PRIVACY POLICY

Your privacy matters to us. This Privacy Policy explains how we collect, use, store, protect, and share your personal information when you use our platform. By accessing or using our services, you agree to the terms outlined in this document.

1. 1. Information We Collect

   We collect the following categories of personal information to provide and improve our services:

   1.1 Account Information

   • Full name: used to personalise your experience and identify your account
   • Email address: used for account login, notifications, and communication
   • Password: stored in an encrypted, hashed format; never readable by our staff
   • Profile picture: used to personalise your public or internal profile display

   1.2 Information from Google Sign-In

   If you choose to sign up or sign in with your Google account, we ask Google only for your basic profile and email address. With your permission, Google shares the following with us:

   • Email address and whether Google has verified it: used to create or find your account; we only accept verified Google email addresses
   • Name: used as your display name, which you can change at any time
   • Profile picture: a link to the picture on your Google account, used as your profile picture until you replace it
   • Google account ID: a unique identifier used to recognise your Google account each time you sign in

   If an account with the same email address already exists, we link your Google account to it so you can use either sign-in method. We never receive or store your Google password. We do not keep Google access tokens, and we cannot read your Gmail, contacts, calendar, Drive files, or any other data in your Google account.

   1.3 Usage Information

   • Log data including IP address, browser type, and pages visited
   • Device information such as operating system and screen resolution
   • Interaction data including clicks, session duration, and feature usage

   1.4 Communications

   • Messages sent through our support channels or feedback forms
   • Responses to surveys or research participation

2. 2. How We Use Your Information

   Your data is used strictly for the following purposes:

   • To create and manage your account
   • To authenticate your identity during login, including when you sign in with Google
   • To send you transactional emails (e.g., password resets, confirmations)
   • To personalise your in-platform experience
   • To improve our product features through aggregated, anonymised analysis
   • To respond to your support requests
   • To comply with applicable legal obligations

   We do not sell, rent, or trade your personal information to third parties for marketing purposes.

   Information we receive from Google is used only to sign you in and to set up and display your account. We do not use it for advertising, sell it, or transfer it to others except as described in this policy. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. 3. Protection of Your Personal Data

   We take the security of your personal information seriously. Below is how we protect each category of sensitive data:

   Name

   Stored securely in our database with access limited to authorised personnel only. Never shared with advertisers.

   Email

   Encrypted in transit via TLS. Used only for account-related communications. Never visible to other users unless you choose to share it.

   Password

   Passwords are hashed using industry-standard bcrypt encryption before storage. We never store plain-text passwords and our team cannot view them.

   Google Sign-In

   Your Google identity is verified with Google's signing keys on every sign-in. We store only your Google account ID, linked to your account, and never your Google password or access tokens.

   Profile Picture

   Stored on secure cloud infrastructure with access controls. You may update or delete your picture at any time from account settings.

4. 4. Data Retention

   We retain your personal data for as long as your account is active or as needed to provide our services. You may request deletion of your account and all associated data at any time by contacting us at the address listed below.

   • Active account data is retained for the duration of your subscription or usage
   • Inactive accounts are flagged for deletion after 24 months of no activity
   • Backup copies may persist for up to 90 days after deletion for recovery purposes

5. 5. Sharing of Information

   We do not share your personal information except in the following limited circumstances:

   • Service providers who assist us in operating our platform (e.g., cloud hosting, email delivery), bound by confidentiality agreements
   • Google: if you use Google Sign-In, Google processes your sign-in under its own Privacy Policy and knows that you have signed in to our platform
   • Legal compliance: when required by law, court order, or to protect our rights
   • Business transfers: in the event of a merger or acquisition, users will be notified

   All third-party partners are vetted to ensure they meet our data protection standards.

6. 6. Your Rights

   Depending on your location, you may have the following rights regarding your personal data:

   • Right to access: request a copy of the data we hold on you
   • Right to correction: update inaccurate or incomplete information
   • Right to deletion: request that we erase your personal data
   • Right to data portability: receive your data in a structured, machine-readable format
   • Right to withdraw consent: opt out of non-essential data processing at any time

   To exercise any of these rights, contact us at privacy@fourlabs.studio. We will respond within 30 days.

   If you signed in with Google, you can remove our access at any time from your Google Account permissions page. Doing so stops future Google sign-ins but does not delete your account or the data we already hold. To delete those, contact us as described above.

7. 7. Cookies & Tracking

   We use cookies and similar technologies to maintain session integrity, remember your preferences, and analyse platform performance. You may manage cookie preferences through your browser settings at any time.

8. 8. Children's Privacy

   Our platform is not intended for users under the age of 13. We do not knowingly collect personal information from children. If we become aware that a minor has provided us with personal data, we will delete it promptly.

9. 9. Changes to This Policy

   We may update this Privacy Policy from time to time. When we do, we will revise the 'Last Updated' date at the top of this document and, where appropriate, notify you via email or an in-platform notice. Your continued use of our services after any changes constitutes your acceptance of the updated policy.

10. 10. Contact Us

    If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us:

    Privacy Officer

    Email: privacy@fourlabs.studio

    Address: No. 9, Ikeja, Lagos State, Nigeria

    Phone: +234 9127034899