Privacy Policy

1. What Information We Collect

GB Labs collects information to provide, improve, and personalize our AI automation services. We collect information in the following ways:

• Account Information: When you create an account, we collect your name, email address, company name, and authentication credentials.
• Automation Configuration Data: Details about your automation workflows, triggers, content preferences, and brand settings you provide during setup.
• Usage Data: Information about how you interact with our platform, including pages visited, features used, and automation performance metrics.
• Payment Information: When you subscribe to a paid plan, we collect billing information through Stripe. We do not store full credit card details.
• Communication Data: Emails, support tickets, and feedback you send us.
• Device & Browser Data: IP address, browser type, operating system, and device identifiers for security and analytics purposes.
• Cookies & Tracking Technologies: We use cookies and similar technologies to track your preferences and usage patterns (see our Cookie Policy).

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve our AI automation platform and services.
• Personalization: To customize your experience, remember your preferences, and deliver personalized content recommendations.
• Analytics & Performance: To understand how users interact with our platform and identify areas for improvement (Google Analytics, PostHog).
• Communication: To send you service updates, security alerts, and support responses via email (Resend).
• Payment Processing: To process subscriptions and billing through Stripe.
• AI Model Training: To improve our AI models using aggregated, anonymized automation data (server-side only; OpenAI, Gemini, Anthropic, Perplexity APIs).
• Security & Fraud Prevention: To detect and prevent unauthorized access, fraud, and abuse.
• Legal Compliance: To comply with applicable laws, regulations, and legal requests.

3. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience and gather analytics. For a complete list of cookies we use, including their purpose and duration, please see our Cookie Policy.

You can control cookie preferences through our Cookie Preferences Center (accessible via the cookie banner) or your browser settings.

4. Do Not Sell My Personal Information (CCPA)

Under the California Consumer Privacy Act (CCPA) and similar state privacy laws, you have the right to request that we do not sell or share your personal information with third parties for their direct marketing purposes.

Current Status: GB Labs does not sell your personal information to third parties for monetary compensation. However, we may share information with service providers (Supabase, Stripe, Resend, Google Analytics) as necessary to provide our services.

To exercise your CCPA rights or opt out of data sharing, please contact us at support@gblabs.ai.

5. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

GDPR Rights (EU/EEA Residents):

• Right to Access: You can request a copy of the personal information we hold about you.
• Right to Rectification: You can request that we correct inaccurate or incomplete information.
• Right to Erasure: You can request that we delete your personal information (subject to legal obligations).
• Right to Restrict Processing: You can request that we limit how we use your information.
• Right to Data Portability: You can request your data in a portable format.
• Right to Object: You can object to certain types of processing, including marketing communications.
• Right to Withdraw Consent: You can withdraw consent for any processing at any time.

CCPA Rights (California Residents):

• Right to Know: You can request what personal information we collect, use, and share.
• Right to Delete: You can request deletion of personal information we have collected from you.
• Right to Opt-Out: You can opt out of the sale or sharing of your personal information.
• Right to Correct: You can request correction of inaccurate personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise any of these rights, please contact us at support@gblabs.ai.

6. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. Retention periods vary by data type:

• Account Information: Retained while your account is active and for 90 days after deletion.
• Usage & Analytics Data: Retained for up to 2 years for analytics purposes.
• Consent Records: Stored in your browser's localStorage until you clear cookies or withdraw consent. Consent timestamps are logged for compliance audits.
• Payment Information: Retained by Stripe according to their retention policies (typically 7 years for tax/legal compliance).
• Support Communications: Retained for 2 years or as required by law.

You can request deletion of your data at any time by contacting us at support@gblabs.ai.

7. Contact Us

If you have questions about this Privacy Policy, our privacy practices, or wish to exercise your rights, please contact us:

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by updating the "Last Updated" date at the top of this page and, where required, by sending you an email notification. Your continued use of our services after such modifications constitutes your acceptance of the updated Privacy Policy.