Privacy Policy.

This Privacy Policy applies to the website at https://sourcecodelab.ai/ and to related business communications and services provided by Source Code Lab AI.

Depending on how you interact with us, we may collect:

• Contact and business information: name, work email, telephone number, job title, company name, and information submitted through enquiry or contact forms.
• Communications: messages, project enquiries, meeting notes, support requests, and other correspondence.
• Project information: requirements, documents, datasets, source code, credentials, technical specifications, and other materials that clients choose or authorize us to process for a project.
• Technical information: IP address, browser type, device information, referring URLs, timestamps, and website usage or diagnostic logs, where collected.
• Commercial information: proposals, contracts, invoices, transaction records, and business relationship information.

We may use information to:

• Respond to enquiries and assess potential projects.
• Prepare proposals, deliver services, and manage client relationships.
• Develop, test, deploy, maintain, and support AI and software systems.
• Communicate about project delivery, security, billing, and service updates.
• Operate, troubleshoot, secure, and improve our website and systems.
• Prevent fraud, investigate misuse, and enforce contractual rights.
• Meet applicable legal, regulatory, accounting, and tax obligations.
• Send marketing communications where permitted by law and, where required, with your consent.

Our services may involve AI models, large language models (LLMs), retrieval-augmented generation (RAG), AI agents, document processing, workflow automation, and related technologies.

When providing services, we may process client-provided information only to the extent necessary for the agreed project, subject to the applicable contract, documented instructions, and relevant law.

Client data may be transmitted to AI model providers, cloud platforms, hosting providers, or other subprocessors when required for an agreed service. The applicable providers and processing arrangements should be identified in the relevant contract or data processing agreement where appropriate.

Clients are responsible for ensuring they have the necessary rights, permissions, and lawful basis to provide personal data or other materials to us for processing. We will follow applicable contractual restrictions and instructions when processing data on a client's behalf.

Where applicable law requires a legal basis, we process personal information based on one or more of the following:

• Your consent.
• Taking steps at your request or performing a contract.
• Our legitimate interests, where permitted and appropriately balanced against your rights.
• Compliance with legal obligations.
• Other lawful grounds available under applicable data protection laws.

We may share information with the following categories of recipients, where necessary and lawful:

• Cloud hosting, infrastructure, storage, and security providers.
• AI model providers and API providers used for agreed services.
• Website hosting, contact-form, email, analytics, and communication providers.
• Professional advisers, auditors, insurers, and payment providers, where applicable.
• Clients or authorized representatives where required to deliver a project.
• Courts, regulators, law enforcement, or other authorities when legally required.
• A successor or acquiring entity in connection with a corporate transaction, subject to applicable law.

We do not sell personal information for money. We do not disclose personal information to third parties for their independent purposes except as described in this Policy, with appropriate authorization, or as permitted or required by law.

As we serve businesses internationally, information may be processed in countries other than the country where it was collected. Where required, we use appropriate safeguards for international transfers and comply with applicable data protection requirements.

Project-specific hosting locations, data residency requirements, and transfer restrictions should be agreed in the applicable contract or data processing agreement.

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including service delivery, dispute resolution, security, and legal compliance.

Retention periods vary by information type, contractual requirements, and applicable law. When information is no longer required, we will delete it, anonymize it, or securely dispose of it where reasonably practicable and legally permitted.

Client project data may be subject to specific deletion, return, backup, and retention terms agreed in the applicable contract.

Our website may use essential cookies and similar technologies required for security, functionality, or user preferences. We may also use analytics or other optional technologies if configured.

Where required by law, we will seek consent before using non-essential cookies or similar technologies. You may also manage cookies through your browser settings. Blocking certain cookies may affect website functionality.

We use reasonable technical and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, loss, or destruction. Safeguards may include access controls, secure development practices, encryption where appropriate, and monitoring.

No system or method of electronic transmission or storage is completely secure. We therefore cannot guarantee absolute security. Any incident will be handled in accordance with applicable law and relevant contractual obligations.

Depending on your location and applicable law, you may have rights to request access to, correction of, deletion of, or a copy of your personal information; object to or restrict certain processing; withdraw consent; request data portability; or lodge a complaint with a competent authority.

If you are in India, rights and procedures under applicable Indian data protection law may apply. If you are in the European Economic Area, the United Kingdom, or another jurisdiction with specific privacy laws, additional rights may apply.

To submit a request, contact us at sales@sourcecodelab.ai. We may need to verify your identity and will respond in accordance with applicable legal requirements. Some information may need to be retained where required by law or necessary to establish, exercise, or defend legal claims.

Our website or services may link to third-party websites, tools, APIs, or platforms. Those third parties operate under their own terms and privacy policies. We are not responsible for their independent privacy practices. Please review their policies before providing information to them.

Our services are intended for businesses and professional users, not for children. We do not knowingly collect children's personal information in violation of applicable law. If you believe a child has provided personal information to us unlawfully, contact us so we can assess and address the request.

We may update this Privacy Policy from time to time to reflect changes in our services, practices, or legal requirements. We will publish the revised version on this page and update the "Last updated" date. Where required by law, we will provide additional notice or obtain consent.

For questions, privacy requests, or complaints about this Policy, contact: