Skip to content

Privacy Policy

FrictionLab LLC
Effective date: July 5, 2026

This Privacy Policy explains how FrictionLab LLC ("FrictionLab," "we," "us") collects, uses, and shares personal information when you use our websites and software products, including ScholarPilot, TubeCommand, PromptCraft, LeadMate AI, Lumora, PropMate AI, and any other product listed at frictionlabai.com (together, the "Services").

1. Information we collect

Information you provide

  • Account details: name, email address, password (stored hashed).
  • Billing details: handled by our payment processor, Stripe. We do not receive or store full card numbers. We receive limited billing metadata such as the last four digits of your card, billing country, and transaction status.
  • Content you submit to the Services, such as documents, prompts, profile information, and messages to support.

Information collected automatically

  • Usage data: pages viewed, features used, timestamps, and interactions within the Services.
  • Device and log data: IP address, browser type, operating system, and referral URLs.
  • Cookies and similar technologies used for authentication, preferences, and analytics. You can control cookies through your browser settings; disabling some cookies may break sign-in.

Information from third parties

  • If you sign in with a third-party provider (for example, Google), we receive the profile information you authorize, such as your name and email address.

2. How we use information

We use personal information to:

  • provide, operate, and secure the Services;
  • process payments and manage subscriptions;
  • respond to support requests;
  • send transactional emails such as verification, receipts, and service notices;
  • send product updates or marketing emails, which you can opt out of at any time;
  • monitor usage, prevent abuse and fraud, and comply with legal obligations;
  • improve the Services, including debugging and analytics.

3. AI processing

Some features send the content you submit to third-party AI model providers (such as Anthropic) to generate output. We send only what is needed to provide the feature. We do not sell your content, and we do not use your private content to train our own models.

4. How we share information

We share personal information only with:

  • Service providers that help us run the Services, such as payment processing (Stripe), hosting and infrastructure (Vercel, Railway, Supabase), email delivery, authentication, and AI model providers. These providers process data on our behalf under their own security and privacy commitments.
  • Legal and safety recipients, where required by law, legal process, or to protect the rights, safety, or property of FrictionLab, our users, or others.
  • Business transfers, if FrictionLab is involved in a merger, acquisition, or sale of assets, in which case this policy will continue to apply to your information.

We do not sell personal information.

5. Data retention

We keep personal information for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. You can delete your account, after which we delete or anonymize your personal information within a reasonable period, except where retention is required by law (for example, billing records).

6. International transfers

FrictionLab LLC is a US company and the Services are hosted in the United States. If you use the Services from outside the US, your information will be transferred to and processed in the US and other countries where our service providers operate.

7. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, email support@frictionlabai.com. We will respond within the timeframe required by applicable law. You may also have the right to lodge a complaint with your local data protection authority.

8. Security

We use reasonable technical and organizational measures to protect personal information, including encryption in transit, access controls, and hosting with providers that maintain industry-standard security. No system is completely secure, so we cannot guarantee absolute security.

9. Children

The Services are not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. If a change is material, we will notify you by email or in-product notice before it takes effect. The effective date at the top shows when this policy was last revised.

11. Contact

FrictionLab LLC
[US MAILING ADDRESS — insert once received from Rocket Wave]
Email: support@frictionlabai.com