Privacy Policy for LavaFlow AI

Last Updated: March 25, 2025

INTRODUCTION.

This Privacy Policy describes how Grab Labs, Inc., a Delaware company with offices at 1815B Centinela Ave, Santa Monica, CA 90403 (“LavaFlow AI,” “we,” “us” or “our”) processes personal information that we collect through our generative AI product, LavaFlow AI (the “Service”), our website, and other interactions you may have with us. This policy outlines the types of information we collect, how we use and share it, and the choices you have regarding your information. By using LavaFlow AI, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with this policy, please do not use our Service.

INFORMATION WE COLLECT.

We may collect the following types of information when you use LavaFlow AI:

Information you provide directly to us:
- Contact Data: Such as your name, email address, and any other contact information you may provide. We use this to communicate with you.
- Profile Data: If you create an account, this may include your username, password, and other information you add to your profile, such as biographical details or preferences.
- Your Inputs and Outputs: This includes the text, images, and other inputs you provide to LavaFlow AI, as well as the generated content (outputs). This content may contain personal information depending on the substance and how it’s associated with your account.
- Communications Data: Records of our exchanges with you, including when you contact us for support or feedback.
- Payment and Credit Purchase Data: If you purchase credits to use with LavaFlow AI, we will collect necessary payment information—such as your credit card details or other billing information—which is processed securely by third-party payment processors on our behalf. We also collect your transaction history related to credit purchases and usage.
- User-Generated Content (UGC): Any content you post or share through features of the Service that allow user interaction. If you submit UGC to public areas, it will be considered “public”.
Information collected automatically:
- Device Data: Information about your computer or mobile device, such as your operating system, browser type, IP address, device identifiers, language settings, and approximate location.
- Online Activity Data: Details about your interactions with our Service, including pages viewed, time spent, navigation paths, access times, and whether you open our emails or click on links within them.
- Cookies and Similar Technologies: We use cookies (small text files), local storage technologies, and web beacons (pixel tags) to record your browsing activities, preferences, and login status, and to analyze usage of our Service. You can manage your cookie preferences through your browser settings.
Information from third-party sources:
- Login Integration Partners: If you choose to log in through a third-party service (e.g., Google), we may receive information such as your name, email address, and profile picture.
- Analytics Providers: We may receive analytics data about your use of our Service from providers like Google Analytics.

HOW WE USE YOUR PERSONAL INFORMATION.

We may use your personal information for various purposes, including:

Service Delivery and Operations: To provide, operate, and improve LavaFlow AI (including to train our artificial intelligence models), personalize your experience, establish and maintain your user profile, enable security features, and communicate with you about the Service.
Research and Development: To analyze and improve the Service and our business, and to develop new products and services.
Marketing and Advertising: To send you direct marketing communications (you can opt-out at any time), and to facilitate interest-based advertising through third-party partners.
Improvement and Analytics: To analyze your usage of the Service, understand user activity, and develop new features.
Compliance and Protection: To comply with applicable laws, legal requests, and legal processes; protect our, your, or others’ rights, privacy, safety, or property; enforce our terms of service; and prevent fraudulent, harmful, unauthorized, unethical, or illegal activity.
With Your Consent: In some cases, we may collect, use, or share your personal information with your consent or at your request.
To Create Aggregated, De-identified and/or Anonymized Data: We may create and use aggregated, de-identified, or anonymized data for our lawful business purposes, including to analyze and improve the Service and train our algorithms.

HOW WE DISCLOSE YOUR PERSONAL INFORMATION.

We may disclose your personal information to the following parties: Other Users and the Public: Your profile, UGC, and user input and output data may be visible to other users and the public, depending on your settings.

Affiliates: Our corporate parent, subsidiaries, and affiliates.
Service Providers: Third parties that provide services on our behalf, such as AI providers, hosting, IT support, customer service, email delivery, marketing, and analytics.
Payment Processors: Entities that process your payment information.
Advertising Partners: Third-party advertising companies for interest-based advertising.
Third Parties Designated by You: Where you have instructed us or provided consent to do so.
Business and Marketing Partners: Third parties with whom we co-sponsor events or offer joint products or services.
Professional Advisors: Lawyers, auditors, bankers, and insurers.
Authorities and Others for Legal, Compliance, and Security Purposes: Law enforcement, government authorities, and private parties when necessary for compliance, protection, fraud detection, or to enforce our terms.
Business Transferees: In the context of business transactions like mergers, acquisitions, or the sale of assets.

COOKIES AND OTHER TRACKING TECHNOLOGIES.

We use cookies and similar technologies to enhance your experience, analyze usage patterns, and for advertising purposes.

Types of Cookies: We may use session cookies (deleted when you close your browser) and persistent cookies (remain for a longer period), as well as first-party cookies (set by us) and third-party cookies (set by our partners).
Purposes: These technologies are used for technical operation, functionality, advertising, and analytics.
Your Choices: You can control cookies through your browser settings and may opt-out of interest-based advertising as described in the “Your Choices” section.

DATA SECURITY.

We implement reasonable technical, organizational, and physical safeguards designed to protect your personal information. However, please be aware that no security measures are entirely foolproof, and we cannot guarantee the absolute security of your information.

INTERNATIONAL DATA TRANSFER.

LavaFlow AI is headquartered in the United States and may use service providers that operate in other countries. Your personal information may be transferred to and processed in the United States or other locations where privacy laws may not be as protective as those in your country of residence.

CHILDREN.

LavaFlow AI is not intended for children under the age of 13, and we do not knowingly collect personal information from individuals under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will take steps to delete it.

YOUR CHOICES.

You have certain choices regarding your personal information:

Opt-out of Communications: You can opt-out of marketing-related emails by following the unsubscribe instructions in the emails or by contacting us. You may still receive service-related communications.
Cookies and Web Beacons: You can manage or reject cookies through your browser settings. Disabling cookies may affect the functionality of the Service.
Advertising Choices: You can limit the use of your information for interest-based advertising through browser settings, platform settings (e.g., Google and Facebook), ad industry tools, and mobile device settings.
Linked Third-Party Platforms: If you connect to our Service through a third-party platform, you may be able to limit the information we receive through your settings with that platform.
Close Your Account: You can request to close your account by contacting us.

YOUR RIGHTS.

Depending on your location, you may have certain rights regarding your personal information, which may include the right to:

Access: Request access to the personal information we hold about you.
Deletion: Request that we delete your personal information.
Correction: Request that we correct inaccurate personal information.
Object to Targeted Advertising: Opt-out of the processing of your personal information for targeted advertising.

To exercise these rights, please contact us at support@grablabs.com. We may need to verify your identity before processing your request.

CHANGES TO THIS PRIVACY POLICY.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website or through other reasonable means. Please review this policy periodically for updates. The “Last Updated” date at the top indicates when the policy was last revised. Your continued use of the Service after the effective date of any modified Privacy Policy indicates your acceptance of the updated policy.

HOW TO CONTACT US.

If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact us at:

support@grablabs.com