Privacy Policy

LabLinks ("we", "us") is operated by Hammer Forge Apps LLC. This policy covers the LabLinks web portal at lab-links.com (including merchant portals served on custom domains) and the LabLinks app for Shopify. It explains what we collect, why, where it lives, and how to get it deleted. Your use of LabLinks is also governed by our Terms of Service.

• Account information. When you sign up for the portal we collect your name and email address through our authentication provider (Clerk).
• Store information. When you install the Shopify app we receive your store domain, store name, and store contact email from Shopify.
• Product catalog and theme data (read-only). The Shopify app requests read-only access to products and themes so you can link lab reports to products. We never modify your catalog or theme.
• Lab documents and details you upload. PDF and image lab reports, plus the details you enter about them (batch and lot numbers, test dates, lab names, test results, custom fields). Note that lab reports are intended to be shown to your customers — anything you publish is visible wherever you choose to display it.
• Billing information. Portal subscriptions are processed by Stripe; Shopify app subscriptions are processed by Shopify's Billing API. We never see or store full payment card numbers.
• Usage analytics. Interaction events on your storefront and portal (lab report views, downloads, QR code scans). QR scan records store a one-way hashed IP and browser user agent for counting purposes. We do not collect your customers' names, emails, or other personal details.
• Support requests. Messages you send us and the contact details you include.

We use this data to operate LabLinks: displaying lab results on your storefront and portal, generating QR codes, providing analytics on paid plans, processing subscriptions, responding to support requests, and improving the product. If you use optional AI-assisted document features, document contents are processed to extract lab fields at your request. We do not use your data to train AI models.

Data is stored with Supabase (PostgreSQL and file storage hosted on AWS) with row-level security policies scoping every record to your store or organization. The application is hosted on Vercel. All data is encrypted in transit with TLS, and dashboard access requires authentication.

We do not sell, rent, or trade your data. We share it only with the service providers required to run LabLinks:

• Supabase — database and file storage
• Vercel — application hosting
• Shopify — platform integration and app billing
• Stripe — portal subscription billing
• Clerk — portal authentication
• Resend — transactional email
• Cloudflare — DNS and SSL for custom portal domains
• Anthropic — optional AI document analysis features

We may also disclose information when required by law or valid legal process.

Your data is retained while you use LabLinks. When you uninstall the Shopify app, Shopify notifies us and all data associated with your store — including uploaded files — is permanently deleted within 48 hours of Shopify's data-erasure request. When you delete your portal account or organization, your organization's records and uploaded files are permanently deleted. You can also request deletion at any time by contacting support.

You may request access to, correction of, deletion of, or a portable copy of your personal data. Email support@lab-links.com and we will respond within 30 days. We do not discriminate against you for exercising these rights.

The LabLinks Shopify app requests read-only product and theme scopes only. We do not request, access, or store your customers' personal information.

We use essential cookies only: authentication session cookies on the portal and Shopify-managed session tokens in the app, plus local storage for interface preferences. We do not use advertising or cross-site tracking cookies.

LabLinks is a business tool and is not directed at children. We do not knowingly collect personal information from anyone under 13.

If we make material changes we will update the effective date above and notify merchants by email before the changes take effect.

Questions about this policy or your data: support@lab-links.com. Hammer Forge Apps LLC, Minneapolis, MN, USA.