Privacy Policy

This policy explains what information Carve Lab LLC collects through this website, why, and what choices you have. In short: this is a static marketing site with no accounts and no advertising. The only information you give us is what you choose to type into the contact form, and the only thing measured automatically is aggregate, cookieless page analytics.

1. Who we are

Carve Lab LLC ("Carve Lab", "we", "us") operates carvelab.ai and is the controller of personal information described in this policy. We are based in Folsom, CA, United States.

For any question about this policy, or to exercise a right described in section 10, email hello@carvelab.ai.

2. Scope

This policy applies to this website only. It does not cover our products, which have their own policies provided with them, and it does not cover work performed under a client engagement. Information handled during an engagement is governed by that engagement's own agreement, not by this page.

3. Information we collect

We collect three narrow categories, and nothing else.

Information you provide. If you use the contact form, we receive your name, company, role, email address, and whatever you write in the message field. You choose all of it, and you can email us directly instead.

Analytics information. Aggregate measurements of page views: the page visited, the referring site, and the general browser, operating system, and device type, plus an approximate country derived from your IP address without the address itself being stored. This does not identify you and we cannot use it to single out an individual visitor.

Technical request information. Our hosting provider processes standard request data, which can include IP addresses, to deliver and protect the site.

We do not collect Social Security numbers, financial account details, government identifiers, precise geolocation, biometric information, or any of the categories generally treated as sensitive. There is nowhere on this site to submit them.

Cookies and similar technologies

This site sets no cookies and uses no advertising or cross-site tracking technologies. Our analytics provider is cookieless by design. Your browser stores one item locally, and only if you use the theme switch: your light or dark preference. That never leaves your device and is not personal information.

How the contact form works

The form currently composes a message in your own email client. Nothing is transmitted to us until you press send there, and what you send reaches us as ordinary email. If we later connect the form to a submission service, we will update this page and this section before doing so.

4. How we use information

We use it for these purposes and no others:

• To respond to you and have the conversation you asked for
• To understand which pages are read, so we can decide what to write
• To keep the site available, performant, and protected from abuse
• To comply with legal obligations that apply to us

We do not use your information for automated decision-making or profiling, and we do not use it to train machine learning models.

5. Legal bases

Where the EU or UK GDPR applies, we rely on our legitimate interests in responding to enquiries, understanding how the site is used, and keeping it secure. Where you contact us, we also rely on steps taken at your request prior to entering a contract. Where we must retain something to meet a legal obligation, we rely on that obligation.

6. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have never done either.

We use a small number of service providers who process information on our behalf, under contract, for the purposes above:

• Cloudflare, for hosting and content delivery, which processes technical request data
• Plausible Analytics, for cookieless aggregate analytics
• Our email provider, which receives and stores messages you send us

We may also disclose information if required by law, to respond to lawful requests, to enforce our terms, or to protect the rights and safety of people including ourselves. If the business is ever sold or reorganized, information may transfer as part of that transaction, and this policy would continue to apply until updated.

7. Retention

We keep enquiry emails for as long as the conversation is useful and for a reasonable period afterwards, generally no more than three years, unless we have a legal reason to keep them longer or you ask us to delete them sooner. Aggregate analytics contain no personal information and are retained indefinitely in aggregate form. Technical request data is retained by our hosting provider under its own schedule, typically for a short period measured in days.

8. Security

The site is served over HTTPS. We keep the number of systems holding your information small deliberately, because the most reliable way to protect data is not to accumulate it. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If you have something genuinely sensitive to discuss, tell us and we will arrange an appropriate channel rather than using email.

9. International transfers

We are based in the United States, and information you send us is processed there. If you contact us from outside the United States, you are sending your information to a country whose data protection laws may differ from your own. Where required for transfers from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's standard contractual clauses.

10. Your rights and choices

Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, obtain a portable copy, object to or restrict certain processing, and withdraw consent where we relied on it.

To exercise any of these, email hello@carvelab.ai. We will respond within the time the applicable law requires, and we may need to verify your identity first, usually by confirming you control the email address in question. In practice we often hold nothing beyond an email thread, and we will tell you plainly when that is the case.

California residents

Under the California Consumer Privacy Act as amended, California residents have the rights described above, along with the right to know the categories of personal information collected, the purposes for collecting it, and the categories of third parties it is disclosed to. All of that is set out in sections 3, 4, and 6.

We do not sell personal information and do not share it for cross-context behavioral advertising, so we provide no "Do Not Sell or Share My Personal Information" mechanism because there is nothing for it to opt out of. We will not discriminate against you for exercising any privacy right. You may use an authorized agent to make a request on your behalf, with proof of authorization.

EEA, UK, and Swiss residents

You have the rights described above and the right to lodge a complaint with your local supervisory authority. We would appreciate the chance to address your concern first.

Do Not Track

Browsers can send a "Do Not Track" signal, and there is no common standard for how sites should respond. We do not track visitors across third-party websites, so there is nothing for the signal to change, and we do not respond to it differently.

11. Children

This site is intended for business audiences and is not directed at children under 13. We do not knowingly collect information from them. If you believe a child has given us information, email us and we will delete it.

12. Other websites

This site links to other sites we do not control, including our own products and external sources we cite. Their privacy practices are their own, and this policy stops applying once you leave.

13. Changes to this policy

If we change how this site handles information, we will update this page and change the date at the top. Material changes will be described rather than made quietly, and the previous version remains available in this site's public source history.

14. Contact

Carve Lab LLC, Folsom, CA, United States. hello@carvelab.ai.