SuckerLabs ("SuckerLabs," "we," "us," or "our") is a boutique software studio that designs and builds products, tools, automations, and client-specific software solutions for founders and businesses. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit suckerlabs.com(the "Site"), submit an inquiry, read our blog, or otherwise interact with us.
This policy covers our marketing Site and studio operations. Separate written client agreements (and any data processing terms in those agreements) govern how we handle confidential project materials during an engagement. If those agreements conflict with this policy on project data, the client agreement controls.
By using the Site or contacting us, you acknowledge the practices described here. For questions, email privacy@suckerlabs.com.
1. Who We Are
SuckerLabs operates remotely as a global software studio. We offer services including micro-SaaS development, custom automation, web applications, and technical strategy. We do not operate a consumer education platform, student portal, or institution management product through this Site.
2. Scope of This Policy
This Privacy Policy applies to personal information we collect as a business (controller) in connection with:
- Visiting or browsing the Site, including our blog and portfolio pages
- Submitting inquiry, discovery-call, or contact forms (including via Typeform or similar providers)
- Email, messaging, or other communications with our team
- Subscribing to updates, if we offer them
- Limited administrative access to Site tooling (e.g., blog CMS login for authorized staff)
This policy does notcover end users of software we build for clients. Those products are controlled by the client; their own privacy notices apply. When we process personal data solely on a client's instructions as a processor, we do so under the applicable client agreement or data processing addendum.
3. Information We Collect
We collect only what we need to run the studio, respond to inquiries, deliver services, and improve the Site.
3.1 Information you provide
- Contact & inquiry details: Name, email address, company or project name, role, budget or timeline notes, problem description, and any other information you include in a form or message.
- Business communications: Content of emails, calls, proposals, Statements of Work, and related correspondence.
- Client project materials: Credentials, product requirements, brand assets, code repositories, analytics access, and other materials you share so we can deliver contracted work (handled under confidentiality obligations).
- Billing information: Invoicing contacts, company billing address, and payment references. Card details, if any, are processed by our payment providers — we do not store full payment card numbers on our servers.
3.2 Information collected automatically
- Device & usage data: IP address, browser type, device type, operating system, referring URL, pages viewed, timestamps, and approximate location derived from IP.
- Cookies & similar technologies: Session tokens, preference settings (such as theme), and analytics identifiers as described in Section 7.
- Security logs: Authentication events for staff admin access, error logs, and abuse-prevention signals.
3.3 Information from third parties
- Form and scheduling providers that relay your inquiry to us
- Public professional profiles or referrals you ask us to review
- Hosting, analytics, and security vendors that provide aggregated or technical telemetry
4. How We Use Information
We use personal information to:
- Respond to inquiries, schedule discovery calls, and prepare proposals
- Negotiate, perform, and administer client engagements and Statements of Work
- Deliver, maintain, and support software and services you hire us to build
- Communicate about projects, invoices, and operational updates
- Operate, secure, debug, and improve the Site and our internal tools
- Measure Site performance and understand which content is useful
- Comply with legal obligations, enforce our Terms, and protect against fraud or abuse
- With your consent where required, send studio news or marketing (you can opt out anytime)
We do not sell personal information. We do not build advertising profiles from inquiry or client project data, and we do not use client confidential materials to train public third-party AI models.
5. Legal Bases (Where Applicable)
If you are in the European Economic Area, United Kingdom, or a similar jurisdiction, we process personal information under one or more of the following bases:
- Contract: To take steps at your request before entering a contract, or to perform a contract with you
- Legitimate interests: To operate and secure our studio and Site, respond to business inquiries, and improve our services — balanced against your rights
- Consent: Where we ask for it (for example, optional marketing or non-essential cookies)
- Legal obligation: Where we must retain or disclose information to comply with law
6. How We Share Information
We share personal information only as needed to run the studio:
- Service providers / processors: Hosting and edge networks (e.g., Cloudflare), form tools (e.g., Typeform), email and communication tools, analytics, payment processors, and professional advisors bound by confidentiality
- Collaborators: Contractors or specialists engaged under confidentiality to help deliver your project, only as needed for that work
- Legal & safety: When required by law, court order, or to protect the rights, safety, or property of SuckerLabs, our clients, or others
- Business transfers: In connection with a merger, acquisition, or asset sale, subject to appropriate confidentiality protections
We require processors who handle personal information on our behalf to protect it and use it only for the services we instruct them to provide.
7. Cookies & Local Storage
We use cookies and local storage to keep essential Site functions working (for example, theme preference and staff session tokens) and, where enabled, to understand Site traffic.
- Essential: Required for security, authentication, and basic preferences
- Analytics: May collect aggregated usage metrics to improve performance and content
We do not use cross-site advertising cookies on the Site. You can control cookies through your browser settings; blocking essential cookies may break login or preference features.
8. Analytics & Telemetry
We may collect anonymized or aggregated usage telemetry (page views, load performance, error rates) to keep the Site fast and reliable. We aim to minimize identifiers in analytics pipelines and do not combine Site analytics with confidential client project files for advertising purposes.
9. AI Tools
We may use AI-assisted tools internally to draft, review, or accelerate software delivery. When client materials are involved:
- We treat client materials as confidential under the applicable engagement agreement
- We do not feed confidential client data into public model-training pipelines
- Where we use third-party AI APIs, we select providers and configurations consistent with our confidentiality commitments wherever practicable
10. Client Project Data & Confidentiality
During engagements, you may share repositories, credentials, user data samples, and business information. We use that information solely to perform the contracted work, apply access controls on a need-to-know basis, and return or delete materials as agreed at project close (subject to backup and legal retention needs).
Unless a separate data processing agreement says otherwise, you remain responsible for lawful collection of any end-user personal data you provide to us, and for maintaining an appropriate privacy notice for your own product.
11. Data Retention
We retain personal information only as long as needed for the purposes described in this policy, including:
- Inquiries: Typically kept while we evaluate fit and for a reasonable period afterward for follow-up and record-keeping
- Client records: For the duration of the engagement and thereafter as needed for contracts, warranties, taxes, accounting, and dispute resolution
- Site logs: For shorter operational windows unless needed for security investigations
When retention is no longer necessary, we delete or de-identify the information, except where law requires longer storage.
12. Security
We use commercially reasonable administrative, technical, and organizational measures appropriate to a remote software studio, including encrypted transport (TLS), access controls, and least-privilege practices for client systems. No method of transmission or storage is perfectly secure; we cannot guarantee absolute security.
If you believe your interaction with us has been compromised, contact privacy@suckerlabs.com promptly.
13. International Transfers
We operate remotely and may process information in countries other than where you live, including through cloud providers with global infrastructure. Where required, we use appropriate safeguards for cross-border transfers (such as standard contractual clauses or equivalent mechanisms).
14. Your Rights & Choices
Depending on your location, you may have rights to:
- Access a copy of personal information we hold about you
- Correct inaccurate information
- Request deletion, subject to legal and contractual retention needs
- Object to or restrict certain processing
- Withdraw consent where processing is consent-based
- Opt out of marketing communications
- Lodge a complaint with a supervisory authority
To exercise these rights, email privacy@suckerlabs.com. We may need to verify your identity before responding. If you are an end user of a client product we built, please contact that client first — we typically cannot fulfill end-user requests without the client's involvement.
California / similar U.S. state laws: We do not sell or share personal information for cross-context behavioral advertising as those terms are commonly defined. You may still request access or deletion as described above.
15. Children's Privacy
The Site and our services are directed to businesses and professionals. We do not knowingly collect personal information from children under 13 (or under 16 where that is the applicable age). If you believe a child has provided us information, contact us and we will delete it.
16. Third-Party Links
The Site may link to third-party websites, repositories, or social platforms. Their privacy practices are their own; review their policies before providing information.
17. Relationship to Our Terms
Use of the Site is also governed by our Terms & Conditions. Capitalized concepts not defined here have the meaning given in those Terms where applicable.
18. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. We will revise the "Last updated" date at the top of this page. Material changes may also be highlighted on the Site or communicated to active clients when appropriate. Continued use of the Site after an update constitutes acknowledgment of the revised policy.
19. Contact
For privacy questions, data requests, or concerns:
Email: privacy@suckerlabs.com
Studio: SuckerLabs — Remote / Global
Website: https://suckerlabs.com
This document is provided for transparency about our studio practices. It is not a substitute for legal advice. Client engagements may include additional privacy or data-processing terms tailored to the project.