Privacy Policy

01Scope

This policy applies to Humorless Labs LLC, a Colorado limited liability company ("we", "us"). It covers this website, communications with us, the services we provide to clients, and products we sell through online marketplaces.

02Website and hosting

The website does not collect personal information directly. A light or dark theme preference is stored only in your browser. The site is hosted on Cloudflare, which processes technical data such as IP addresses and browser details to deliver pages and protect against abuse, under the Cloudflare Privacy Policy.

03Communications

When you email or call us, we receive your name, contact details and the content of your message. The quote form on this website transmits nothing itself: it opens your own email application with a draft you choose whether to send.

Email is delivered through Cloudflare Email Routing to Gmail, and replies are sent through Resend. Calls, texts and voicemail are handled by Google Voice. We use AI tools to categorize, review and summarize incoming email.

04Consultations

Consultations are scheduled through Cal.com, which shares your name, email address, selected meeting option and stated topic with us. Video meetings are held on Google Meet under the Google Privacy Policy.

05Client engagements

Credentials

We do not retain client passwords or multi-factor codes by default. Access is provided through accounts the client creates for us or during attended sessions. Where an engagement requires a stored credential, it is held in a dedicated encrypted vault, deleted at the end of the engagement, and rotated by the client.

Client data

We copy data from client systems only when an engagement requires it, and delete our copy within 30 days of completion.

Devices in service

Devices received for repair are held in locked storage and returned at the end of the engagement.

Data erasure and disposition

Devices received for erasure or recycling are logged at intake, held in locked storage under chain of custody, and erased or destroyed according to our written procedure. A certificate listing each device is issued on completion.

06Marketplace sales

When you purchase from us on eBay or Swappa, the marketplace provides your name, shipping address and, in some cases, phone number so that we can fulfil the order. These contact details are deleted 30 days after delivery, or 90 days after an order that is not delivered. Your marketplace username is retained for feedback and order history.

07Selling a device to us

To request a quote at humorlesslabs.dev/sell, you verify your email address with a single-use sign-in link. The request contains your email address, the device details and notes you enter, and the photos you upload. Cloudflare Turnstile checks that a person is using the form. Sign-in links are sent through Resend, and the request is delivered to us by email.

Photos are reduced in size on your device before upload, which removes location data, and are stored in a private Cloudflare R2 bucket for no more than 7 days. We then move them to our own systems, remove any remaining metadata, and delete them 30 days after the purchase is completed or declined. Photos are never sent by email. If you accept a quote, we also receive the shipping address and payment details needed to complete the purchase.

Devices we purchase are erased on arrival under our written data-erasure procedure. We do not access their contents.

08Use of information

We use personal information only to respond to enquiries, prepare quotes, schedule and deliver services, and fulfil orders. We do not sell or rent it, and we do not use it for advertising.

09Retention

• Enquiries that do not lead to an engagement: 1 year.
• Quote requests to buy a device: 1 year. Their photos: 30 days after the purchase is completed or declined.
• Client working data: 30 days after the engagement ends.
• Marketplace buyer contact details: 30 days after delivery.
• Contracts, invoices and data-erasure records: 7 years, as tax and legal obligations require.
• Encrypted backups: expire within approximately 3 months.

10Your rights

You may request access to, a copy of, correction of, or deletion of the personal information we hold about you, subject to records we are legally required to retain. Send requests to ops@humorlesslabs.dev. We respond within 45 days and verify your identity before disclosing or changing any information, normally by replying only to the email address already on file.

11Third-party platforms

Messages and reviews on our LinkedIn and Nextdoor pages, our Google Business Profile, eBay and Swappa are held by those platforms under their own policies. The Sign-in Guard browser extension is covered by the Sign-in Guard Privacy Policy.

12Changes to this policy

We review this policy at least annually. When it changes, the effective date above is updated.