Privacy Policy

Last updated October 12, 2026

Connect Labs (“we”, “us”) is a marketing studio for brands. This policy explains what we collect when you use labs.ltd, why, and the choices you have.

What we collect

• Your account. When you sign in with Google we receive your name, email address and profile picture. We use them to sign you in and to show which brands you can access.
• Brand content you add or connect. Product catalogs (for example a Shopify store’s public product feed), images you upload, brand colours and fonts, and the emails, images and texts you create.
• Accounts you connect. If you connect Klaviyo, Google Analytics, Meta or Google Ads, we store the access you grant and read the data needed to show reports and to send what you ask us to send.
• Usage. Basic logs of requests and errors, used to keep the service running and secure.

How we use it

Only to provide Connect Labs: to build and show your studios, generate the content you request, send campaigns you approve through your own accounts, and keep the service secure. We do not sell personal information and we do not use your data to advertise to you.

AI processing

To write copy and make images, the content you provide (product facts, images, instructions) is sent to our AI providers, Anthropic and OpenAI, under terms that do not allow them to train their models on it.

Google user data

Connect Labs’ use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google sign-in only to identify you, and Google Analytics data only to show your own reports inside your workspace. We do not transfer it to others except as needed to provide those features, and we never use it for advertising.

Who we share it with

Service providers that run Connect Labs on our behalf: Vercel (hosting), Supabase (database and storage), WorkOS (sign-in), Anthropic and OpenAI (AI), and the platforms you connect when you ask us to act in them (for example Klaviyo when you send an email). We share information if the law requires it.

Keeping and deleting it

We keep your data while your account or your brand’s workspace is active. Disconnect an integration at any time in Settings. To delete your account or a workspace’s data, email us and we will do it within 30 days.

Security

Data is encrypted in transit, credentials for connected accounts are stored encrypted, and each brand’s data is isolated from every other brand’s.

Your rights

You can ask to see, correct, export or delete your personal information, and California and EU/UK residents have the rights their laws give them. Email us and we will respond within 30 days.

Contact

Questions about this policy: privacy@labs.ltd.