Privacy policy

We're Jacaranda Labs LLC (“J Labs”), a Wyoming-incorporated company. This page explains what we collect when you visit jacarendalabs.com or work with us as a client, and what we do with it.

What we collect

When you visit the website

Analytics events — page views, referrer, device type, country (resolved from IP, not stored). We use Vercel Analytics and Speed Insights, both first-party and cookieless.
A cookie consent flag — if you click “OK” or “Reject” on the cookie banner, we store that choice locally in your browser so the banner doesn't reappear.

When you book a discovery call

Your name and email address.
The topic you want to discuss (free-text).
Optional: your company's tech stack.
The selected calendar slot.

We use this to put a calendar event on your calendar and ours and to send you a Google Meet link.

When you submit a contact form, audit, or estimate request

The information you provide on the form.
The form context (e.g. infrastructure estimate, audit).
The time of submission.

When you subscribe to insights

We collect your email address and the source page you subscribed from. The address is added to a Resend audience. You can unsubscribe via the link at the bottom of every email.

How we use it

To respond to your discovery call, audit, or estimate request.
To send you the engagement materials you asked for.
To send you new insights articles by email, if you subscribed.
To understand which articles land and which don't.
To meet our legal obligations (tax, invoicing, contracts).

We do not sell your data, share it with advertisers, or use it to train AI models. We do not run third-party tracking pixels.

Who processes it on our behalf

The third-party tools we use to run the business:

Vercel — site hosting, analytics, speed insights.
Resend — outbound email (booking confirmations, newsletter).
Google Workspace — calendar, videoconferencing, our own inbox.
Stripe — payments for paid engagements and training.
Anthropic / OpenAI / hyperscaler GPU providers — for AI features such as the Boardroom panel. Inputs are processed via API and not used to train models per the providers' standard API terms.

Where it lives

Most of our infrastructure runs on US servers (Vercel, Resend, Google). If you're in the EEA / UK, the data you submit is transferred outside your region under standard contractual clauses with each processor.

How long we keep it

Boardroom session data — 90 days, then auto-deleted.
Discovery call records / form submissions — for as long as needed to respond and follow up, plus reasonable retention for tax/contract purposes (7 years).
Newsletter subscribers — until you unsubscribe.
Analytics — aggregated; no individual record retained.

Your rights

Depending on where you live (EU, UK, California, and others) you may have the right to:

Ask what we hold about you.
Ask us to correct or delete it.
Ask us to stop processing it.
Receive a portable copy of what we hold about you.
Lodge a complaint with your local data protection authority.

Email hello@jacarendalabs.com and we'll handle the request within 30 days.

Security

We use industry-standard encryption in transit (TLS) and at rest. Access to client data is restricted to the people working on the engagement. We don't store passwords on our systems — everything authenticates through OAuth or single-sign-on with the underlying provider.

Changes

We'll update this policy when our practices change. The “last updated” date at the top reflects the current version. Significant changes will be flagged on the site for at least 30 days.

Contact

Jacaranda Labs LLC, Wyoming, USA.
Email: hello@jacarendalabs.com