Privacy Policy

1. Scope and controller

This Privacy Policy applies to services operated by Iris Labx, including irislabx.com and Iris Agent (collectively, the "Services"). Iris Labx is responsible for the personal information described in this policy. This policy does not govern third-party websites or services that have their own privacy notices.

2. Information we collect

Information you provide

• Account and contact details, such as your name, email address, company, role, and phone number.
• Prompts, instructions, files, feedback, and other content you submit to Iris Agent.
• Demo, partnership, support, and job-application information, including a resume when provided.
• Payment and transaction information if you purchase a paid service. Payment details may be handled by a payment provider.

Information collected through use

• Device, browser, IP address, timestamps, referral pages, and diagnostic or security logs.
• Product interactions, feature usage, errors, and performance information.
• Authentication and authorization records, including the services you connect and permissions you grant.

Information from connected services

When you connect Google or another third-party service, we receive information permitted by the scopes you approve. Depending on the feature, this may include basic profile information and the minimum data needed to find information or perform an action you requested. The authorization screen identifies the specific categories of data requested before you grant access.

3. Google API and OAuth data

Iris Agent accesses Google user data only after you authorize the relevant OAuth permissions. We use that access to authenticate you, connect the selected Google service, retrieve information you ask Iris to use, and perform actions you direct or approve. We request access appropriate to the feature you use.

Iris Labx does not sell Google user data, use it for advertising, or use it to train generalized AI models. We do not allow people to read Google user data unless this is necessary to provide or secure a user-requested feature, comply with applicable law, or investigate abuse with appropriate safeguards.

Iris Labx's use and transfer to any other application of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke Iris Agent's Google access at any time from your Google Account's third-party connection settings. Revocation prevents future access but does not automatically delete information already retained for a permitted purpose. You may request deletion as described below.

4. How we use information

• Provide, personalize, maintain, and improve the Services.
• Understand your intention, prepare a plan, and execute the actions you request.
• Authenticate users and maintain connections to services they choose.
• Respond to inquiries, demo requests, applications, and support needs.
• Detect fraud, abuse, security incidents, and technical failures.
• Comply with legal obligations and enforce our Terms of Service.

Where required by law, our legal bases include performance of a contract, legitimate interests in operating and securing the Services, consent, and compliance with legal obligations.

5. How we share information

We may share information only as reasonably necessary with:

• Infrastructure, hosting, analytics, communications, security, and payment service providers acting for us.
• Connected services when Iris Agent performs an action you request.
• Professional advisers, auditors, or authorities when required by law or necessary to protect rights and safety.
• A successor in connection with a merger, financing, acquisition, reorganization, or sale of assets.

We do not sell personal information or share it for cross-context behavioral advertising.

6. Security and international transfers

We use administrative, technical, and organizational safeguards designed to protect information from unauthorized access, loss, misuse, or alteration. No system is completely secure, and you should protect your credentials and review requested permissions before connecting a service.

Iris Labx and its providers may process information in countries other than yours. Where required, we use recognized safeguards for international transfers, such as contractual protections.

7. Retention and deletion

We retain information only for as long as needed to provide the Services, satisfy the purpose for which it was collected, resolve disputes, enforce agreements, maintain security, and meet legal obligations. Retention periods vary by data type and context. OAuth tokens are retained while the connection is active or until they are revoked, expire, or are deleted, subject to limited security and legal records.

To request deletion of your account and associated personal information, email contact@irislabx.com from the address associated with your account. We may verify your identity before completing a request.

8. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of your personal information, and to withdraw consent. You may also complain to your local data-protection authority. To exercise a right, contact us using the details below.

You can disconnect third-party services through the applicable provider and manage browser cookies through your browser settings. Some essential storage may be necessary for authentication and security.

9. Children

The Services are not directed to children under 16, and we do not knowingly collect personal information from children under 16. Contact us if you believe a child has provided us with personal information.

10. Changes to this policy

We may update this policy as our Services or legal obligations change. We will post the revised policy here and update the effective date. We will provide additional notice when required by law.

11. Contact us

For privacy questions, requests, or complaints, email contact@irislabx.com.

Iris Labx
Paris, France

See also our Terms of Service.