Privacy Notice
1. Introduction
This Privacy Notice explains how LabFoundersHQ ("we," "us," or "our") collects, uses, and shares information when you visit our website, create an account, or use the LabFoundersHQ platform. By using the platform you consent to the practices described here.
2. Information Users Provide
We collect information you voluntarily provide when you create an account, subscribe to a plan, contact support, submit content, or otherwise interact with the platform.
3. Account and Profile Information
This includes name, email address, laboratory name, role, and any optional profile details you choose to provide (avatar, phone, laboratory address, goals, and similar).
4. Subscription and Billing Information
Subscription tier, billing cycle, plan history, invoices, and payment status are stored in our records. Payment card details are never stored on LabFoundersHQ servers — all payment processing is handled by Stripe (see section 10).
5. Platform Usage Information
We record usage events such as feature clicks, roadmap task completions, AI-assistant prompts, uploaded documents, and audit logs. This information supports personalization, product improvement, and security investigation.
6. Cookies and Similar Technologies
We use cookies and localStorage to keep you signed in, remember your preferences, and secure your session. You can control cookies through your browser settings; disabling required cookies may prevent you from signing in.
7. How Information Is Used
- Provide, maintain, and improve the platform.
- Personalize your dashboard, roadmap, and AI experience.
- Process subscriptions and communicate account activity.
- Send transactional and, where consented, product updates.
- Detect, investigate, and prevent abuse or security incidents.
- Comply with legal obligations.
8. How Information May Be Shared
We do not sell your personal information. We share information only with the third-party service providers listed below, or when required by law or to protect our rights.
9. Third-Party Service Providers
We rely on a small set of vetted vendors to operate the platform: Stripe (payments), Resend (transactional email delivery), and a managed database and hosting provider. Each vendor receives only the information necessary to perform its function.
10. Stripe Payment Processing
Payment card information is entered directly into Stripe's payment surface and stored by Stripe under PCI-DSS. LabFoundersHQ receives only non-sensitive metadata (subscription status, plan, invoice identifiers) — never your card number or CVV.
11. Resend Email Delivery
Transactional emails (welcome messages, onboarding drip, receipts, support notifications) are delivered through Resend. Resend receives your email address and the message contents strictly for the purpose of delivering the message.
12. Data Security
We use industry-standard safeguards including transport encryption, hashed passwords, role-based access control, and tenant isolation. No system is perfectly secure, and we do not guarantee absolute security.
13. Data Retention
We retain your account and platform data for as long as your account is active and for a reasonable period afterward for business, legal, and compliance purposes.
14. User Choices and Account Updates
You may update your profile, change your plan, pause your account, or request deletion at any time through your account settings or by contacting support.
15. Children's Privacy
LabFoundersHQ is not directed to children under 13, and we do not knowingly collect information from children under 13.
16. Changes to This Notice
We may update this Privacy Notice from time to time. Material changes will be communicated via the platform or by email.
17. Contact Information
Contact: lfhq.support@gmail.com
Important Disclaimers
LabFoundersHQ provides compliance-related tools but is not automatically HIPAA compliant merely because the platform includes such tools. LabFoundersHQ does not provide legal, medical, or regulatory advice. Independent professional review is your responsibility.