Privacy Policy.

This Privacy Policy applies to websites operated by Labelbees Inc. (“Labelbees,” “we,” “us,” or “our”), the Labelbees platform and related services, requests for demos or private-beta access, the Labelbees startup program, and ecosystem-partner applications (collectively, the “Services”).

This Policy does not apply to third-party websites or services that operate under their own privacy policies.

Labelbees as a business or controller

Labelbees determines how personal information is handled when you visit our website, contact us, apply to a program, create an account, or interact with us as a business representative.

Labelbees as a service provider or processor

When an organization uses the platform to process Customer Content, Labelbees processes that content on the organization’s instructions and under the applicable agreement. If your information appears in Customer Content controlled by a Labelbees customer, direct your request to that customer first. We will assist the customer as required by applicable law and contract.

Information you provide

• Contact and professional information: name, work email, company, job title, company location, website, and communications.
• Account information: organization membership, account identifiers, roles, permissions, authentication information, and account settings.
• Demo and access requests: information about your product, available or required data, intended workflow, and desired outcome.
• Startup applications: company stage, team size, funding, investors or affiliations, domain, data and model setup, current constraints, intended usage, continuation plans, and optional case-study interest.
• Ecosystem-partner applications: institution type, portfolio or founder-network size, portfolio focus, relevant company estimates, startup needs, and proposed partnership structure.
• Support and feedback: support requests, survey responses, interview notes, feature requests, and other information you voluntarily provide.

Customer Content

Customers may submit or connect video, images, audio, sensor streams, telemetry, datasets, annotations, instructions, prompts, model inputs and outputs, analytics, and other content to the Services. Customer Content may contain personal information depending on what the customer chooses to process.

Connection information

We collect non-secret configuration information such as provider name, bucket name, region, project identifier, endpoint details, connection status, and lifecycle events. Credential values are handled separately as described in Connections and credentials.

Information collected automatically

When you use the Services, we may collect IP address, approximate location derived from IP address, browser and device details, operating system, referring pages, pages viewed, clicks, scrolling activity, session duration, feature interactions, job activity, errors, performance data, authentication events, and security and audit logs.

Information from other sources

We may receive business contact information and relevant portfolio context from referral partners, customers, public company sources, event organizers, or service providers. We may also receive technical response data from storage, model, and verification providers configured for a customer workflow.

We use information to:

• Provide, operate, maintain, and secure the Services.
• Create accounts, manage roles and permissions, and authenticate users.
• Process Customer Content according to customer instructions.
• Connect customer-selected storage, models, APIs, and other services.
• Respond to inquiries, review applications, provide support, and manage business relationships.
• Monitor performance, diagnose errors, prevent abuse, investigate security events, and maintain audit records.
• Measure website usage and improve website experience with consent where required.
• Analyze service telemetry, aggregated or de-identified usage information, and voluntarily submitted feedback to improve the Services.
• Enforce agreements, protect rights and safety, comply with law, and resolve disputes.
• Send service-related communications and, where permitted, information about Labelbees offerings. You may opt out of marketing messages.

Where applicable law requires a legal basis for processing, Labelbees relies on steps taken at your request before entering into a contract, performance of a contract, legitimate interests, compliance with legal obligations, or consent.

Customers control what Customer Content is submitted or connected to the platform and which workflows process that content. Customers are responsible for providing appropriate notices, obtaining necessary permissions, and establishing a lawful basis for the Customer Content they direct Labelbees to process.

Labelbees sends Customer Content to a third-party model provider only when a customer configures or selects that provider for a workflow. The provider’s processing is governed by the customer’s configuration, the applicable agreement, and the provider’s terms.

Selected outputs may be routed to domain experts, trained reviewers, or specialized verification providers when configured or requested for the customer workflow. Labelbees uses contractual and access controls designed to limit processing to the assigned purpose.

Customers may export or delete Customer Content through available platform controls. Labelbees may retain limited account, connection, security, and audit metadata after content deletion as described in Data retention.

When customers connect external storage, model providers, APIs, or other services, Labelbees securely stores the credentials required to operate those connections. Credentials are encrypted, access is restricted to authorized systems, and activity involving credentials is logged. Where supported, Labelbees uses temporary credentials instead of long-lived access keys.

When a customer removes a connection, its stored credential is removed without a recovery option. Labelbees may retain non-secret connection metadata and audit records for security and operational purposes.

Our public website uses cookies and similar technologies to operate the site, remember preferences, understand usage, and improve website experience. Cookiebot presents cookie choices and is used to manage consent. Where consent is required, nonessential analytics technologies should not load until the user grants the relevant choice.

Google Analytics and Google Tag Manager

We use Google Analytics to understand website traffic, approximate location, device and browser characteristics, navigation, and engagement. Google Tag Manager helps manage website tags.

Microsoft Clarity

We use Microsoft Clarity on the public website to understand clicks, scrolling, navigation, and website sessions. Clarity may reconstruct website interactions as session recordings. Input-box content is masked by Clarity. Clarity is not used inside the authenticated Labelbees platform.

Your choices

You can use the Cookiebot preference tool to accept, reject, or change nonessential cookie choices. You may also use browser controls to delete or block cookies. Blocking cookies may affect some website functionality.

We may disclose information to:

• Infrastructure providers: providers that support platform hosting, databases, infrastructure, logging, and credential management.
• Business communications: providers that support business email and collaboration.
• Website providers: analytics, session-insight, tag-management, and consent-management providers used to measure and operate our public website.
• Customer-selected providers: storage providers, model providers, custom endpoints, APIs, and other services configured by the customer.
• Verification participants: authorized experts, reviewers, and specialized verification providers involved in a configured workflow.
• Professional advisers: lawyers, auditors, insurers, and other advisers subject to appropriate duties.
• Authorities and protected parties: when reasonably necessary to comply with law, respond to legal process, protect rights and safety, investigate misuse, or enforce agreements.
• Transaction participants: in connection with financing, merger, acquisition, restructuring, or sale of all or part of the business, subject to appropriate confidentiality protections.
• With your direction or consent: when you instruct us to disclose information or provide consent.

No sale of personal information

Labelbees does not sell personal information for money. Labelbees does not use personal information for targeted advertising. Our analytics providers may process online identifiers and internet activity under their own terms. Where applicable law treats analytics disclosures as a sale or sharing, you may reject analytics cookies through Cookiebot or contact us to exercise an applicable opt-out right.

We retain personal information only for as long as reasonably necessary to provide and secure our Services, manage accounts and business relationships, maintain required audit records, comply with legal obligations, and resolve disputes. Retention may vary depending on the type of information, the status of the relationship, contractual requirements, and applicable law.

When a customer removes a BYOK connection, the associated credential is permanently deleted from our secrets-management system. We may retain limited non-secret connection metadata and audit records for security and operational purposes.

We may retain aggregated or de-identified information that cannot reasonably identify an individual.

Labelbees uses administrative, technical, and organizational safeguards designed to protect personal information and Customer Content. These safeguards include encryption in transit and at rest, access controls, monitoring, and restrictions on internal access.

Labelbees uses cloud infrastructure and other service providers to operate and secure the Services. These providers process information on behalf of Labelbees or as directed by the customer.

No transmission, storage, or security measure is completely secure, and Labelbees cannot guarantee absolute security. If you believe your account or information may have been compromised, contact privacy@labelbees.com.

Depending on your location and applicable law, you may have the right to:

• Request access to personal information we maintain about you.
• Request correction of inaccurate personal information.
• Request deletion of personal information, subject to lawful exceptions.
• Restrict or object to certain processing of personal information.
• Request a portable copy of certain personal information.
• Opt out of certain sales, sharing, or targeted advertising.
• Limit certain uses of sensitive personal information.
• Withdraw consent where processing relies on consent.
• Appeal a decision concerning a privacy request where applicable.
• Receive equal service and pricing without unlawful discrimination for exercising privacy rights.

To submit a request, email privacy@labelbees.com. Describe the request and the Labelbees service or organization involved. We may request information necessary to verify your identity and authority. Authorized agents may submit requests where permitted by law, subject to verification.

Where applicable, you may also have the right to lodge a complaint with the privacy or data-protection authority in your jurisdiction.

If your information appears in Customer Content controlled by a Labelbees customer, contact that customer. Labelbees will support verified customer instructions as required by law and contract.

This section supplements the rest of this Policy for California residents where the California Consumer Privacy Act, as amended, applies.

Sources include you, your organization, referral partners, public business sources, devices and browsers, customers that control Customer Content, and service providers. We disclose categories as described in How we disclose information and retain them as described in Data retention.

Labelbees does not use or disclose sensitive personal information for purposes that require a right to limit under applicable California law. Labelbees does not sell or share personal information, including personal information of consumers under 16 years of age.

Business users and children

The Services are intended for business use and are not directed to individuals under 18 years of age. Labelbees does not knowingly collect personal information directly from children. Customers are responsible for ensuring that Customer Content they provide to the Services is collected and processed in accordance with applicable law.

International processing

Labelbees and its service providers may process information in the United States and other countries where they operate. Privacy and data-protection laws in those locations may differ from those in your jurisdiction. Where required, Labelbees uses appropriate safeguards for international transfers.

Third-party links and services

The Services may link to or integrate with third-party websites, storage providers, model providers, APIs, and other services. Their privacy practices are governed by their own notices and agreements. Review those terms before configuring or using a third-party service.

Changes to this Policy

We may update this Privacy Policy as our Services and practices change. We will post the revised version with an updated effective date. Where required, we will provide additional notice of material changes.

Questions, concerns, and privacy requests may be directed to: