Privacy Policy

Summary

• This policy covers the nolanlabs.io website. The nolanlabs app is not yet available.
• We collect personal data only when you request a demo or email us, and we use it to reply to you. We don’t sell it, and we don’t use it for advertising.
• The site uses no cookies and no advertising or cross-site tracking. We count visits with cookieless, aggregate analytics.
• Footage you share with us for a demo is never used to train AI models.
• You can ask us to see, correct or delete your data at any time: privacy@nolanlabs.io.

Who we are

The website nolanlabs.io is operated by nolanlabs (“nolanlabs”, “we”, “us”), a company based in the United States. We are the controller of the personal data described in this policy. For anything related to privacy, contact privacy@nolanlabs.io.

What we collect and why

When you request a demo

The form on /demo asks for:

• Required: your name, email address, role and the kind of work you’d like help with.
• Optional: one line about the shot you have in mind.
• Your consent record: the date and time you ticked the consent box and the version of this policy it referred to.
• How you reached the form: the page on our site where you clicked “Request a demo”, which button it was, any campaign tags in the link (UTM parameters), and, if you came from another website, that website’s address without query strings. This tells us which pages and articles are useful. It is taken from the link you followed; it is not stored on your device.
• Your country, which our hosting provider derives from your connection. We don’t store your IP address with your request.

We use this information to:

• reply to your request and arrange a demo, and follow up about it, based on your consent, which you give by ticking the box on the form and can withdraw at any time;
• understand which content brings interested people to us, in aggregate, based on our legitimate interest in improving the website.

You don’t have to give us this information, but we can’t reply to a demo request without at least your name and email address.

Spam protection

The demo form uses Cloudflare Turnstile to tell people from bots. When the form page loads, Turnstile processes technical signals such as your IP address and browser characteristics. We use it because it is necessary to protect the form (our legitimate interest), and it does not set advertising cookies. See Cloudflare’s Turnstile privacy addendum.

When you use “Log in”

Access to the nolanlabs app is by invitation while it is in private development. When you type an email address on /login, we check it against our invite list and tell you whether it has access. We use the address only for that check: it is not stored, logged or shared, and it is not added to any list. Our analytics records only whether the check succeeded, never the address.

When you email us

We use your email address and what you write to reply, and keep the correspondence as described under retention.

Technical data

Like any website, our hosting provider processes your IP address and request details to deliver pages and to protect the site from abuse. Error logs are kept for a short time and do not include the contents of the form.

Analytics and cookies

We don’t use cookies. We don’t use localStorage or sessionStorage to identify you either, and there are no advertising pixels or social media trackers on this site.

To understand how the site is used, we use Umami, a privacy-focused analytics service. It records aggregate information (which pages are viewed, which site or campaign referred the visit, browser and device type, country) and a few events such as clicks on “Request a demo”. It does not set cookies, does not track you across websites, and does not store your IP address. We see only aggregate reports, not individual people. If your browser sends a Do Not Track signal, the analytics script doesn’t record your visit.

We don’t allow other companies to collect personal information about your online activities over time and across different websites through this site. The service providers listed below receive technical data from your browser only to run the site for us; how Cloudflare handles Turnstile signals is set out in its Turnstile privacy addendum, linked above.

Footage you share for a demo

If you choose to share a shot with us so we can show you what nolanlabs can do, you share it outside this website (for example by a transfer link you send us). We will:

• use it only to prepare and run your demo;
• process it only with the AI providers we name to you beforehand, under terms that do not allow them to train models on it;
• never use it to train AI models, and never publish or show it to anyone else without your written permission;
• delete it, and anything we made from it, within 30 days after the demo, or sooner if you ask.

Please only share footage you have the right to share. If your project is under NDA, tell us before sending anything and we can sign your NDA first.

Footage often shows people. We use the people in it only to do the job you ask for. We do performance work (an eyeline, lip-sync, a stunt double’s face) only when the production confirms in writing that each performer whose face or lips change has agreed to that use, and we keep that confirmation with the job records.

Service providers

We use a small number of providers who process personal data on our behalf, under contracts that restrict them to our instructions:

Provider	What for	Data involved
Cloudflare	Website hosting, database for demo requests, Turnstile spam protection	Demo request data, technical data
Resend	Delivering the notification email our team receives for each demo request	Demo request data
Slack	Internal team notification of new demo requests (if enabled)	Demo request data
Umami	Cookieless, aggregate website analytics	Aggregate usage data
Our email provider	Corresponding with you	Emails you send and receive

We don’t sell or rent personal data, and we don’t share it with anyone for their own marketing.

International transfers

Our providers operate internationally, so your data may be processed in countries other than yours, including the United States and the European Union. Where the law requires it, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy framework, and on the transfer requirements of the laws that apply to us.

How long we keep data

• Demo requests and related emails: up to 24 months after our last contact with you, then deleted, unless you become a customer, in which case our customer agreement applies.
• Footage shared for a demo: deleted within 30 days after the demo.
• Analytics: aggregate data only, kept for the provider’s retention period.
• Technical logs: a few days.

Your rights

Depending on where you live, you have the right to access the personal data we hold about you, correct it, delete it, restrict or object to how we use it, receive a copy in a portable format, and withdraw consent at any time (this doesn’t affect what we did before you withdrew).

To use any of these rights, email privacy@nolanlabs.io. We’ll acknowledge your request within two working days and complete it within the time the law requires, usually well within a month. You also have the right to complain to your data protection authority.

Security

Demo requests are stored in an access-controlled database, sent over encrypted connections, and visible only to the people at nolanlabs who reply to them. No system is perfectly secure; if a breach affecting your data happens, we will notify you and the authorities as the law requires.

Children

This website is for professionals and is not directed at children. We don’t knowingly collect data from anyone under 16.

When the nolanlabs app launches

This policy covers the website only. When the nolanlabs app becomes available, with accounts, footage uploads and AI processing, we will publish privacy terms that cover it, including which AI providers process footage, how long files are kept and how deletion works, and we will update this page before the app opens.

Changes and contact

If we change this policy, we’ll update the date at the top, and if the change is significant we’ll say so on this page. Questions or requests: privacy@nolanlabs.io.