Information we collect
We collect:
- Information you provide: name, email, company, role, project details when you fill out our contact form, book a discovery call, or sign a contract.
- Usage data: pages visited, referrer, browser type, screen size, country (IP-derived). We use Plausible Analytics, which does not set cookies and does not track you across sites.
- Communication content: emails, Slack messages, and project artifacts you send us during an engagement.
- Server logs: AWS CloudFront request logs (retained 30 days for security + diagnostics).
How we use information
- To respond to your inquiry and deliver services you engage us for.
- To send transactional emails (intake confirmations, project updates, invoices, contract reminders) via Resend.
- To bill you via Stripe for services delivered.
- To improve our services and website (aggregated analytics only).
- To comply with legal obligations.
We do not sell your information, and we do not use your data to train AI models that serve other clients.
Sharing of information
We share with:
- Service providers who process data on our behalf under contractual confidentiality: AWS (hosting), Resend (email), Stripe (payments), Cal.com (calendar), Coheria (AI inference for our delivery work).
- Legal authorities when required by law, subpoena, or court order.
We do not share with marketers, advertisers, or data brokers.
Cookies
Our marketing site (strategiclabs.ai) does not set any cookies. Our application surfaces (ai.strategiclabs.ai authenticated areas) set strictly necessary session cookies after sign-in.
Your rights
Depending on your location (GDPR, CCPA, CPRA, Colorado Privacy Act, etc.), you have rights to access, correct, delete, port, or restrict processing of your information. Email hello@strategiclabs.ai with subject Privacy Request and we'll respond inside 30 days.
Data retention
- Contact form submissions: 24 months.
- Engaged-client project artifacts: term of engagement + 24 months (per our DPA).
- Billing records: 7 years (US tax requirement).
- Analytics: aggregated and de-identified after 90 days.
- CloudFront access logs: 30 days.
Children
Strategic Labs services are B2B only. We do not knowingly collect information from individuals under 18.
Cross-border transfers
We are based in the US. If you are in the EEA, UK, or Switzerland, your data is transferred to and processed in the US under standard contractual clauses with our processors.
Changes to this policy
If we materially change this policy, we'll post the new version here and email known-engaged clients. The "Last updated" date at the top reflects the most recent change.
Contact
Strategic Labs LLC
1500 N Grant Street, Ste. R
Denver, CO 80203
hello@strategiclabs.ai