Privacy Policy

This Privacy Policy explains how TecLab ("we", "us", "TecLab") collects, uses, and shares personal data when you use TecLab AI at teclab.ai (the "Service"). If you're in the EU or UK, we act as the data controller. We're committed to handling your data responsibly and transparently.

1. What we collect

Information you provide

• Account: name, email, password (hashed)
• Profile & onboarding: any optional info you share about your role or business
• Payment: billing details, card info (processed and stored by Stripe — we never see your full card number)
• Support: messages you send to us
• AI tool inputs: prompts and inputs you submit to our AI tools and mentor
• Content: course progress, notes, favorites, certificates earned

Information collected automatically

• Basic device info (browser, OS, screen size)
• IP address and approximate location (for security, fraud prevention, and currency display)
• Usage data (pages visited, features used, timestamps)
• Cookies and similar technologies (see Cookies section below)

2. How we use it

• Provide, maintain, and improve the Service
• Process payments, manage subscriptions, and send receipts
• Send transactional emails (signup confirmation, password resets, billing updates)
• Personalize your learning experience and track course progress
• Respond to support requests
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations (tax records, law enforcement requests)
• If you opt in: send product updates and marketing emails (you can unsubscribe anytime)
• Measure the effectiveness of our advertising campaigns and show you relevant ads on Facebook, Instagram, and other platforms (see Section 4 for the processors involved)

3. Legal basis (GDPR)

If you're in the EU or UK, we process your data on these legal grounds:

• Contract: to deliver the Service you signed up for
• Legitimate interests: to secure the Service, analyze usage, and improve the product
• Consent: for marketing emails and non-essential cookies (you can withdraw anytime)
• Legal obligation: for tax records, anti-fraud, and compliance

4. Who we share with

We don't sell your personal data. We share it only with these processors, under strict contracts:

• Supabase — authentication and database hosting (EU/US region)
• Vercel — web hosting and edge delivery
• Stripe — payment processing. Stripe sees card details, billing address, and transaction data. Read their privacy notice.
• Anthropic — powers our AI tools and mentor. Inputs you submit are sent to Anthropic's API for processing. See Anthropic's privacy policy.
• Resend — transactional email delivery
• PostHog — product analytics (EU hosting). Tracks anonymous usage and, once you're logged in, your activity tied to your user ID (pages viewed, conversions, etc.). Read PostHog's privacy policy.
• Vercel Analytics — aggregate page-view and Web Vitals data, cookieless. No personal data collected.
• Meta (Facebook / Instagram) — advertising measurement and retargeting via the Meta Pixel. We send page-view and conversion events (signup, checkout start, purchase) to Meta. With Advanced Matching enabled, a hashed (SHA-256) version of your email, name, country, city, postal code, and TecLab user ID is transmitted so Meta can match activity to their users for attribution and lookalike modelling. Your raw email and name are never sent — only irreversible hashes. Read Meta's privacy policy.

We may also disclose information to comply with law, enforce our Terms, or protect the rights and safety of TecLab, our users, or others. In the event of a merger or acquisition, your data may transfer to the successor entity; we'll notify you in that case.

5. International transfers

Your data may be processed in the United States and other countries where our providers operate. Where data is transferred out of the EU/UK, we rely on Standard Contractual Clauses (SCCs) or equivalent safeguards with our processors to protect your information.

6. Data retention

We keep your data only as long as needed for the purposes it was collected:

• Active accounts: for as long as you have an account with us
• Deleted accounts: deleted from our active systems within 30 days, except where we must retain records for legal, tax, or fraud-prevention reasons (typically up to 7 years)
• Billing records: retained for as long as required by tax law
• AI tool inputs: retained to improve your experience; you can request deletion anytime

7. Your rights

Depending on where you live, you may have the right to:

• Access — ask what personal data we hold about you
• Rectify — correct inaccurate data
• Erase — ask us to delete your data (subject to legal retention)
• Restrict or object — limit how we process your data
• Portability — receive your data in a machine-readable format
• Withdraw consent — where we process based on consent
• Complain — to your local data protection authority (e.g. the ICO in the UK)

To exercise any of these rights, email privacy@teclab.ai. We'll respond within 30 days.

8. Cookies

We use cookies and similar technologies for:

• Essential cookies: required for login sessions, security, and the Service to function
• Analytics cookies: to understand how the Service is used and improve it (can be declined)
• Advertising cookies: set by Meta (Facebook Pixel) to measure ad performance, attribute conversions, and show you more relevant ads on Facebook and Instagram. You can opt out via your browser, an ad blocker, or directly in your Facebook ad preferences.

You can control cookies through your browser settings. Disabling essential cookies will break login and other core features.

Want to change your choice? Set cookie preferences

9. Security

We take reasonable technical and organizational measures to protect your data: encryption in transit (TLS), encrypted storage, access controls, and regular security reviews. No system is 100% secure — if you believe your account has been compromised, contact security@teclab.ai immediately.

10. Children

TecLab is not intended for children under 16. We don't knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us and we'll delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or through the Service. The "Last updated" date at the top shows when it was last revised.

12. Contact

For privacy-related questions or to exercise your rights, email privacy@teclab.ai or write to TecLab, 209 Beeston Road, Leeds, LS11 7PB, United Kingdom.