How we handle your data.
Your business accounts stay yours. We start by reading the information you choose to connect, for the work we agree with you.
Updated 26 October 2026
When you contact us
Our first look at a business uses public information. You do not need to connect an account or share private business records to receive it.
If you use the website form, we save the website address, the email or phone number you provide, the submission time and a request reference. We use those details to prepare and respond to your request.
The form runs on Cloudflare. It saves the request there, sends it to the inbox behind [email protected], and adds it to our private enquiry record on GitHub. The inbox uses Gmail. These services process the information as part of providing that service.
Saved enquiries and delivery records are retained; there is currently no automatic deletion period. You can contact us about a copy, correction or removal, including copies held in email and record history.
The main website remembers your light or dark theme and motion choice in your browser. Hosting and email providers also process technical information needed to deliver and protect their services.
When we work with your business
- You grant access from your own account to a named Blue Lab user, reading only. Nothing is installed on your side, and we never ask you to send us a password.
- We start with reading access. Your email, job system, spreadsheets and other business systems remain the working records.
- You, the people you choose and the assistant doing the agreed work use the information. The account and AI providers involved also process it to provide their services; their permissions and terms apply.
- We keep a business file with relevant facts, their sources, your choices and corrections, and we deliver it into a folder you own as it changes; our copy is the working copy. We read your mailbox and systems in place and keep no copy of them. We focus on the work and use the information needed for it.
- Actions such as paying, sending messages, signing or deleting wait for the approval you have agreed. A connected account is not permission to do everything it allows.
Your choices
You can change the agreed work, who sees updates and how you hear from us. You can remove a connection through the account or assistant that provides it. Removing access does not automatically remove information already saved in a business file or enquiry record.
For questions about your information, or to ask for a copy, correction or removal, write to [email protected]. We will explain what we hold and the steps needed for your request.