Privacy Policy

Introduction

Automation Labz ("Automation Labz," "we," "us," or "our") operates automationlabz.com, a free, no-login automation diagnostic for small and mid-sized business operators. This Privacy Policy explains what information we collect when you use the service, how we use and share it, how long we keep it, and the rights you have over your data.

If you have any questions about this policy or want to exercise a privacy right, email support@automationlabz.com.

Information we collect

We collect only what we need to run the audit, generate your blueprints, optionally match you with a partner, and operate the site. The audit ID itself acts as a session token — we do not create user accounts and do not store passwords.

Information you submit

When you use the audit, you provide:

• Your business URL.
• Your answers to qualification questions, including any free-text "other" fields.
• Contact details on the lead form: name, email, and company name.
• If you opt into the Expert Match path: phone number and decision-maker status.

Information from your website

When you submit a URL, our system reads publicly available content on that URL. We do not access or attempt to access login-protected pages, gated content, or anything not visible to an ordinary visitor. From public content we may capture company name, industry signals, employee size estimates, and references to technology tools your business uses.

Technical information

When you use the site, we automatically collect technical metadata: IP address, user agent, referrer, and timestamps. We use this information for security, abuse prevention, and to maintain evidence of consent required by laws such as the Telephone Consumer Protection Act (TCPA) and 10DLC messaging rules.

Cookies and similar technologies

We use cookies, browser storage, pixels, and similar technologies on our site through the analytics and advertising platforms described in the Cookies and trackingsection below. We also store your consent preferences in your browser's local storage under the key al_consent_v1 so the choice persists across visits.

How we use information

We use the information we collect to:

• Deliver the audit and generate your blueprints.
• Match qualified users with one vetted partner agency, if you opt into the Expert Match path.
• Send transactional notifications, such as confirming a PDF has been generated or that a partner has been notified.
• Improve the service using aggregated, anonymized usage signals, including session recordings with all text and inputs masked.
• Maintain compliance evidence required under the TCPA, 10DLC messaging rules, and similar consumer protection regulations.
• Measure advertising effectiveness and serve relevant ads to you on Google and Meta platforms, only if you have granted advertising consent.
• Protect the security and integrity of the site and prevent abuse.
• Comply with our legal obligations, including responding to lawful requests from government authorities.

How we share information

We do not sell your data to data brokers. We share information only in the situations described below.

Vetted partners (Expert Match path)

If you opt into the Expert Match path, we share your audit, selected automation blueprints, and contact details with one vetted partner agency whose specialty matches your situation. The partner contacts you directly to discuss a potential build engagement. Vetted partners are bound by a separate data processing agreement we maintain with each of them.

After this hand-off, the partner is an independent business and handles the data they receive under their own privacy practices and obligations. We retain a copy of what we shared for our records.

Service providers

We use a small set of service providers to operate the site. These providers act on our instructions and are bound by their own contractual obligations to protect data:

• Supabase — database hosting (US-based).
• Vercel — web hosting, first-party Web Analytics, and Speed Insights performance monitoring (US-based).
• Anthropic — AI processing of audit inputs to generate blueprints.
• Email delivery service — for transactional notifications.

Analytics and advertising platforms

We share certain information with Google, Microsoft, and Meta (Facebook) for analytics and, if you have consented, advertising measurement. See the Cookies and tracking section below for full details on what is shared and how to opt out.

Legal compliance

We may disclose information if required to do so by law, by a valid subpoena, by a lawful government request, or where we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

Cookies and tracking

Our consent model

Different categories of cookies and tracking technologies are treated differently:

• Necessary. Always on. These are the cookies and storage needed to make the site work — for example, the session state for your audit and the consent preference stored under al_consent_v1. You cannot opt out of these without breaking the service.
• Analytics.On by default for visitors in the United States, off by default for visitors who send the Global Privacy Control (GPC) signal. You can turn analytics off at any time using the Cookie preferences link or the "Do not sell or share my info" link in our footer.
• Advertising. Off by default. We only fire advertising tags if you explicitly opt in via the Cookie preferences panel.
• Functional. Reserved for future personalization features. Currently unused.

When you first visit the site, a notice appears informing you that analytics cookies are in use. The notice does not block your access. You can dismiss it, ignore it, or click "Customize" to adjust your preferences before continuing.

Consent Mode v2 (Google)

We use Google's Consent Mode v2 framework. When you have not granted advertising consent, the Google tag sends anonymized, cookieless pings to Google only. When you grant advertising consent, full Google Ads and remarketing cookies are activated.

Vercel Web Analytics and Speed Insights

We use Vercel Web Analytics for first-party traffic analysis and Vercel Speed Insights for performance monitoring. Neither uses third-party cookies and neither collects personally identifiable information. Both are excluded from administrative pages on the site.

Google Analytics 4

We use Google Analytics 4 (GA4) to understand which pages are viewed and how visitors navigate the site. GA4 is configured as analytics only: Google Signals is disabled, Google Ads personalization is disabled, and IP addresses are anonymized. GA4 fires only on marketing pages and does not run on administrative pages.

You can manage your Google ad personalization at adssettings.google.com.

Microsoft Clarity

We use Microsoft Clarity for session recording and heatmap analysis. Clarity helps us see how visitors interact with the site at the level of clicks, scrolls, and navigation paths, which lets us fix broken layouts and improve the audit experience.

Recordings are hardened for privacy:

• All text content is masked. We do not see the words on the pages you visit or any text you encounter.
• All form inputs are masked by default. We do not see what you type — including URLs, email addresses, phone numbers, names, or any other information you enter.
• Clarity does not run on administrative pages, and it does not run if you have opted out of analytics or sent a Global Privacy Control signal.

See Microsoft's privacy documentation at learn.microsoft.com/en-us/clarity for more on how Clarity processes data.

Google Ads (advertising)

We use Google Ads for conversion tracking and to build remarketing audiences. Through Google advertising cookies, certain information is shared with Google, including your IP address, device identifiers, browsing behavior on our site, and conversion events such as completing an audit or submitting a lead form. Google Ads tracking only fires if you have granted advertising consent.

Meta (Facebook) Pixel

We use the Meta Pixel for conversion tracking, audience building, and retargeting on Facebook and Instagram. Through the Pixel, certain information is shared with Meta, including your IP address, device identifiers, browsing behavior on our site, and conversion events. The Pixel only fires if you have granted advertising consent.

You can manage your Meta advertising preferences in your Facebook account settings.

Other tracking

We do not use cross-site tracking beyond the platforms listed above. We do not share data with data brokers or other ad networks not listed in this policy.

How to opt out

You have several ways to opt out of analytics and advertising:

• Click Cookie preferences in our footer to open the consent panel, where you can toggle analytics or advertising off at any time.
• Click Do not sell or share my info in our footer for a one-click opt-out of all non-necessary tracking, including analytics, advertising, and any future personalization features.
• Send a Global Privacy Control (GPC) signal from your browser. We honor GPC signals automatically: GPC visitors are opted out of analytics and advertising on first visit and the consent notice is not displayed.
• Use the platform-specific controls linked above for Google and Meta.
• Block third-party cookies in your browser, or use your browser's Do Not Track setting.
• Use industry opt-out tools such as the Network Advertising Initiative at thenai.org/opt-out and the Digital Advertising Alliance at optout.aboutads.info.

Do Not Sell or Share My Personal Information

We do not sell personal information in the traditional sense of receiving money for your data. However, under the California Consumer Privacy Act (CCPA) as amended by the CPRA, the definitions of "sale" and "sharing" are broad. Our use of advertising cookies that share identifiers with Google and Meta for cross-context behavioral advertising may qualify as sharing under those definitions. Similar rules apply under the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), the Connecticut Data Privacy Act (CTDPA), the Utah Consumer Privacy Act (UCPA), and the Texas Data Privacy and Security Act (TDPSA).

If you are a resident of one of these states, you can opt out by:

• Clicking the Do not sell or share my info link in our footer. This is a one-click opt-out of all non-necessary tracking, including analytics, advertising, and any future personalization features.
• Sending a Global Privacy Control (GPC) signal from a browser that supports it. We honor GPC automatically.
• Using the platform-level and browser-level controls described in the Cookies and tracking section.
• Emailing support@automationlabz.com with the subject line "Do Not Sell or Share" and the email address you use on our site.

We will process opt-out requests within the timeframes required by applicable law.

Your rights

Depending on where you live, you may have the following rights over your personal information:

• Right to know. Request a copy of the personal information we hold about you.
• Right to delete. Request that we delete the personal information we hold about you.
• Right to correct. Request that we correct inaccurate personal information.
• Right to portability. Receive a copy of your data in a portable format.
• Right to opt out of targeted advertising. Opt out of our sharing of personal information with Google and Meta for cross-context behavioral advertising.
• Right against discrimination. We will not deny you the service or treat you differently because you exercised a privacy right.

These rights are recognized in different forms by state laws including CCPA/CPRA (California), VCDPA (Virginia), CPA (Colorado), CTDPA (Connecticut), UCPA (Utah), and TDPSA (Texas). Users in the European Union, the United Kingdom, and other jurisdictions with comprehensive privacy regimes may have additional rights, including the right to lodge a complaint with a supervisory authority.

We are an Illinois company. We do not collect biometric data and are therefore not subject to the operative provisions of the Illinois Biometric Information Privacy Act (BIPA), but we note its existence for transparency.

How to exercise your rights

To exercise any of these rights, email support@automationlabz.com from the email address you used on our site, or include enough information for us to verify your identity. We will respond within the timeframe required by applicable law. We may need to ask for additional information to verify your request.

You may also authorize an agent to make a request on your behalf. We will require documentation that establishes the agent's authority and may require you to verify your own identity directly with us.

Security

We use industry-standard practices to protect the information we collect. Data is encrypted in transit using HTTPS and at rest in our hosted infrastructure. Access to user data inside our organization is limited to personnel who need it to operate the service.

No security solution is perfect. If we discover a security incident that affects your personal information, we will notify you and any applicable authorities as required by law.

Data retention

We retain information only as long as we need it:

• Audits. Retained for 12 months from the date the audit was created.
• Lead records. Retained for 24 months from creation, or 12 months from your last engagement with us, whichever is later.
• Partner-shared data. Once shared with a partner, the partner holds a copy under their own retention policy.
• Analytics and recording data. Retained by Google Analytics, Microsoft Clarity, and Meta under their respective retention policies. Clarity recordings expire after 30 days by default; GA4 data is retained for 14 months; Meta advertising cookies are retained up to 540 days.
• Compliance records. Some records may be retained longer where required to demonstrate compliance with the TCPA, 10DLC, or other consumer protection rules.

You may request earlier deletion at any time by emailing support@automationlabz.com.

International users

Automation Labz is based in the United States and primarily serves the US market. If you access the site from outside the US, including from the European Union or the United Kingdom, your information will be transferred to, stored in, and processed in the United States. By using the service from outside the United States, you consent to this transfer and processing.

Our consent model is calibrated for US privacy laws. If you are in the European Union, the United Kingdom, or another jurisdiction with stricter consent requirements, you should treat the analytics category as opt-in rather than opt-out: use the Cookie preferences panel to opt out of analytics before continuing to use the site.

Children

The service is not directed to anyone under the age of 18. We do not knowingly collect personal information from minors. If you are a parent or guardian and discover that your child has submitted information through the site, contact support@automationlabz.com and we will delete that information promptly.

Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. For material changes, we will provide prominent notice on the site for at least 30 days before the changes take effect.

Contact

For privacy questions, requests to exercise your rights, opt-out requests, or any other privacy concern, email support@automationlabz.com.

Automation Labz
Illinois, United States