Privacy Policy

When you submit a request through our Request Board, we collect the information necessary to match you with relevant vendors. This includes your name, email address, company name and size, and your specific requirements around compliance needs, integration requirements, budget constraints, and decision timeline. You control what additional context you provide in free-text fields.

If you subscribe to receive updates about new tools or marketplace developments, we collect only your email address. When you contact us directly, we collect your name, email, and message content to respond appropriately.

We use Google Analytics 4 to understand how visitors navigate our Site. This service collects standard web analytics data including pages visited, time spent on the Site, browser and device information, approximate geographic location at the country or city level, referral sources, and interactions with features like the Request Board or filtering system. Google Analytics uses cookies for this tracking. You can opt out by installing the Google Analytics Opt-out Browser Add-on if you prefer not to be tracked.

Our Site uses two types of cookies. Essential cookies are required for core functionality like maintaining your session as you navigate between pages. Analytics cookies power the Google Analytics tracking described above. You can control cookie preferences through your browser settings, though disabling essential cookies may affect your ability to use certain features.

The primary purpose of collecting Request Board information is to facilitate meaningful introductions between buyers and relevant vendors. When you describe your requirements, we use that information to identify two or three tools that match your specific needs around company size, compliance requirements, integration compatibility, and budget range. This matching process allows us to provide vendors with full context about your situation rather than sending them anonymous leads.

We use contact information to respond to your inquiries, provide customer support, and send updates about new tools or marketplace developments if you've subscribed. We'll also notify you about material changes to our policies or services that affect how we handle your information.

Analytics data helps us improve the marketplace by revealing which tools generate the most interest, which content proves most valuable, and where users encounter friction in their journey. This insight guides our curation priorities and technical improvements. We also use this data to identify and resolve technical issues affecting performance.

In limited circumstances, we may use collected information to comply with legal obligations, protect our rights, or prevent fraud and abuse of the service.

When you submit a Request Board inquiry, we share your contact information and stated requirements with the two or three vendors whose tools match your needs. This includes your name, email address, company name and size, and the specific requirements you described around compliance, integrations, budget, and timeline. This sharing is the core value proposition of the Request Board—vendors receive qualified introductions with meaningful context rather than cold leads.

We work with several service providers to operate the marketplace. Airtable stores tool information and Request Board submissions on servers in the United States with GDPR-compliant data handling. Google Analytics 4 processes usage data for analytics purposes under their standard terms. Vercel hosts the website infrastructure with SOC 2 certification. When we launch vendor subscription services, Stripe will process payments—we do not store credit card information ourselves.

We may disclose information if required by law, court order, or government regulation, or when necessary to protect our rights, property, or safety. In the event IndustryLabs is acquired or merged with another company, your information may be transferred to the new owner as part of that transaction.

We do not sell personal information to third parties. We do not share your information with vendors unless you explicitly submit a Request Board inquiry.

Request Board submissions are stored in Airtable's infrastructure. Analytics data resides in Google Analytics 4 systems. Website content and code are hosted on Vercel's platform. All data transmission occurs over SSL/TLS encryption. We implement access controls to limit who can view sensitive information and conduct regular security reviews of both our own infrastructure and third-party services.

We retain Request Board submissions for twelve months or until you request deletion, whichever comes first. Analytics data follows Google Analytics 4 default retention of fourteen months. Email subscriber information is retained until you unsubscribe. This retention balances operational needs with data minimization principles.

If you are located in the United Kingdom or European Union, GDPR grants you specific rights regarding your personal information. You can request access to what information we hold about you. You can request correction of inaccurate information. You can request deletion of your information, often called the “right to be forgotten.” You can request that we restrict how we process your information. You can request a copy of your information in a portable format. You can object to certain types of processing. You can withdraw consent for processing that relies on your consent.

To exercise any of these rights, email us at contact@industrylabs.ai with “GDPR Request” in the subject line. We will respond within thirty days and verify your identity before processing requests.

California residents have rights under the California Consumer Privacy Act and California Privacy Rights Act to know what personal information we collect, request deletion of personal information, and opt out of sales of personal information. We do not sell personal information. We comply with applicable data protection laws in all jurisdictions where we operate.

Compliance information displayed for AI tools—including GDPR, EEOC, SOC 2, HIPAA, and ISO 27001 badges—represents vendor attestation only. We do not independently verify these claims. This information is not legal advice. You should verify compliance claims directly with vendors, consult qualified legal counsel regarding your specific compliance requirements, and conduct thorough due diligence before purchasing any tools.

Our Site contains links to third-party websites including tool vendor sites. We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing them with information.

Our Site is not intended for users under eighteen years of age. We do not knowingly collect information from children.