MC LAB

Legal

Privacy Policy

This policy explains what MC Lab processes when you use the self-serve diagnostic software.

Last updated: September 2, 2026

1. Who we are

MC Lab provides product-level AI-shopping diagnostic software. For privacy questions or requests, contact hello@mclab.party.

2. Information we process

  • Product URLs, buyer-test configurations and other information you submit.
  • Publicly accessible product-page content, Shopify product data, robots directives and related evidence collected from the submitted website.
  • Generated questions, AI responses, sources, classifications, model conditions and diagnostic reports.
  • An essential random browser-session identifier used to associate purchases, remaining diagnostics and reports with your browser.
  • The email used at Paddle checkout, plus Paddle customer, transaction, price and event identifiers needed to verify payment, maintain the account ledger and provide secure account recovery.
  • Limited first-party conversion events such as page visit, checkout start, completed diagnostic and request for human review. These events use a random, short-lived journey identifier and do not include submitted product URLs, report content, email addresses, IP addresses or browser fingerprints in our conversion-event table.
  • Operational information such as timestamps, request identifiers, error logs, security events and approximate network information supplied by our infrastructure provider.

MC Lab does not receive or store your full payment-card details.

3. Why we use information

We process information to provide and secure the service, collect public evidence, run the requested diagnostic, preserve reproducible results, verify purchases, prevent duplicate charges and abuse, provide support, troubleshoot failures and comply with legal obligations.

4. Service providers

We use Cloudflare for application hosting, database, object storage, queues, security and delivery; Paddle for checkout, tax, receipts and payment administration; Resend for requested account-access emails; and OpenRouter plus selected AI and search providers to run controlled model observations. Submitted prompts and the public evidence needed for a test may be sent to those AI providers. Their processing is also governed by their respective terms and privacy policies.

5. Essential browser storage and account recovery

The application uses an essential, secure, HTTP-only cookie to remember the account associated with your diagnostics. It is not used for behavioral advertising. After a verified purchase, you can request a time-limited, single-use access link at the email used for Paddle checkout. The service gives the same response whether or not an email is registered so that the recovery form cannot be used to discover customers.

6. Retention and security

We retain transaction and ledger records as required for financial, fraud-prevention and legal purposes. Diagnostic evidence and operational records are retained for as long as reasonably necessary to provide the report, preserve reproducibility, resolve disputes and improve service reliability. We use access controls, encrypted transport, private object storage, signed payment webhooks and separation between public reports and internal execution records. No system can guarantee absolute security.

7. International processing

Our providers and their systems may process information in countries other than your own. Where required, they use legal mechanisms intended to protect international transfers. Do not submit confidential personal information that is unnecessary for the product diagnostic.

8. Your choices and rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction or a copy of personal information, or to object to certain processing. Send requests to hello@mclab.party. We may need transaction or other information to verify that a request relates to you. Some financial, security and legal records cannot be deleted immediately.

9. Sale of personal information and children

We do not sell personal information or use it for cross-context behavioral advertising. The service is intended for business users and is not directed to children.

10. Changes

We may update this policy as the service or legal requirements change. The date above identifies the current version. Contact hello@mclab.party with questions.