Privacy Policy

1. Scope

This Privacy Policy describes how Labs Companies, Inc. ("Labs," "we," "us," or "our"), a Delaware corporation headquartered in Santa Monica, California, and its affiliates that operate Labs Services collect, use, and disclose personal information across our websites, applications, AI features, portals, and programs that link to or reference this Policy (the "Services") — including labscompanies.ai, Yuhmmy and YuhmmyAI, Labsintelligence and LabsAI, LabsAI Studio, the Chemí voice guide, Labs Start and Labs Learn, Labsacquire, and the Labs Diligence, Labs Memos, and Labs Investors portals. Some Services present supplemental privacy disclosures specific to their environment; those apply in addition to this Policy for the applicable Service.

2. Information We Collect

Information you provide to us directly

• Contact and inquiry information — name, email address, and message contents when you use our contact forms or reach out to Investor Relations or support.
• Account and profile information — credentials and profile details when you create an account or profile (for example, in Yuhmmy), including taste, content, and preference selections you choose to provide.
• Subscription information — email address when you subscribe to updates or the newsroom.
• Investor information — name, email, intended investment details, and related messages when you submit an investment-interest or portal-access request, plus identity and accredited-investor verification information (which may include government-ID and know-your-customer / anti-money-laundering data collected by us or our verification vendors).
• Program and application information — information you submit to Labs Start, Labs Learn, careers, or Labsacquire, including applications, background details, and uploaded materials such as documents and video submissions.
• Payment information — where paid features are offered, billing details are collected and processed by third-party payment processors; we receive limited transaction data and do not store full payment card numbers.
• AI Inputs — the prompts, messages, documents, images, and voice recordings and audio you provide when you use AI features such as LabsAI, YuhmmyAI, and Chemí, together with the resulting transcripts and outputs. See Section 4.
• Other content — files, posts, and materials you choose to upload, send, or publish through the Services.

Information we collect automatically

• Usage and device data — IP address, device and browser type, operating system, app version, identifiers, referring pages, pages and screens viewed, interactions, and timestamps, collected through server logs and, in apps, standard mobile analytics.
• Approximate location — general location inferred from IP address. We do not collect precise geolocation unless a feature requests it and you permit it.
• Cookies and similar technologies — small files, local storage, and SDKs used to operate the Services, remember preferences, secure gated areas, and understand aggregate usage. See Section 6.

Information from third parties

• Verification and compliance providers — identity, accreditation, and anti-fraud checks for investor and program access.
• Platforms and integrations — app stores, authentication providers, and analytics services, consistent with their terms and your settings.

3. How We Use Information

We use personal information to: provide, operate, maintain, personalize, and improve the Services and their features (including consumer products and AI features); create and manage accounts and access credentials; respond to your inquiries and requests; conduct investor relations, including verifying identity and eligibility for credentialed portals and meeting know-your-customer and anti-money-laundering obligations; administer applications and programs (including Labs Start, Labs Learn, careers, and Labsacquire); process payments where applicable; personalize taste and content experiences; communicate with you and manage subscriptions; ensure safety, prevent fraud and abuse, and protect the security and integrity of the Services; conduct research and analytics; comply with legal obligations; and enforce our Terms of Service.

4. AI, Voice & Model Training

When you use AI features such as LabsAI, YuhmmyAI, and the Chemí voice guide, we process your Inputs — including text prompts and, for voice features, microphone audio and voice recordings — and generate outputs, in order to provide and secure the feature. We may retain and review Inputs, transcripts, and outputs to operate the Services, enforce our Terms, ensure safety, debug, and improve quality and our models. Where we use content to train or improve models, we take steps to reduce unnecessary personal information, and we honor applicable choices and legal requirements; certain Services or jurisdictions may offer additional controls, and where required we obtain consent for the processing of voice or other sensitive data. Please do not submit others' personal, confidential, or sensitive information, payment card data, or protected health information to AI features. You can contact us to make requests regarding your AI Inputs as described in Sections 7–9.

5. How We Disclose Information

We disclose personal information only as described below:

• Service providers and processors — hosting, cloud and AI infrastructure, model and voice-processing providers, payment processors, identity- and accreditation-verification vendors, email delivery, and analytics vendors that process information on our behalf under appropriate protections.
• Affiliates — Labs subsidiaries and affiliated entities that operate parts of the Services (for example, Labs Studio Group and Labs Investor Group), for the purposes described in this Policy.
• Professional advisors — lawyers, accountants, auditors, and similar advisors where reasonably necessary.
• Legal and safety — when required by law, subpoena, or legal process, or to protect the rights, safety, and property of Labs, our users, or the public.
• Corporate transactions — in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to customary protections.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

6. Cookies and Analytics

We use cookies, local storage, SDKs, and similar technologies that are necessary for the Services to function (including to secure gated areas and remember preferences) and, where enabled, to understand aggregate usage. Most browsers and devices let you control cookies and identifiers through settings, including blocking or deleting them; portions of the Services may not function properly without necessary technologies. Where legally required, we present cookie choices through a consent mechanism.

7. Your Choices

You may unsubscribe from marketing or update emails at any time using the link in those messages or by contacting us. Where accounts exist, you may review and update certain profile information in-product. You may request access to, correction of, or deletion of your personal information as described in Sections 8 and 9 and by contacting us in Section 14. We honor the Global Privacy Control (GPC) signal where required by law as a valid opt-out of "sale"/"sharing"; because there is no common standard for "Do Not Track," we do not otherwise respond to DNT signals, though our practices remain as described in this Policy regardless.

8. U.S. State Privacy Rights

Depending on your state of residence (including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others with comprehensive privacy laws), you may have some or all of the following rights, subject to exceptions:

• Know / access — the categories and specific pieces of personal information we have collected, the sources, our purposes, and the categories of recipients.
• Delete — personal information we collected from you.
• Correct — inaccurate personal information.
• Portability — receive a copy of your personal information in a usable format.
• Opt out — of any "sale" or "sharing" for cross-context behavioral advertising, and of certain profiling; we do not sell or share personal information for such advertising, so there is nothing to opt out of.
• Limit sensitive information — we do not use or disclose sensitive personal information for purposes that require a right to limit.
• Non-discrimination / appeal — we will not discriminate against you for exercising your rights, and where required we offer an appeal of our decision.

To exercise these rights, email info@labscompanies.com with the subject "Privacy Request." We will verify your request using the information you provide and respond within the timeframes required by law. You may use an authorized agent, subject to verification. For California residents: in the preceding 12 months, we collected the categories of personal information described in Section 2, from the sources described there, for the purposes described in Section 3, and disclosed them to the categories of recipients described in Section 5; we do not sell or share personal information.

9. Users Outside the United States (GDPR/UK)

The Services are operated from the United States, and information is processed and stored in the United States, where privacy laws may differ from those of your jurisdiction; we rely on appropriate safeguards for international transfers where required. If you are in the European Economic Area, United Kingdom, or Switzerland, our legal bases for processing are: performance of a contract or steps you request (responding to inquiries, providing features and accounts); legitimate interests (operating, personalizing, and securing the Services, and investor relations); consent where required (including for certain voice or other sensitive-data processing and non-essential cookies); and compliance with legal obligations. You may have rights of access, rectification, erasure, restriction, portability, and objection, and to withdraw consent and lodge a complaint with your supervisory authority. Exercise these rights by contacting us as described in Section 14.

10. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including providing the Services, security and fraud prevention, and legal, accounting, regulatory, and reporting requirements, and then delete or de-identify it. Retention periods vary by data type and context — for example, investor-verification and transaction records may be retained for longer periods to meet legal obligations, while AI Inputs and transcripts are retained only as long as needed for the purposes in Section 4 or as required by law.

11. Security

We use administrative, technical, and physical safeguards designed to protect personal information appropriate to its sensitivity, including access controls for gated portals. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Children & Teens

Our general Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. Consumer products that permit teen use do so only in accordance with their stated minimum age and applicable law, and with parental involvement where required. If you believe a child has provided us personal information in violation of this Policy, contact us and we will delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date and is effective when posted. Material changes will be highlighted on the Services where appropriate.

14. How to Contact Us

Labs Companies, Inc. · Attn: Privacy · Labsquarters — Silicon Beach, Santa Monica, California
Email: info@labscompanies.com