Privacy Policy

1. Introduction

This Privacy Policy describes how Labtree, Inc., a Delaware corporation (“Labtree,” “we,” “our,” or “us”), collects, uses, discloses, and protects personal information obtained through our website at labtree.io (the “Website”) and related communications. This policy is designed to comply with the EU General Data Protection Regulation (“GDPR”), the UK GDPR, and other applicable data protection laws.

2. Data Controller

For purposes of applicable data protection laws, the data controller is:

Labtree, Inc.
1111B South Governors Avenue
Dover, Delaware 19904
United States

Email: privacy@labtree.io

3. Information We Collect

3.1 Information You Provide. When you submit our contact form or otherwise communicate with us, we collect the personal information you voluntarily provide, including your name, email address, company or institutional affiliation, LinkedIn profile URL, and the content of your message. We process this information on the legal basis of legitimate interest (responding to your inquiry) and, where applicable, your consent.

3.2 Automatically Collected Information. We use PostHog, an analytics platform hosted in the European Union, to collect information about how visitors interact with our Website. This includes pages viewed, session duration, referral source, device type, browser type and version, operating system, and approximate geographic location derived from your IP address at the country or city level. We process this information on the legal basis of legitimate interest (understanding and improving our Website).

3.3 Cookies and Similar Technologies. We use essential cookies required for Website functionality and analytics cookies via PostHog to collect the usage data described above. We do not use advertising cookies, retargeting pixels, or tracking technologies from third-party ad networks. You may manage cookie preferences through your browser settings; however, disabling essential cookies may impair Website functionality.

4. How We Use Your Information

We process your personal information for the following purposes:

(a) To respond to inquiries submitted through our contact form and to communicate with prospective customers, partners, and collaborators; (b) To analyze Website traffic, usage patterns, and performance in order to maintain, improve, and optimize the Website; (c) To ensure the security and integrity of the Website and to detect and prevent unauthorized access or abuse; (d) To comply with applicable legal obligations.

We do not sell, rent, or otherwise disclose your personal information to third parties for their marketing purposes.

5. Third-Party Processors

We engage the following third-party service providers (sub-processors) to process personal information on our behalf in connection with the operation of the Website. Each sub-processor is bound by contractual obligations to protect your personal information and to process it only as instructed by Labtree.

PostHog, Inc. — Website analytics (EU-hosted infrastructure);
Resend, Inc. — Transactional email delivery;
Vercel, Inc. — Website hosting and content delivery;
Google LLC — Email services via Google Workspace.

We may update our list of sub-processors from time to time. Material changes to this list will be reflected in updates to this Privacy Policy.

6. International Data Transfers

Our primary analytics infrastructure is hosted in the European Union. However, certain sub-processors may process personal information in the United States or other jurisdictions outside the EU/EEA. Where such transfers occur, we ensure appropriate safeguards are in place, including the use of Standard Contractual Clauses approved by the European Commission and, where applicable, reliance on the EU-U.S. Data Privacy Framework.

7. Data Retention

Contact form submissions and related correspondence are retained for as long as reasonably necessary to maintain our business relationship and to comply with applicable legal obligations. Analytics data collected via PostHog is retained for a maximum of twelve (12) months, after which it is automatically deleted. We may retain aggregated, anonymized, or de-identified data indefinitely, as such data cannot be used to identify any individual.

8. Your Rights

Under the GDPR, UK GDPR, and other applicable data protection laws, you may have the following rights with respect to your personal information:

(a) Right of Access — the right to request a copy of the personal information we hold about you; (b) Right to Rectification — the right to request correction of inaccurate or incomplete personal information; (c) Right to Erasure — the right to request deletion of your personal information under certain circumstances; (d) Right to Restrict Processing — the right to request that we limit how we process your personal information; (e) Right to Data Portability — the right to receive your personal information in a structured, commonly used, and machine-readable format; (f) Right to Object — the right to object to our processing of your personal information where we rely on legitimate interests as the legal basis; (g) Right to Withdraw Consent — where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at privacy@labtree.io. We will respond to your request within the timeframes required by applicable law. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.

9. Data Security

We implement appropriate technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. All data is encrypted in transit using TLS. Access to personal information is restricted to authorized personnel on a need-to-know basis. While we take reasonable precautions to protect your information, no method of transmission over the Internet or method of electronic storage is completely secure.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. The “Last updated” date at the top of this policy indicates the most recent revision. If we make material changes, we will update this page and, where appropriate, notify you by other means. Your continued use of the Website after the effective date of any updated Privacy Policy constitutes your acceptance of the changes.

11. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Labtree, Inc.
1111B South Governors Avenue
Dover, Delaware 19904
United States

Email: privacy@labtree.io