← Back to Unbuilt Lab

Privacy Policy

Last updated: August 6, 2026

1. Information We Collect

Email and name (at signup)
Search criteria and history
Device info and IP address
Subscription status (via payment receipts)

2. How We Use Information

Provide and improve the service
Send service notifications and our email newsletter (Sunday Signals) and product digests. When you create an account, we enroll you in these emails by default. You can unsubscribe at any time using the link in every email or from your account profile.
Analytics to improve idea quality

3. What We Don't Do

We never sell personal data to third parties
We never share search history with other users
We never use data for advertising

4. Data Retention

We retain your data for as long as your account is active. Upon account deletion, your personal data is removed within 30 days.

5. Third-Party Services

We rely on a small number of processors to run the service. Each receives only what it needs:

Lemon Squeezy — our payment provider and Merchant of Record. They are the seller of record for every purchase and handle checkout, billing, invoices, refunds and sales tax/VAT. They receive your email address, billing name, billing address and payment details. We never see or store your card details. Your purchase data is governed by their privacy policy as well as ours.
Firebase (Google) — handles sign-in and authentication. Receives your email address and authentication tokens.
AI providers (OpenAI, Anthropic, Google, Perplexity) — receive the content of research requests so deliverables can be generated. We use their business/API tiers, under which they state they do not train models on API content.
Email delivery — used to send verification, receipts and completed deliverables.
Hosting and infrastructure — stores your account and deliverables.

We do not sell your personal data, and we do not share it with anyone beyond the processors needed to deliver the service.

6. User Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us.

Export. Every deliverable you generate is downloadable as a PDF from the Downloads area of your account for as long as your account exists. If you want a copy of the other data we hold about you — profile, saved ideas, search history and purchase records — email hello@unbuiltlab.com and we will provide it in a machine-readable format.

Deleting your account. Deleting your account removes your profile and personal data. It also permanently ends any remaining plan credits and On-Demand credits, and removes your access to previously generated deliverables. Download anything you want to keep before you delete. Deletion is not reversible and does not by itself generate a refund — refund eligibility is governed by our Refund Policy.

7. Security

We use industry-standard encryption (HTTPS/TLS), hashed passwords, and secure token management to protect your data. No system is perfectly secure, and we cannot guarantee that unauthorised access will never occur.

Breach notification. If we become aware of a personal-data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users by email without undue delay — and in any event within 72 hours of becoming aware, where that deadline applies to us — describing what happened, what data was involved, what we are doing about it, and what you should do. We will notify the relevant supervisory authority where required by law.

8. Children's Privacy

Unbuilt Lab is not intended for users under 18 years of age. We do not knowingly collect data from minors.

9. Changes to Policy

We will notify users of material changes to this policy via email or in-platform notification.

10. Contact

For privacy-related questions or data requests, contact us at hello@unbuiltlab.com.