Privacy Policy

Introduction

Automation Labz ("Automation Labz," "we," "us," or "our") operates automationlabz.com, a free, no-login automation diagnostic for small and mid-sized business operators. This Privacy Policy explains what information we collect when you use the service, how we use and share it, how long we keep it, and the rights you have over your data.

If you have any questions about this policy or want to exercise a privacy right, email support@automationlabz.com.

Information we collect

We collect only what we need to run the audit, generate your blueprints, optionally match you with a partner, and operate the site. The audit ID itself acts as a session token — we do not create user accounts and do not store passwords.

Information you submit

When you use the audit, you provide:

• Your business URL.
• Your answers to qualification questions, including any free-text "other" fields.
• Contact details on the lead form: name, email, and company name.
• If you opt into the Expert Match path: phone number and decision-maker status.

Information from your website

When you submit a URL, our system reads publicly available content on that URL. We do not access or attempt to access login-protected pages, gated content, or anything not visible to an ordinary visitor. From public content we may capture company name, industry signals, employee size estimates, and references to technology tools your business uses.

Technical information

When you use the site, we automatically collect technical metadata: IP address, user agent, referrer, and timestamps. We use this information for security, abuse prevention, and to maintain evidence of consent required by laws such as the Telephone Consumer Protection Act (TCPA) and 10DLC messaging rules.

Cookies and advertising identifiers

We use cookies, pixels, and similar technologies on our site through the analytics and advertising platforms described in the Cookies and tracking section below.

How we use information

We use the information we collect to:

• Deliver the audit and generate your blueprints.
• Match qualified users with one vetted partner agency, if you opt into the Expert Match path.
• Send transactional notifications, such as confirming a PDF has been generated or that a partner has been notified.
• Improve the service using aggregated, anonymized usage signals.
• Maintain compliance evidence required under the TCPA, 10DLC messaging rules, and similar consumer protection regulations.
• Measure advertising effectiveness and serve relevant ads to you on Google and Meta platforms.
• Protect the security and integrity of the site and prevent abuse.
• Comply with our legal obligations, including responding to lawful requests from government authorities.

How we share information

We do not sell your data to data brokers. We share information only in the situations described below.

Vetted partners (Expert Match path)

If you opt into the Expert Match path, we share your audit, selected automation blueprints, and contact details with one vetted partner agency whose specialty matches your situation. The partner contacts you directly to discuss a potential build engagement. Vetted partners are bound by a separate data processing agreement we maintain with each of them.

After this hand-off, the partner is an independent business and handles the data they receive under their own privacy practices and obligations. We retain a copy of what we shared for our records.

Service providers

We use a small set of service providers to operate the site. These providers act on our instructions and are bound by their own contractual obligations to protect data:

• Supabase — database hosting (US-based).
• Vercel — web hosting and first-party analytics (US-based).
• Anthropic — AI processing of audit inputs to generate blueprints.
• Email delivery service — for transactional notifications.

Advertising platforms

We share certain information with Google and Meta (Facebook) for advertising measurement and audience building. See the Cookies and tracking section below for full details on what is shared and how to opt out.

Legal compliance

We may disclose information if required to do so by law, by a valid subpoena, by a lawful government request, or where we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

Cookies and tracking

We use the following platforms that may set cookies or use similar technologies on your browser or device.

Vercel Web Analytics

We use Vercel Web Analytics for first-party traffic analysis. It does not use third-party cookies and does not collect personally identifiable information. We use it to understand which pages are viewed and how users navigate the site.

Google Ads and the Google tag

We use Google Ads, including the Google tag (gtag), for conversion tracking and for building remarketing audiences. Through Google advertising cookies, certain information is shared with Google, including your IP address, device identifiers, browsing behavior on our site, and conversion events such as completing an audit or submitting a lead form.

You can manage your Google ad personalization at adssettings.google.com.

Meta (Facebook) Pixel

We use the Meta Pixel for conversion tracking, audience building, and retargeting on Facebook and Instagram. Through the Pixel, certain information is shared with Meta, including your IP address, device identifiers, browsing behavior on our site, and conversion events.

You can manage your Meta advertising preferences in your Facebook account settings.

Other tracking

We do not use cross-site tracking beyond Google and Meta. We do not share data with data brokers or other ad networks not listed in this policy.

How to opt out

You have several ways to opt out of advertising tracking:

• Use the platform-specific controls linked above for Google and Meta.
• Block third-party cookies in your browser, or use your browser's Do Not Track setting.
• Use industry opt-out tools such as the Network Advertising Initiative at thenai.org/opt-out and the Digital Advertising Alliance at optout.aboutads.info.
• Send a Global Privacy Control (GPC) signal from your browser. We honor GPC signals where transmitted, and we treat them as an opt-out of the sharing of personal information for cross-context behavioral advertising for users in jurisdictions where this right applies.

Do Not Sell or Share My Personal Information

We do not sell personal information in the traditional sense of receiving money for your data. However, under the California Consumer Privacy Act (CCPA) as amended by the CPRA, the definitions of "sale" and "sharing" are broad. Our use of advertising cookies that share identifiers with Google and Meta for cross-context behavioral advertising may qualify as sharing under those definitions. Similar rules apply under the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), the Connecticut Data Privacy Act (CTDPA), the Utah Consumer Privacy Act (UCPA), and the Texas Data Privacy and Security Act (TDPSA).

If you are a resident of one of these states, you can opt out by:

• Sending a Global Privacy Control (GPC) signal from a browser that supports it.
• Using the platform-level and browser-level controls described in the Cookies and tracking section.
• Emailing support@automationlabz.com with the subject line "Do Not Sell or Share" and the email address you use on our site.

We will process opt-out requests within the timeframes required by applicable law.

Your rights

Depending on where you live, you may have the following rights over your personal information:

• Right to know. Request a copy of the personal information we hold about you.
• Right to delete. Request that we delete the personal information we hold about you.
• Right to correct. Request that we correct inaccurate personal information.
• Right to portability. Receive a copy of your data in a portable format.
• Right to opt out of targeted advertising. Opt out of our sharing of personal information with Google and Meta for cross-context behavioral advertising.
• Right against discrimination. We will not deny you the service or treat you differently because you exercised a privacy right.

These rights are recognized in different forms by state laws including CCPA/CPRA (California), VCDPA (Virginia), CPA (Colorado), CTDPA (Connecticut), UCPA (Utah), and TDPSA (Texas). Users in the European Union, the United Kingdom, and other jurisdictions with comprehensive privacy regimes may have additional rights, including the right to lodge a complaint with a supervisory authority.

We are an Illinois company. We do not collect biometric data and are therefore not subject to the operative provisions of the Illinois Biometric Information Privacy Act (BIPA), but we note its existence for transparency.

How to exercise your rights

To exercise any of these rights, email support@automationlabz.com from the email address you used on our site, or include enough information for us to verify your identity. We will respond within the timeframe required by applicable law. We may need to ask for additional information to verify your request.

You may also authorize an agent to make a request on your behalf. We will require documentation that establishes the agent's authority and may require you to verify your own identity directly with us.

Security

We use industry-standard practices to protect the information we collect. Data is encrypted in transit using HTTPS and at rest in our hosted infrastructure. Access to user data inside our organization is limited to personnel who need it to operate the service.

No security solution is perfect. If we discover a security incident that affects your personal information, we will notify you and any applicable authorities as required by law.

Data retention

We retain information only as long as we need it:

• Audits. Retained for 12 months from the date the audit was created.
• Lead records. Retained for 24 months from creation, or 12 months from your last engagement with us, whichever is later.
• Partner-shared data. Once shared with a partner, the partner holds a copy under their own retention policy.
• Advertising data. Retained by Google and Meta under their respective retention policies, generally up to 540 days for advertising cookies.
• Compliance records. Some records may be retained longer where required to demonstrate compliance with the TCPA, 10DLC, or other consumer protection rules.

You may request earlier deletion at any time by emailing support@automationlabz.com.

International users

Automation Labz is based in the United States and primarily serves the US market. If you access the site from outside the US, including from the European Union or the United Kingdom, your information will be transferred to, stored in, and processed in the United States. By using the service from outside the United States, you consent to this transfer and processing.

Children

The service is not directed to anyone under the age of 18. We do not knowingly collect personal information from minors. If you are a parent or guardian and discover that your child has submitted information through the site, contact support@automationlabz.com and we will delete that information promptly.

Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. For material changes, we will provide prominent notice on the site for at least 30 days before the changes take effect.

Contact

For privacy questions, requests to exercise your rights, opt-out requests, or any other privacy concern, email support@automationlabz.com.

Automation Labz
Illinois, United States