1. Information We Collect

Information you provide to us:

• Contact details (name, email, phone number, business name)
• Billing information, processed through our payment processor (Stripe) — we do not directly store full card numbers
• Twin Data: photos, measurements, and other materials submitted to build and maintain a digital profile of a named individual ("Subject")
• Communications you send us (requests, feedback, briefs, correspondence)

Information collected automatically:

• Basic website usage data (e.g. pages visited, general location, device/browser type, time and date of visit), if you visit our website
• Cookies used to operate our website and remember your preferences. You can instruct your browser to refuse cookies, though some parts of our website may not function properly as a result. We do not use advertising or remarketing cookies.

2. How We Use Information

We use the information we collect to:

• Provide and maintain the Service — building and maintaining Twins, producing visualizations, and fulfilling requests
• Communicate with you about your account, requests, notices, and billing
• Gather analysis to improve our internal tools and methodology (in aggregate or de-identified form only — we never use your specific Twin Data to build features for other clients without consent)
• Detect, prevent, and address technical or security issues
• Comply with our legal, tax, and accounting obligations
• Carry out our obligations and enforce our rights under any agreement between you and us, including billing and collection

3. How We Do Not Use Information

• We do not sell Twin Data or personal information to third parties.
• We do not use Twin Data to train third-party or external AI models.
• We do not share Twin Data with brands, agencies, or any other party outside of delivering the Service to you, without your prior written consent.
• We do not use behavioral advertising, ad remarketing, or third-party ad-tracking cookies.

4. Sharing of Information

We may share information with:

• Service providers who help us operate (e.g. Stripe for payment processing, cloud storage/hosting providers), who have access only to what's needed to perform their function and are obligated not to use it for any other purpose
• Legal authorities, if required to comply with a law, regulation, or valid legal process
• A successor entity, in the event of a merger, acquisition, or sale of assets, subject to the same protections described in this policy

We do not share Twin Data or Subject likeness information with any other client, brand, or third party for marketing or any other purpose.

5. Payments

We do not store your full payment card details. Payment information is provided directly to our payment processor, Stripe, whose handling of it is governed by their own privacy policy (https://stripe.com/privacy) and which adheres to PCI-DSS standards for secure handling of payment data.

6. Showcasing Work

As described in our Terms of Service, we may reference or display work produced through the Service in our own marketing, portfolio, or social channels, unless you request otherwise in writing or a mutual NDA is in place for your account.

7. Links to Other Sites

Our website or communications may contain links to third-party sites not operated by us (e.g. a brand or showroom's website). We are not responsible for the content, privacy practices, or policies of any third-party site, and encourage you to review their policies directly.

8. Data Retention

We retain Twin Data and account information for as long as your subscription is active, plus a reasonable period afterward for legal, billing, or record-keeping purposes. Usage data collected from our website is retained for a shorter period, except where needed for security or legal reasons. You may request deletion of a Twin and its associated data at any time; we will complete deletion within 30 days, except where retention is legally required.

9. Data Security

We take reasonable technical and organizational measures to protect the information you provide, including restricting access to Twin Data to those who need it to deliver the Service. No method of storage or transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. International Transfer of Data

Our Service may be accessed from outside the United States, and information may be transferred to and processed in the United States, where data protection laws may differ from those of your jurisdiction. By using the Service, you consent to this transfer. We take reasonable steps to ensure your data is handled securely and in line with this policy wherever it is processed.

11. Children's Privacy

Our Service is not intended for and does not knowingly collect personal information from anyone under the age of 18. If we become aware that we have received such information without appropriate parental or guardian consent, we will delete it as soon as reasonably practical. If you believe a minor has provided us with personal information, please contact us at contact@labsdailha.com.

12. Your Data Protection Rights

If you are in the European Union / European Economic Area (GDPR): you have the right to access, correct, delete, or restrict our use of your personal data, to object to certain processing, to receive a copy of your data in a portable format, and to withdraw consent at any time where we rely on it. You also have the right to lodge a complaint with your local data protection authority. To exercise these rights, contact us at contact@labsdailha.com — we may ask you to verify your identity first, and note that some data is necessary for us to provide the Service.

If you are a California resident (CCPA): you have the right to know what personal information we collect and why, to request deletion of your personal information, and to opt out of the sale of your personal information. We do not sell personal information. To exercise these rights, contact us at contact@labsdailha.com. We will not discriminate against you for exercising any of these rights.

All users, regardless of location, may contact us at contact@labsdailha.com to ask what information we hold about you or a Subject, correct it, or request its deletion.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or a notice on our website prior to the change taking effect, and update the "Last updated" date above. Continued use of the Service after a change takes effect constitutes acceptance of the revised policy.

14. Contact

Questions about this Privacy Policy can be directed to contact@labsdailha.com.