Privacy Policy

1. Introduction

LabAnimal ("we") values your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our laboratory animal compliance management system ("the Service").

2. Information Collection

2.1 Information You Provide

• Account information: name, email address, password (encrypted)
• Laboratory information: lab name, institution details
• Business data: animal records, protocols, health records, mortality reports, etc.
• Payment information: processed via PayPal; we do not store your credit card information

2.2 Automatically Collected Information

• Log data: IP address, browser type, access time, page views
• Device information: operating system, screen resolution
• Usage data: feature usage frequency, error logs

3. Use of Information

We use the collected information to:

• Provide, maintain, and improve the Service
• Process your subscription and payments
• Send service-related notifications (e.g., subscription expiry, system updates)
• Prevent fraud and enhance security
• Analyze usage trends to improve user experience
• Comply with legal obligations

4. Information Storage and Security

Your data is stored on secure servers with industry-standard encryption and security measures:

• Transport-layer encryption (HTTPS/TLS)
• Passwords stored with bcrypt encryption
• Database access control and audit logs
• Regular security reviews and updates

5. Multi-Tenant Data Isolation

The Service uses PostgreSQL Row-Level Security (RLS) to ensure complete data isolation between different laboratories. Each lab can only access its own data and cannot view any information from other labs.

6. Information Sharing

We do not sell your personal information. We only share your information in the following circumstances:

• Service providers: PayPal (payment processing), Vercel (hosting), and other trusted third parties
• Legal requirements: in response to legal proceedings or government requests
• Rights protection: to protect the rights and safety of LabAnimal or its users
• Your consent: in other cases where you have explicitly consented

7. Data Retention

We retain your data while you use the Service. When you delete your account, we will delete all your data within 30 days, unless a longer retention period is required by law.

8. Your Rights

You have the right to:

• Access and view your personal information
• Correct inaccurate information
• Delete your account and data
• Export your data (data portability)
• Withdraw consent (where applicable)
• Object to the processing of your personal information

To exercise these rights, please contact privacy@labanimal.tech.

9. Cookies and Tracking Technologies

We use the following technologies:

• Essential cookies: maintain login state and sessions
• Analytics: Plausible Analytics (privacy-friendly analytics, no cookies used)
• Local storage: save user preferences (e.g., language settings)

10. Children's Privacy

The Service is not intended for children under 16. We do not knowingly collect personal information from children under 16.

11. International Data Transfer

Your data may be transferred to servers outside your country/region. We ensure that such transfers comply with applicable data protection laws.

12. Policy Changes

We may update this Privacy Policy. Significant changes will be communicated via email or in-Service notification. Continued use of the Service constitutes acceptance of the updated policy.