Skip to main content

Privacy Policy

Last updated:

1. Who we are

lab358, Inc. is a Delaware C-Corp, with offices at 11 Ocean Street, Newburyport, MA 01950. This site, https://lab358.ai, is operated by lab358. References to “we,” “us,” and “our” mean lab358, Inc. You can reach us about privacy at legal@lab358.ai.

2. Scope

This notice covers the lab358.ai website and the early-access form embedded on it. It does not cover the lab358 inference product on AWS Marketplace; that product will be governed by separate terms and a separate privacy notice published before launch.

3. Data we collect

  • Contact & early-access form — when you submit the form, we receive the name, work email, company, and optional use-case text you provide. Form submissions are stored in HubSpot, our CRM, scoped to inbound inquiries.
  • Email — if you email us directly (for example, michael@lab358.ai), we retain the contents of that correspondence.
  • Site analytics — with your consent (via the cookie banner) we use Google Tag Manager and Google Analytics to record aggregate, pseudonymous usage data: page views, referrers, approximate location derived from IP, device and browser metadata. Declining the banner suppresses these tags.
  • Cookies & local storage — we store your cookie-banner choice in your browser's local storage (a strictly necessary technology, not a cookie) so we can honor it on return visits. Analytics cookies are set only when you opt in. See our Cookie Policy for the full inventory.

We do not collect special-category data, payment information, or model weights through this site. The lab358 inference product has its own data-handling commitments described under AWS Marketplace and weights-sealed deployment below.

4. How we use this data

  • Respond to inquiries and qualify early-access requests.
  • Send transactional follow-up about access cohorts and product availability.
  • Operate, secure, and improve the website.
  • Comply with legal obligations.

We do not sell personal data, and we do not share form submissions with third parties for marketing. We do not use your personal data for automated decision-making that produces legal or similarly significant effects about you.

6. Service providers

The website is built on Next.js and operated through standard cloud infrastructure. Form submissions are stored in HubSpot (HubSpot, Inc.), our customer-relationship-management platform. Analytics, if consented to, are processed through Google Tag Manager and Google Analytics (Google LLC). Each of these providers operates under its own data-processing terms.

7. International data transfers

We are based in the United States, and our service providers (HubSpot and Google) process data in the United States. If you access the Site from the European Economic Area, the United Kingdom, or Switzerland, your personal data may be transferred to the United States. Where a transfer mechanism is required, these providers make safeguards available, such as the EU–U.S. Data Privacy Framework (with its UK and Swiss extensions) and the European Commission's Standard Contractual Clauses. You may contact us at legal@lab358.ai for more information about the safeguards that apply.

8. Retention

We retain early-access and inquiry data for up to 24 months after our most recent substantive contact with you, unless you ask us to delete it sooner or we are required to keep it longer to meet a legal obligation. Google Analytics data is retained for 2 months at the event level and 14 months at the user level, and analytics cookies expire as described in our Cookie Policy. You can ask us to delete your record at any time by emailing legal@lab358.ai.

9. Your rights

Depending on where you live, you may have rights to:

  • access a copy of the personal data we hold about you;
  • correct inaccurate or incomplete data;
  • delete your data;
  • restrict or object to certain processing;
  • receive your data in a portable format; and
  • where processing is based on consent, withdraw that consent at any time (this does not affect processing already carried out).

To exercise any of these, email legal@lab358.ai. We honor reasonable requests on a good-faith basis and will respond within the timeframe required by applicable law.

If you are in the EEA, the UK, or Switzerland, you also have the right to lodge a complaint with your local data-protection supervisory authority. If you are a California resident (or in another U.S. state with a comprehensive privacy law), you may have rights to know, access, correct, and delete your personal information and to opt out of its “sale” or “sharing”; we do not sell or share personal information as those terms are defined under those laws, and we will not discriminate against you for exercising your rights.

10. AWS Marketplace and weights-sealed deployment

The lab358 inference product, when listed on AWS Marketplace, ships as a SageMaker model package that deploys inside the customer's own AWS account. AWS brokers the deployment so that the customer cannot pull our container image or model artifacts, and lab358 does not have ambient access to the customer's traffic, logs, or VPC.

In this delivery model, lab358 does not receive customer prompts, completions, attached documents, end-user identifiers, or CloudWatch / VPC telemetry through the inference path. The terms governing that posture, including the limited license / attestation telemetry lab358 does receive, will be published with the AWS Marketplace listing.

The above describes the intended product shape and is subject to the final AWS Marketplace listing and accompanying terms.

11. Changes

We may update this notice. The “Last updated” date at the top reflects the most recent revision. Material changes will be highlighted before they take effect.

12. Contact

Privacy and data-protection questions: legal@lab358.ai. General contact: michael@lab358.ai.