Privacy Policy
Last Updated: January 8, 2026
1. Introduction
Labib ("we," "us," or "our") operates the Labib AI receptionist and customer relationship management platform ("Services"). We are committed to protecting your privacy and ensuring the security of your personal information.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Services. By using our Services, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Information You Provide
We collect information that you provide directly to us, including:
- Account information (name, email address, phone number, company name)
- Business information (services offered, business hours, preferences)
- Customer data that you input into our system
- Communication records (calls, messages, emails processed through our Services)
- Payment information (processed securely through Paddle, our payment processor)
2.2 Information Collected Automatically
When you use our Services, we automatically collect certain information, including:
- Device information (IP address, browser type, operating system)
- Usage data (pages visited, features used, time spent)
- Log data (access times, error logs, performance data)
- Cookies and similar tracking technologies
2.3 Information from Third Parties
We may receive information about you from third-party services, including:
- Payment processors (Paddle) for transaction information
- Communication platforms (WhatsApp, email providers) when integrated
- Analytics services for usage statistics
3. How We Use Your Information
We use the information we collect for the following purposes:
- Service Provision: To provide, maintain, and improve our Services
- Customer Support: To respond to your inquiries and provide customer support
- Communication: To send you service-related notifications and updates
- Processing: To process payments and manage your account
- Analytics: To analyze usage patterns and improve our Services
- Legal Compliance: To comply with legal obligations and protect our rights
- Marketing: To send you promotional communications (with your consent)
4. Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), we process your personal data based on:
- Contractual Necessity: To fulfill our contract with you
- Legitimate Interests: To improve our Services and prevent fraud
- Consent: When you have provided explicit consent
- Legal Obligation: To comply with applicable laws
5. Information Sharing and Disclosure
5.1 Third-Party Service Providers
We share your information with trusted third-party service providers who assist us in operating our Services:
- Paddle: Our payment processor (Merchant of Record) handles all payment transactions and related customer service inquiries
- Cloud Hosting Providers: For data storage and infrastructure
- Communication Platforms: For WhatsApp, email, and SMS integration
- Analytics Services: For usage analytics and performance monitoring
- Customer Support Tools: For providing customer support services
These service providers are contractually obligated to protect your information and use it only for the purposes we specify.
5.2 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
5.3 Legal Requirements
We may disclose your information if required by law, court order, or government regulation, or to protect our rights, property, or safety, or that of our users or others.
6. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to track activity on our Services and store certain information. Cookies are small data files stored on your device.
We use cookies for:
- Authentication and session management
- Preferences and settings
- Analytics and performance monitoring
- Marketing and advertising (with your consent)
You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our Services.
7. Data Security
We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication
- Secure data centers and infrastructure
- Employee training on data protection
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
8. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:
- Account information: Retained while your account is active and for a reasonable period thereafter
- Transaction records: Retained for accounting and legal compliance purposes
- Communication records: Retained as necessary to provide our Services
- Analytics data: Retained in aggregated, anonymized form
When we no longer need your information, we will securely delete or anonymize it in accordance with our data retention policies.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.
When we transfer personal data from the EEA to other countries, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
10. Your Rights (GDPR and Data Protection)
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request access to your personal information
- Rectification: Request correction of inaccurate or incomplete information
- Erasure: Request deletion of your personal information ("right to be forgotten")
- Restriction: Request restriction of processing of your information
- Portability: Request transfer of your information to another service provider
- Objection: Object to processing of your information for certain purposes
- Withdraw Consent: Withdraw consent where processing is based on consent
To exercise these rights, please contact us at info@asklabib.com. We will respond to your request within 30 days (or as required by applicable law).
11. Children's Privacy
Our Services are not intended for children under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will take steps to delete such information.
12. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:
- The right to know what personal information we collect and how it's used
- The right to delete your personal information
- The right to opt-out of the sale of personal information (we do not sell personal information)
- The right to non-discrimination for exercising your privacy rights
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We may also notify you via email or through our Services.
Your continued use of our Services after such changes constitutes your acceptance of the updated Privacy Policy.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Company: Labib
- Website: asklabib.com
- Email: info@asklabib.com
15. Supervisory Authority
If you are located in the EEA and believe we have not addressed your privacy concerns, you have the right to lodge a complaint with your local data protection supervisory authority.