Privacy Policy · PrizenLabs

The short version

We collect what you send us (an application, a booking, an email or a WhatsApp message) and the basic technical data our host needs to serve and protect the Site.
Analytics and marketing cookies stay off until you switch them on, and you can change your mind at any time from "Cookie settings" at the foot of every page.
We do not sell your personal information. We do not use what you send us to train AI models.
You can ask to see, correct or delete your information by emailing hello@prizenlabs.com.

Who we are and what this policy covers

PrizenLabs LLC, a Delaware limited liability company ("PrizenLabs", "we", "us" or "our"), is responsible for the personal information collected through prizenlabs.com and its subdomains (the "Site"), and through the applications, bookings and messages you send us (your "Inquiries"). For people in the European Economic Area, the United Kingdom and Switzerland, we are the "controller" of that information.

This policy does not cover:

information we process for our clients while building or operating their products, where we act as their service provider or processor under our agreement with them, and the client's own privacy policy applies;
third-party websites and services we link to, including the live products shown on our work pages and the AI assistants opened by "Ask AI";
information about our own staff and contractors, which separate notices cover.

Information we collect

Information you give us

Applications. The form on /apply, hosted by Tally, asks for details such as your name, email address and company, and what you are building and why now. We receive whatever you choose to include.
Call bookings. When you book a call through Cal.com, we receive your name, email address, the time and time zone you chose, and any notes you add.
Email and WhatsApp. Your email address or phone number, your name and profile details as WhatsApp shows them, and the content of your messages and any attachments.
Engagements. If we work together, business contact details, contract and billing information, and the information exchanged during the engagement, which our agreement with you also governs.

Information collected automatically

Server and security logs. When you load a page, our hosting and network provider, Cloudflare, processes your IP address, browser and device type, the pages and files requested, the referring page, the date and time, and an approximate location derived from your IP address. This is needed to deliver the Site, keep it secure, prevent abuse and fix errors.
Your cookie choice. We remember your cookie preferences in your browser's local storage, so we do not ask on every visit. This is strictly necessary.
Google Tag Manager. Every page loads Google Tag Manager, which manages the analytics and advertising tags below and receives your IP address and browser details when it loads. While analytics and marketing are off, Google's tags do not set or read analytics or advertising cookies, though they may send Google limited cookieless signals, such as the page address and your consent state, which Google uses for aggregate, modeled reporting.
Analytics, only if you allow it. With your consent, Google Analytics uses cookies to record how the Site is used: pages viewed, time spent, how you arrived, device and browser type, and approximate location. We look at this in aggregate to learn which pages help.
Marketing, only if you allow it. With your consent, Google's advertising tags use cookies and similar identifiers to measure whether our ads lead to visits and applications, and may be used to show our ads to you on other websites.
Embedded services on /apply. When you open /apply, the Tally form and the Cal.com booking script load from those providers, which receive your IP address and browser details to serve them and may set cookies they need to work.

Our fonts and images are served from our own domain, so loading a page does not send your information to a font provider.

Information from other sources

Publicly available business information about you or your company, such as your website, professional profile or press coverage, which we may review when we evaluate an application.
Information from people who introduce or refer you to us.

How we use information

To read, evaluate and respond to your Inquiry, to schedule and hold calls, and to decide whether to work together.
To prepare for, enter into and carry out an engagement, including contracts, invoicing and record keeping.
To operate, maintain, secure and improve the Site, including preventing fraud, spam and abuse.
With your consent, to understand how the Site is used and to measure and improve our advertising.
To send occasional updates about our work if you have asked for them. You can unsubscribe at any time.
To comply with legal obligations, enforce our Terms and Conditions, and establish, exercise or defend legal claims.

Every application is read by a person. We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects. We do not use the content of your Inquiries, or other personal information collected through the Site, to train artificial intelligence or machine-learning models.

Legal bases for processing

If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases:

Contract: to take steps you ask for before entering into a contract, such as evaluating your application and scheduling a call, and to perform a contract with you.
Legitimate interests: to respond to inquiries, run and secure the Site, keep business records and defend legal claims, where those interests are not overridden by your rights.
Consent: for analytics and marketing cookies, and for marketing emails where consent is required. You can withdraw consent at any time; doing so does not affect processing that happened before.
Legal obligation: to meet tax, accounting and other legal requirements.

We do not sell personal information, and we do not exchange it for money. We disclose it only as follows:

Cloudflare, for hosting, content delivery, security and logs.
Tally, which runs our application form.
Cal.com, which schedules calls.
Google, for Tag Manager and, with your consent, Analytics and advertising measurement.
WhatsApp (Meta), when you contact us there.
Providers of email, document and productivity tools that store our correspondence and records.
Professional advisers, such as lawyers, accountants, auditors and insurers, who are bound by duties of confidentiality.
Others, with your permission, for example if we offer to introduce you to someone and you agree.
Authorities and others where the law requires it, such as in response to a subpoena or court order, or where disclosure is necessary to protect the rights, property or safety of PrizenLabs, our users or others.
A buyer or successor, as part of a merger, acquisition, financing, reorganization or sale of assets, subject to the protections in this policy.

The service providers above process personal information on our behalf under contracts that limit how they may use it.

If you switch on marketing cookies, Google may combine information about your visit with information from other websites in order to show you our ads elsewhere. Under some US state laws this counts as "sharing" for cross-context behavioral advertising or as "targeted advertising". We do it only with your consent, and you can stop it at any time as described in the next section.

Cookies and your choices

Necessary (always on): your saved cookie choice, and security cookies Cloudflare may set to protect the Site from bots and abuse.
Analytics (off unless you allow it): Google Analytics cookies, such as _ga, which last up to two years.
Marketing (off unless you allow it): Google advertising cookies, such as _gcl_au, which last up to about three months.
Embedded services: cookies Tally and Cal.com may set on /apply to run the form and booking widget, under their own policies.

You can change your choice at any time with "Cookie settings" at the foot of every page. You can also block or delete cookies in your browser settings, opt out of Google Analytics with Google's browser add-on, and manage Google's ad personalization in My Ad Center.

Global Privacy Control. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of the sale or sharing of your personal information and of targeted advertising, for that browser. Marketing cookies stay off while the signal is on, even if you accepted them before.

Do Not Track. There is no agreed industry standard for responding to "Do Not Track" browser signals, so the Site does not respond to them. Instead, optional cookies stay off until you switch them on, and we honor Global Privacy Control.

Tracking across websites. Only if you allow marketing cookies may Google collect information about your online activity over time and across different websites through the Site. Otherwise, no third party is permitted to do so through the Site.

How long we keep information

Applications and correspondence that do not lead to an engagement: up to 24 months after our last contact, so we can recognize a returning applicant and remember what we discussed. Then we delete or anonymize them.
Client and engagement records: for the length of the engagement and afterwards for as long as legal, tax and accounting rules require, generally up to seven years after it ends.
Server and security logs: for short periods, typically days to weeks, unless we need them longer to investigate abuse or a security incident.
Analytics data: no longer than 14 months.
Your cookie choice: until you change it or clear your browser's storage.

We may keep information longer where the law requires it or to resolve a dispute.

Security

We use reasonable administrative, technical and physical safeguards to protect personal information, including encryption in transit across the Site, access limited to the people who need it, and established service providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a security breach affects your personal information, we will notify you and the relevant authorities as applicable law requires, including Delaware's data breach notification law (Title 6, Chapter 12B of the Delaware Code).

International transfers

We are based in the United States, and our service providers may process information in the United States and other countries whose data protection laws may differ from those where you live. When we transfer personal information from the European Economic Area, the United Kingdom or Switzerland, we rely on an adequacy decision (including the EU-US Data Privacy Framework and its UK and Swiss extensions, where the recipient is certified) or on Standard Contractual Clauses with the UK Addendum where needed.

Your privacy rights

Everyone

Wherever you live, you can ask us to tell you what personal information we hold about you, to correct it or delete it, or to stop sending you marketing emails. Email hello@prizenlabs.com.

Residents of US states

Several US states, including California, Colorado, Connecticut, Delaware, Oregon, Texas and Virginia, give residents rights over their personal information. Some of these laws apply to a business only once it reaches certain size thresholds; we honor the requests below from residents of any US state, whether or not a law requires it. You may have the right to:

confirm whether we process your personal information, and access it, including the categories and specific pieces we hold;
correct inaccurate personal information;
delete personal information;
get a copy of your personal information in a portable format;
opt out of the sale of personal information, of its sharing for cross-context behavioral advertising, of targeted advertising, and of profiling that produces legal or similarly significant effects;
get a list of the categories of third parties, or where your state's law provides, the specific third parties, to which we have disclosed your personal information;
limit the use of sensitive personal information (we do not collect sensitive personal information through the Site, or use it for purposes that would give rise to this right);
be free from discrimination or retaliation for exercising any of these rights.

How to make a request

Email hello@prizenlabs.com with "Privacy request" in the subject line, the state you live in, and the right you want to exercise. To opt out of sharing and targeted advertising, you can also turn off "Marketing" in Cookie settings or turn on Global Privacy Control in your browser.

We verify requests by matching the details you give us with the information we hold, usually your email address, and we may ask for more information if we need it. An authorized agent may make a request for you with your signed permission, and we may ask you to confirm your identity with us directly. We respond within 45 days. If we need more time, we may extend that by another 45 days and will tell you why. Requests are free, unless they are manifestly unfounded or excessive.

Appeals

If we decline to act on your request, you may appeal by replying to our decision or by emailing hello@prizenlabs.com with "Privacy appeal" in the subject line. We will respond in writing within 60 days, or sooner if your state's law requires it, and explain our decision. If your appeal is denied, you may contact your state's attorney general; Delaware residents may contact the Delaware Department of Justice.

Notice at collection for California residents

In the past 12 months we have collected the following categories of personal information, from the sources and for the purposes described above, and kept each for the periods in "How long we keep information":

Identifiers, such as your name, email address, phone number, IP address and online identifiers. Disclosed to service providers; online identifiers are shared with Google for advertising only if you allow marketing cookies.
Customer records described in California Civil Code § 1798.80(e), such as name, email address, phone number and billing details. Disclosed to service providers.
Commercial information, such as the services you ask about and records of an engagement. Disclosed to service providers.
Internet or other electronic network activity, such as pages viewed, referring pages and interactions with the Site. Disclosed to service providers; shared with Google for advertising only if you allow marketing cookies.
Geolocation data, limited to an approximate location derived from your IP address. Disclosed to service providers.
Professional or employment-related information, such as your role, your company and your professional background. Disclosed to service providers.
Inferences drawn from the above, such as whether a project fits our work. Not disclosed outside PrizenLabs and its service providers.

We do not sell personal information, and we have no actual knowledge of selling or sharing the personal information of anyone under 16. We do not disclose personal information to third parties for their own direct marketing purposes, as described in California Civil Code § 1798.83.

Nevada residents

Nevada residents may ask us not to sell their covered information. We do not sell covered information as Nevada law defines it, but you may still send a request to hello@prizenlabs.com.

Rights in the EEA, UK and Switzerland

If you are in the European Economic Area, the United Kingdom or Switzerland, you have the right to access, correct or erase your personal information, to restrict or object to our processing of it, including processing based on legitimate interests and, at any time, processing for direct marketing, to receive it in a portable format, and to withdraw consent at any time. To exercise these rights, email hello@prizenlabs.com. You also have the right to complain to the data protection authority where you live or work, or where you believe a breach occurred, though we would welcome the chance to address your concern first.

Children's privacy

The Site is for businesses and professionals. It is not directed to children, and we do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 13, we will delete it, as the Children's Online Privacy Protection Act requires. If you believe a child has given us personal information, please contact us at hello@prizenlabs.com.

Changes to this policy

We may update this policy as our practices or the law change. We will post the new version on this page and change the "Last updated" date above. If a change is material, we will put a notice on the Site and, where we have your email address and the change affects you, email you before it takes effect.

Contact us

PrizenLabs LLC, a Delaware limited liability company. Email hello@prizenlabs.com with "Privacy" in the subject line, or message us on WhatsApp at +1 (332) 733-7389.