// Legal

Privacy Policy

How Downlabs collects, uses, and protects personal information for product engineering and AI service delivery.

1. Scope

This Privacy Policy applies to information collected through https://downlabs.co, discovery calls, project communication, and delivery of Downlabs services, including AI product development, browser extensions, web platforms, mobile apps, automation systems, and related support.

2. Information We Collect

  • Contact details such as name, business email, company, and phone number.
  • Project information you share, including goals, technical requirements, timelines, and content provided for execution.
  • Operational and usage information needed to secure, support, and improve our services.
  • Billing and contractual data required for proposals, invoicing, and compliance.

3. How We Use Information

  • To respond to inquiries and schedule consultations.
  • To scope, deliver, and support contracted projects.
  • To provide updates, incident communication, and service notices.
  • To improve delivery quality, reliability, and security controls.
  • To meet legal, financial, and contractual obligations.

4. AI and Automation Data Handling

For AI and automation engagements, data may be processed by approved infrastructure and model providers chosen for the project. We apply least-privilege access, environment separation, and practical safeguards to reduce exposure risk. We do not sell client data.

5. Sharing and Subprocessors

We may share data with trusted subprocessors needed for hosting, analytics, communication, payment, monitoring, and deployment. These providers are selected for security and reliability and are used only for service delivery purposes.

6. Data Retention

We retain personal data only as long as needed for the purposes above, including contract performance, legitimate business operations, and legal compliance. Retention periods vary by data type and project obligations.

7. Security Measures

We use industry-aligned technical and organizational controls, such as access restrictions, credential hygiene, encrypted transport where available, and environment-level separation. No method of transmission or storage is completely risk-free, but we continuously improve safeguards.

8. Your Rights

Depending on your location, you may request access, correction, deletion, or restriction of personal data processing. To make a request, contact us and include enough detail for verification.

9. Policy Updates

We may update this policy to reflect legal, technical, or operational changes. Updates become effective when published on this page, unless a later date is stated.