Privacy Policy

01 Information We Collect

1.1 Information You Provide Directly

When you engage with us through our Site, contact forms, or service agreements, we may collect:

• Contact information: Name, email address, phone number
• Business information: Business name, industry, business address, website URL
• Payment information: Credit card or ACH details (processed and stored by Stripe — we do not store full payment card numbers on our servers)
• Service-related information: Brand preferences, business goals, intake form responses, uploaded files (logos, images, documents)
• Communications: Emails, messages, and other correspondence between you and 330 Labs

1.2 Information Collected Automatically

When you visit our Site, we may automatically collect:

• Log data: IP address, browser type, operating system, referring URL, pages visited, date and time of visit
• Cookies: Essential cookies required for site functionality. We do not use advertising or third-party tracking cookies. See Section 6 for details.

1.3 Information from Third Parties

We may receive limited information from third-party services we use to operate our business, such as payment confirmation from Stripe or analytics data from our hosting provider.

02 How We Use Your Information

We use the information we collect to:

• Deliver services: Create brand packages, websites, business intelligence reports, and other deliverables
• Process payments: Charge fees and manage billing through Stripe
• Communicate with you: Respond to inquiries, send project updates, provide support
• Improve our services: Analyze how clients use our services to make them better
• Comply with legal obligations: Meet tax, regulatory, and legal requirements
• Protect our business: Detect fraud, enforce our Terms of Service, and protect our rights

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

03 Third-Party Services

We use the following third-party services to operate our business. Each has its own privacy policy governing how it handles your data:

We only share the minimum information necessary for each service to perform its function.

04 Data Retention

• Client project data (brand files, deliverables, intake forms): Retained for the duration of the client relationship plus 2 years after termination, unless the client requests earlier deletion.
• Payment records: Retained for 7 years as required for tax and accounting purposes.
• Communications: Retained for 2 years after the last communication, unless part of an active client relationship.
• Website log data: Retained for 90 days, then automatically deleted.

Your Right to Deletion

You may request deletion of your personal information at any time by emailing mazhar@330labs.ai. We will delete your data within 30 days of your request, except where retention is required by law (e.g., tax records). We will confirm deletion in writing.

05 Data Security

We take reasonable measures to protect your information, including:

• Encrypted data transmission (HTTPS/TLS) on all pages of our Site
• Payment processing handled entirely by Stripe (PCI DSS compliant) — we never store full card numbers
• Access to client data limited to authorized 330 Labs personnel
• Regular review of our security practices

No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

06 Cookies

Our Site uses only essential cookies necessary for basic site functionality (e.g., session management, security). We do not use:

• Advertising cookies
• Third-party tracking cookies
• Social media tracking pixels

If we add analytics tools in the future, we will update this policy and provide notice.

07 Children's Privacy

Our services are designed for businesses and business professionals. We do not knowingly collect personal information from anyone under the age of 13. If we learn that we have collected information from a child under 13, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at mazhar@330labs.ai.

08 California Privacy Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request that we disclose what personal information we have collected about you, the sources of that information, our business purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You may request that we delete your personal information, subject to certain legal exceptions.
• Right to Opt-Out of Sale: We do not sell personal information. No opt-out is necessary.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise any of these rights, email mazhar@330labs.ai with the subject line "CCPA Request." We will respond within 45 days.

09 Indiana State Requirements

330 Labs is headquartered in Whitestown, Indiana and operates under Indiana law. We comply with all applicable Indiana laws regarding data protection, including:

• Indiana's data breach notification law (IC 24-4.9) — we will notify affected individuals and the Indiana Attorney General within the timeframes required by law in the event of a data breach involving personal information
• Indiana's deceptive consumer sales practices statutes
• Indiana Consumer Data Protection Act (SB 5, effective January 1, 2026)

10 Contact Us

If you have questions about this Privacy Policy or want to exercise your privacy rights, contact us:

We will respond to privacy inquiries within 30 days.

11 Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will:

• Update the "Last Updated" date at the top of this page
• Post the revised policy on our Site
• For material changes, notify active clients by email

Your continued use of our Site after changes are posted constitutes acceptance of the updated policy.