required for those functions. If you do not provide it, we may be unable to create an account, deliver access or resolve a purchase issue. We do not use the application to make solely automated decisions with legal or similarly significant effects on you.

Supabase provides authentication, database storage and account/library records. Stripe processes payments and related fraud prevention and billing information. Resend delivers requested transactional emails, including authentication emails through the configured email integration. Our hosting provider handles website delivery and operational requests; the planned production host is Vercel.

Google Analytics is used only when configured and you permit analytics. Providers receive information relevant to their services and may have their own legal responsibilities, especially for payments and fraud prevention. We may disclose information where required by law or necessary to protect rights, investigate abuse or resolve a dispute.

The application does not enroll guide recipients in a marketing mailing list. We do not sell your account information or use this website’s analytics integration for targeted advertising.

We are a United States company, and our service providers may process information outside your country. The countries involved depend on the services and infrastructure used. Data-protection laws may differ between countries.

Contact contact@labescape.com to request information about the providers, processing arrangements and any transfer protections applicable to your information. This notice does not represent that every transfer is covered by a particular adequacy decision, certification or contractual mechanism.

Retention depends on the purpose of the record. Account and entitlement records support ongoing library access; order records also support accounting, refunds, disputes and legal obligations. Support correspondence is retained according to the issue, follow-up needs and applicable claim or recordkeeping requirements.

Security records and abuse-control identifiers are assessed according to their continuing usefulness for protecting the service. Provider logs and backups have separate retention settings. Closing an account does not necessarily erase transaction records that must be retained for legal or legitimate recordkeeping reasons.

We do not promise an automatic deletion schedule. Contact us to request deletion or details about retention applicable to your records. We will explain any information that needs to be retained and why, subject to applicable law.

Depending on applicable law, you may request access, correction, deletion, restriction or portability of your information. Email contact@labescape.com with your request. We may need proportionate verification of your identity before disclosing or changing account information; do not send passwords or payment-card details.

Right to object: where processing is based on legitimate interests, you may object based on your circumstances. You may also withdraw consent to optional analytics at any time using Privacy choices when analytics is enabled. Withdrawal does not affect the lawfulness of earlier processing.

We respond within the periods required by applicable law and explain any lawful limitation or refusal. You may complain to your relevant data-protection authority, including the UK Information Commissioner or the authority where you live or work in the EEA, where those laws apply. You do not have to contact us before exercising that right.

The Cookies and Browser Storage Policy explains authentication storage, consent preferences and optional measurement. Requested guides, verification links, password resets and purchase/support messages are transactional communications, not a subscription to marketing.

We use access controls and service-provider security features, but no online service can guarantee absolute security. Protect your login details and contact us if you suspect an account issue. Avoid sending sensitive information unless it is needed and an appropriate channel has been agreed.

Labescape is intended for professional and general adult use, not services directed to children. If you believe a child has supplied personal information without appropriate authorization, contact us.

We publish revisions with an updated date and provide additional notice where required for material changes. New processing activities must be reflected in this policy before they are introduced.