Loading…
Consolidate the website Privacy Policy into the Legal Hub: the polished, in-effect notice previously served at /privacy is now the manifest source of truth (the standalone route redirects here).
Initial version — no prior version to compare.
lab358, Inc. is a Delaware public benefit corporation, with offices at 11 Ocean Street, Newburyport, MA 01950. This site, https://lab358.ai, is operated by lab358. References to "we," "us," and "our" mean lab358, Inc. You can reach us about privacy at legal@lab358.ai.
This notice covers the lab358.ai website and the early-access form embedded on it. It does not cover the lab358 inference product on AWS Marketplace; that product will be governed by separate terms and a separate privacy notice published before launch.
We do not collect special-category data, payment information, or model weights through this site. The lab358 inference product has its own data-handling commitments described in the section on AWS Marketplace and entitlement-gated deployment below.
We do not sell personal data, and we do not share form submissions with third parties for marketing. We do not use your personal data for automated decision-making that produces legal or similarly significant effects about you.
Where the EU or UK GDPR (or a similar law) applies to our processing, we rely on the following legal bases:
The website is built on Next.js and operated through standard cloud infrastructure. Form submissions are transmitted to the lab358 gateway (operated by lab358), which is the system of record for inbound inquiries; qualified inquiries may be forwarded, server-side, into HubSpot (HubSpot, Inc.), our customer-relationship-management platform. The HubSpot integration runs server-side on the gateway, not in the visitor's browser. Analytics, if consented to, are processed through Google Tag Manager and Google Analytics (Google LLC). Each of these providers operates under its own data-processing terms.
We are based in the United States, and our service providers (HubSpot and Google) process data in the United States. If you access the Site from the European Economic Area, the United Kingdom, or Switzerland, your personal data may be transferred to the United States. Where a transfer mechanism is required, these providers make safeguards available, such as the EU–U.S. Data Privacy Framework (with its UK and Swiss extensions) and the European Commission's Standard Contractual Clauses. You may contact us at legal@lab358.ai for more information about the safeguards that apply.
We retain early-access and inquiry data for up to 24 months after our most recent substantive contact with you, unless you ask us to delete it sooner or we are required to keep it longer to meet a legal obligation. Google Analytics data is retained for 2 months at the event level and 14 months at the user level, and analytics cookies expire as described in our Cookie Policy. You can ask us to delete your record at any time by emailing legal@lab358.ai.
Depending on where you live, you may have rights to:
To exercise any of these, email legal@lab358.ai. We honor reasonable requests on a good-faith basis and will respond within the timeframe required by applicable law.
If you are in the EEA, the UK, or Switzerland, you also have the right to lodge a complaint with your local data-protection supervisory authority. If you are a California resident (or in another U.S. state with a comprehensive privacy law), you may have rights to know, access, correct, and delete your personal information and to opt out of its "sale" or "sharing"; we do not sell or share personal information as those terms are defined under those laws, and we will not discriminate against you for exercising your rights.
The lab358 inference product, when listed on AWS Marketplace, ships as an AWS Marketplace container product — a Helm chart that deploys into the customer's own Amazon EKS cluster, inside their AWS account. The container images are distributed through AWS Marketplace with entitlement-gated access, so only entitled subscribers can pull them, and model weights stage in the customer's own private, access-blocked, at-rest-encrypted S3 bucket. lab358 does not have ambient access to the customer's traffic, logs, or VPC. (This entitlement-gating and at-rest encryption protect distribution; they are not cryptographic weight-sealing, which is a separate, gated confidential-compute path.)
In this delivery model, lab358 does not receive customer prompts, completions, attached documents, end-user identifiers, or CloudWatch / VPC telemetry through the inference path. The only data reaching lab358 is limited license / entitlement metadata and content-free AWS Marketplace metering; the platform license is verified offline and there is no continuous phone-home. The full terms governing that posture will be published with the AWS Marketplace listing.
The above describes the intended product shape and is subject to the final AWS Marketplace listing and accompanying terms.
We may update this notice. The "Last updated" date at the top reflects the most recent revision. Material changes will be highlighted before they take effect.
Privacy and data-protection questions: legal@lab358.ai. General contact: hello@lab358.ai.