Privacy policy

• Account details: your name, email, password (stored securely, never readable by us), organization, role and home city or ZIP code.
• Lab activity: membership requests, project requests (description, scale, timeline, NDA needs), equipment training records and bookings, including any notes you add.
• Facility details that lab managers publish: name, address, contact details, equipment and access requirements.
• Questions you ask the Concierge assistant.

To match you with shared facilities, handle membership and project requests, track training, prevent double-booking, and answer your questions inside the app. We do not sell your information or use it for advertising.

• Only you can see your full profile.
• Lab managers see your name, organization and role, plus your requests, training and bookings — but only at facilities you have contacted or booked. They cannot browse other members.
• Other members never see your name, company, notes or project details. Availability calendars only show when a machine is taken.
• These rules are enforced by the database itself, not just by the screens you see.

Project descriptions and booking notes often contain unpublished work. They are visible only to you and the managers of the facility you send them to. If your project needs an NDA, say so in your request and agree terms directly with the facility.

When you ask the Concierge a question, your question and the app details needed to answer it (your role, facilities, training and bookings) are sent to an AI model run through Lovable's AI service to write the reply. It only sees information you already have access to. We don't use your questions to train models.

Facility maps load map images from OpenStreetMap, and address searches are looked up with OpenStreetMap's Nominatim service. These services receive your browser's IP address and the text you search for, under the OpenStreetMap privacy policy. Fonts load from Google Fonts, which also receives your IP address.

When you sign in, your browser stores a sign-in token so you stay signed in. It is used only for your account and is removed when you sign out.

We use Lovable's built-in analytics to understand how the site is used. It uses no cookies, stores nothing on your device, doesn't keep IP addresses and doesn't identify visitors. Lovable collects this data for us. Lovable's privacy policy explains how it handles it.

It records the pages visited, where visitors came from, their country, browser, operating system and device type, how long they stay, how fast pages load, and errors. Detailed data is kept for 90 days and daily summaries for a year. This is recorded for every visitor, without cookies and without identifying anyone.

Your data is stored with Lovable Cloud using encrypted connections, role-based access and row-level security on every table. Facility managers cannot give themselves extra permissions, and members cannot promote themselves.

You can update your profile, cancel upcoming bookings and ask a facility to remove your training or membership records. To get a copy of your data or delete your account, email the CultureLab team using the contact address on our site.

We'll update this page when our practices change and note the date below.