Privacy

You share what you choose. We read it to build for you. We don't train on it, we don't share it, and we delete whatever you ask us to delete.

That is the promise. The rest of this page is the detail behind it, written plainly. If anything here is unclear, email hello@optimizelabs.ai and we will explain it.

Who is responsible for your data

Optimize Labs is the data controller, operating from Australia. For anything about your data, including the requests described below, write to hello@optimizelabs.ai.

What we collect, and why

If you enter the draw

Your business name, email address, website, and which of the four moments you would fix first. We use it to run the draw, to send you the site scan we promised, and to understand what the market needs most. Legal basis: your consent, given with the tick box on the form. You can withdraw it at any time by emailing us.

If you start the intake

Your five answers and the readiness score calculated from them. Your email address, if you give it to us on the booking step. We use it to prepare for your call and to reply to you. Legal basis: your consent for the email, and our legitimate interest in understanding who is asking us for work for the answers themselves. The answers are stored as soon as you finish the questions, before you reach the booking step.

If you accept analytics

The page you viewed, the address you arrived from, any campaign tags in the link, your browser, operating system, device type, and the country your request came from. We also store two random identifiers: one for your visit, and one that is regenerated every day so it cannot follow you across days.

We do not store your IP address. Country is read from a header our host provides and the address itself is discarded. We use this to count visits and see which pages work. Legal basis: your consent. Nothing is recorded until you accept in the cookie notice, and if you decline, nothing is recorded at all.

If you book a call

The booking is handled by our scheduling provider on their own page, embedded in ours. Whatever you enter there is covered by their privacy notice as well as this one.

Cookies and browser storage

We use one cookie and three small pieces of browser storage. No advertising cookies, no third party trackers, nothing shared with ad networks.

• ol_draw_seen, a cookie lasting 90 days. Stops the draw popup showing you the same thing twice. Only set if you accept.
• ol_consent, in local storage. Remembers whether you accepted or declined, so we stop asking. Strictly necessary, because without it we cannot honour your choice.
• Two analytics identifiers, in session and local storage. Random values, not linked to your name. Only written if you accept.

Declining is the default. If you never touch the notice, nothing non-essential is stored and the draw popup never appears on its own.

Who else touches it

We keep the list of companies involved as short as we can. Each is bound by a data processing agreement and may only act on our instructions.

• Vercel, hosting and delivery of this website.
• Supabase, the database that stores draw entries, intake answers, and analytics events.
• Resend, sending email we owe you, such as your site scan.
• Cal.com, the scheduling tool behind the booking step.

We do not sell your data. We do not share it for anyone else's marketing. We do not use it to train AI models, ours or anyone's.

Where it lives, and for how long

EU-hosted. If we work together, a signed data agreement is in place before we open a single file of yours.

• Draw entries: until the draw is settled and scans are sent, then up to 12 months, unless you ask us to delete them sooner.
• Intake answers: up to 24 months, so we can pick a conversation back up where it stopped.
• Analytics events: up to 24 months, then deleted.
• Client work: for as long as we work together, plus whatever period the law requires us to keep records. Then deleted.

Your rights

Under the GDPR you can ask us to show you what we hold, correct it, delete it, hand it to you in a portable format, restrict what we do with it, or object to it entirely. You can withdraw consent at any time, which stops future processing without undoing what was lawful before.

One email to hello@optimizelabs.ai is enough. No form, no process. We answer within 30 days and usually much sooner.

If we get it wrong, you can complain to your local data protection authority. In the EU and EEA that is the regulator in your own country. In Australia it is the Office of the Australian Information Commissioner. We would rather you told us first so we can fix it.

Automated decisions

The intake calculates a readiness score from your five answers and uses it to decide which screen to show you next. That is the only automated decision on this site, it has no legal effect, and a human reads every answer before your call regardless of the score.

Changes to this notice

If we change what we collect, we change this page in the same release and move the date at the top. We do not quietly widen what we do with data you already gave us.