Privacy Notice

This notice explains how Huckleberry Concepts, trading as LabelGuard AI ("we", "us"), handles personal data. Huckleberry Concepts is the data controller for the personal data described here: we decide why and how it is processed.

1. Personal data we collect

• Account data — name, email address, and login credentials (passwords are stored hashed by our authentication provider) or your Google sign-in identifier.
• Uploaded content — label artwork files and any personal or business details visible in them (for example producer name and address).
• Review data — reports, scores, rule outcomes, and review history.
• Support messages — the content of emails or messages you send us.
• Usage and technical data — feature usage, log events, device identifiers, browser type, and IP address.

2. Why we use it, and our legal basis

• Creating and administering your account, and providing preflight reviews — performance of a contract.
• Managing free-review allowances, plan status, and access control — performance of a contract.
• Security, abuse and fraud prevention, and service reliability — legitimate interests.
• Improving accuracy of the rules engine and product features — legitimate interests.
• Customer support and service communications — performance of a contract.
• Optional marketing emails about LabelGuard AI — consent, withdrawable at any time.
• Retaining records where required — legal obligation.

3. Who we share data with

• Service providers / subprocessors — cloud hosting, database and file storage, authentication, email delivery, and error monitoring providers, acting on our instructions.
• Merchant of Record — Paddle.com, which handles the sale of our product, subscription management, payments, invoicing, and tax compliance.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where required by law or to protect legal rights.

We do not sell personal data.

4. International transfers

We are based in the United States and our providers may process data in the United States and other countries. Where data is transferred from the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or an applicable adequacy decision.

5. Retention

Account and review data is kept while your account is active and for up to 12 months after closure, so you can restore access and we can resolve disputes. Uploaded artwork can be deleted by you at any time and is removed within 30 days of account closure. Billing records held by Paddle are retained per their obligations. Data no longer needed is deleted or anonymised.

6. Your rights

Depending on where you live, you may request access to your data, correction, deletion, restriction or objection to processing, portability, and withdrawal of consent. California residents may request disclosure of the categories of data collected and deletion, and will not be discriminated against for exercising those rights. UK/EEA residents may also lodge a complaint with their supervisory authority. Contact privacy@labelguard.ai; we respond within one month.

7. Security

We apply appropriate technical and organisational measures, including encryption in transit, private access-controlled file storage, row-level database access rules, and least-privilege administrative access. No system is perfectly secure, but we work to protect your data and will notify you of a breach where required.

8. Cookies

We use essential cookies and local storage to keep you signed in and to maintain your session; the Service does not work without them. If we add analytics or marketing cookies, we will request consent first and provide preference controls. You can also clear or block cookies in your browser settings.

9. Contact

Huckleberry Concepts (trading as LabelGuard AI) — privacy@labelguard.ai.