Privacy Policy

This Privacy Policy explains how LearnSight Systems ("we," "us," or "our") collects, uses, and protects information when you use LabTracks ("the Service"). We take your privacy seriously, especially because LabTracks is used in K-12 educational settings.

1. Who This Policy Covers

This policy covers teachers, lab aides, department heads, and school administrators who create LabTracks accounts. LabTracks is not used by students and does not collect student data.

2. Information We Collect

Information you provide directly:

• Name and email address (for your account)
• School name (entered during signup)
• Inventory data you enter: chemical names, container details, storage locations, purchase orders, audit records
• Payment information - processed and stored by Stripe; we never see or store your card number

Information collected automatically:

• Usage logs: which pages you visit, actions you take (e.g., scanning a container, generating a report)
• Error logs: technical errors captured via Sentry to help us fix bugs
• Standard web data: IP address, browser type, device type - collected by Vercel and Sentry as part of normal hosting and monitoring

3. How We Use Your Information

• To provide and operate the LabTracks service
• To send account-related emails: email confirmation, password resets, invite emails
• To send subscription emails: welcome email, trial expiry reminders
• To process payments via Stripe
• To monitor and fix errors and bugs via Sentry
• To improve LabTracks based on how it is used

4. What We Do Not Do

We do not sell your personal information to any third party. We do not share your inventory data with any third party. We do not use your data to serve advertising. LabTracks products are ad-free.

5. Third-Party Services

LabTracks uses the following third-party services that may process your data as part of operating the service:

• Supabase - database and authentication hosting (supabase.com)
• Vercel - web hosting and deployment (vercel.com)
• Stripe - payment processing (stripe.com). Stripe's privacy policy governs how payment data is handled.
• Resend - transactional email delivery (resend.com)
• Sentry - error monitoring (sentry.io)

Each of these services has its own privacy policy. We choose providers with strong privacy practices and only share the data necessary for each service to function.

6. FERPA

LabTracks is a chemical and biology inventory management tool used by school staff. It is not a student records system and does not collect, store, or process student education records as defined under FERPA (Family Educational Rights and Privacy Act). If your school requires a FERPA data processing agreement, please contact us at hello@lab-tracks.com.

7. COPPA

LabTracks is not directed at children under 13 and does not knowingly collect personal information from children. All accounts must be created by adults (18+) using professional school email addresses.

8. Data Security

We use industry-standard security practices to protect your data, including:

• All data transmitted over HTTPS/TLS
• Database hosted on Supabase with Row Level Security (RLS) - each school can only access its own data
• Authentication managed by Supabase Auth
• Stripe handles all payment data - we never store card numbers

9. Data Retention

We retain your account and inventory data for as long as your account is active. If you cancel your subscription and do not reactivate within 90 days, we may delete your data. We will provide at least 30 days notice by email before permanently deleting any data.

You can request deletion of your data at any time by contacting us at hello@lab-tracks.com.

10. Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your account and data
• Export your inventory data (available from the Reports section)

To exercise any of these rights, contact us at hello@lab-tracks.com.

11. Cookies

LabTracks uses session cookies required for authentication. We do not use advertising cookies or tracking cookies. We do not use third-party analytics cookies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email before the changes take effect. Continued use of LabTracks after the effective date constitutes acceptance of the updated policy.

13. Contact

For privacy questions, data requests, or to request a data processing agreement for your district, contact us at hello@lab-tracks.com.