Privacy Notice

Last updated: November 8, 2026

This policy explains how Promote Labs Inc., 2248 Meridian Boulevard Suite H, Minden, NV 89423, USA ("we") collects, uses and shares personal information on our websites (including PromoteLabs.com and ProductDyno.com) and in our products and software (the "Services"). Privacy questions and requests: privacy@promotelabs.com.

Two roles we play

• For our own customers and visitors we decide how data is used (we're the "controller" or "business").
• For our customers' audiences (for example, the members, students and buyers of a course or product that a customer hosts on ProductDyno), we process data on our customer's behalf (we're a "processor" or "service provider"). The customer's own privacy notice applies, and our Data Processing Addendum governs how we handle it. If you're one of those members or buyers, please contact the business you bought from.

What we collect

Category	Examples	Where it comes from
Account and contact	Name, email, password (stored only as a secure hash), company, team members	You
Billing	Plan, payment status, invoices, billing address. Card details are handled by our payment providers and marketplaces; we never see full card numbers.	You, payment providers
Your content	Courses, products, files, pages, member lists and settings	You
Support and AI	Help desk and chat messages; prompts and content you send to our AI tools	You
Device and usage	IP address, browser, pages viewed, sign-in times, security logs	Automatically
Cookies and similar	Sign-in session, security token, affiliate referral cookies, analytics and advertising cookies (see below)	Automatically
Customers' audiences (as processor)	Members' and buyers' names, email addresses, purchase and access records, course progress and login activity	Our customers' products and pages

We don't knowingly collect sensitive personal information (such as health, financial account or government ID numbers), and we ask customers not to send it through the Services.

How we use it, and our legal bases

Purpose	Legal basis (EU/UK)
Create and run your account, deliver the Services, process payments	Contract
Security, fraud prevention, abuse and spam prevention	Legitimate interests; legal obligation
Support, service emails (receipts, renewal reminders, security alerts)	Contract; legal obligation
Improve and fix the Services, measure usage	Legitimate interests
Marketing emails about our products	Consent, or legitimate interests for existing customers (you can opt out anytime)
Analytics and advertising cookies	Consent where required
Taxes, accounting, legal claims	Legal obligation; legitimate interests

AI processing

When you use our AI tools, the prompts and content you send are processed by third-party AI providers (such as Anthropic and OpenAI) to produce results. They act as our service providers under business terms that don't allow them to use your data to train their models. We don't use AI to make decisions that have legal or similarly significant effects on you.

Who we share it with

We do not sell your personal information for money. We share it only with:

• Service providers that run the Services for us, under contracts that limit their use of the data. See the list in our Data Processing Addendum.
• Integrations you choose (for example, an email platform or payment account you connect).
• Advertising partners (Google and Meta), for example to show our ads to people who visited our sites. Under some US state laws this may count as "sharing" for targeted advertising; you can opt out (see below).
• Authorities and legal process, when required by law or to protect rights and safety.
• A buyer or successor if we merge, are acquired or sell assets, with notice to you.

Cookies

Our sites use cookies needed to sign in, stay secure and credit affiliates (including PayKickstart affiliate tracking), plus analytics and advertising tools: Google Tag Manager, Google Analytics, Google Ads, the Meta Pixel and Hotjar. Inside ProductDyno we use PostHog to understand how features are used. A banner lets you decline ad and analytics cookies (and change your choice anytime with "Cookie settings"). You can also block or delete cookies in your browser, and opt out of Google Analytics with Google's opt-out tool and of Hotjar at hotjar.com/policies/do-not-track.

Opting out of sale or sharing

To opt out of any sale or sharing of your information for targeted advertising, email privacy@promotelabs.com with the subject "Do Not Sell or Share," or block advertising cookies in your browser (including with a Global Privacy Control setting). We'll act on your request within 15 business days.

How long we keep it

Data	How long
Account and content	While your account is open. When your account is closed, we delete or anonymize it within 90 days, unless the law requires us to keep it.
Billing and tax records	7 years (legal requirement)
Customers' audience data (members and buyers)	As long as the customer keeps it in their account; deleted when they delete it or close their account
Security logs	Up to 12 months
Marketing list	Until you unsubscribe, then kept only as a suppression entry so we don't email you again

Your rights

Depending on where you live, you can ask to know and access your data, correct it, delete it, get a portable copy, opt out of sale, sharing, targeted advertising and profiling, restrict or object to processing, and withdraw consent. We won't treat you differently for using these rights.

How to ask: email privacy@promotelabs.com. We'll verify your identity (usually by confirming your account email) and reply within 30 days (45 days where state law allows, with notice if we need longer). You can use an authorized agent with your signed permission. If we refuse, you can appeal by replying to our decision; we'll answer the appeal within 45 days (60 in some states), and you can contact your state attorney general if you disagree.

US state residents: these rights apply to residents of California and the other states with comprehensive privacy laws, including Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia, and new states as their laws take effect (including Oklahoma, Louisiana and Alabama in 2027).

California notice at collection: in the last 12 months we collected the categories in the table above (identifiers, customer records, commercial information, internet activity, and inferences limited to product use) for the purposes above, from the sources above. We disclosed identifiers and internet activity to service providers and to advertising partners. We do not sell personal information for money and don't knowingly sell or share data of anyone under 16.

Nevada: we don't sell covered information as defined by Nevada law. You can still send an opt-out request to privacy@promotelabs.com.

EU and UK: you can also complain to your local data protection authority.

International transfers

We're based in the United States and store data there. For data from the EU, UK or Switzerland, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum), and on our providers' certification under the EU-US Data Privacy Framework where they have it.

Security

We use encryption in transit (HTTPS), hashed passwords, access controls and regular backups. No system is perfectly secure. If a breach affects your personal information, we'll notify you and the authorities as the law requires (for EU/UK data, the authority within 72 hours).

Children

Our Services are for adults and businesses. We don't knowingly collect data from children under 13 (or under 16 in the EU/UK). If you think a child gave us data, email us and we'll delete it.

Email

You can unsubscribe from marketing emails using the link in any email. We'll still send account and billing emails.

Changes

We'll post updates here with a new date, and email you about material changes before they take effect.

Other policies: Terms & Conditions · Refund Policy · Acceptable Use · Data Protection · Website Disclaimer · Earnings Disclaimer · Affiliate Disclosure