Privacy Policy | Prodigy Labs

Prodigy Scientific, Inc. ("Prodigy Labs," "we," "us," or "our") operates the Prodigy Labs platform, including the website at prodigy-labs.com and the application at app.prodigy-labs.com (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our Services.

By using our Services, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Account Information. When you register, we collect your name, email address, organization name, and password (hashed).

Laboratory Data. We store data you input into the platform, including inventory records, sample logs, experiment notebooks, test orders, and certificates of analysis. This data belongs to you.

Usage Data. We automatically collect information about how you interact with the Services, including page views, feature usage, and actions taken within the platform.

Payment Information. Billing is processed by Stripe. We do not store full credit card numbers. We retain billing metadata such as subscription tier, invoice history, and Stripe customer ID.

Communications. If you contact us by email or through the platform, we retain those communications to respond and improve our support.

Third-Party Integrations. If you connect third-party services (e.g., QuickBooks Online), we receive and store the OAuth tokens and data necessary to provide the integration. We access only the data required to operate the integration and do not sell or share it.

2. How We Use Your Information

To provide, operate, and improve the Services
To manage your account and process transactions
To send transactional emails (order confirmations, COA delivery, alerts)
To analyze usage and improve platform performance
To comply with legal obligations
To respond to your requests and provide customer support

We do not sell your personal information or laboratory data to third parties. We do not use your data to train AI models without your explicit consent.

3. Sharing of Information

We share information only in the following circumstances:

Service Providers. We use third-party vendors to operate our Services (e.g., Supabase for database hosting, Stripe for billing, Resend for email, Vercel for application hosting). These vendors process data only as directed by us and are bound by data protection agreements.
Legal Requirements. We may disclose information if required by law, court order, or government authority.
Business Transfers. In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the transaction, subject to equivalent privacy protections.
With Your Consent. We share information in other cases only with your explicit consent.

4. Data Retention

We retain your account and laboratory data for as long as your account is active or as needed to provide Services. You may request deletion of your account and associated data at any time by contacting us at james@prodigyscientific.com. Certain records may be retained longer where required by law or for legitimate business purposes (e.g., ISO 17025 audit trails).

5. Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, role-based access controls, and row-level security at the database layer. No method of transmission or storage is 100% secure; we cannot guarantee absolute security but take reasonable precautions to protect your information.

6. Cookies and Tracking

Our website uses cookies and similar technologies for session management, analytics, and marketing attribution. You may adjust cookie preferences in your browser settings. Disabling cookies may affect certain platform functionality.

7. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware of such collection, we will promptly delete the information.

8. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict use of your personal data. To exercise these rights, contact us at james@prodigyscientific.com. We will respond within 30 days.

9. Third-Party Links

Our Services may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice within the platform. Continued use of the Services after changes constitutes acceptance of the revised policy.

Contact Us

Prodigy Scientific, Inc.
San Diego, California
james@prodigyscientific.com
prodigy-labs.com