Privacy policy

Last updated 30 October 2026

This policy explains what personal data LABH Advisory collects, why, who we share it with and the choices you have. It covers this website (labhadvisory.com), our client agreements and payments, and the LABH team workspace at labhadvisory.com/crm.

What we collect

• Enquiries. When you use the form on this website: your name, email, phone, company, what you need, your message, your startup’s stage and state, and the page you came from.
• Agreements. The details needed to prepare your agreement (such as your name, company, address and contact details), the one-time code we email you, and a record of your acceptance: the time, your IP address and your browser.
• Payments. The amount, date and reference of payments you make to us. We do not store card or bank login details.
• Email. Emails you send to, or receive from, an @labhadvisory.com address, including attachments, are stored in our team workspace so we can reply and keep a record of the work.
• Team members. For people on the LABH team: name, personal sign-in email, phone, department and role, activity in the workspace, and the messages and files they send in team chat (readable only by the people in that chat).

How we use it

• To reply to your enquiry and provide the services you ask for.
• To prepare, issue and keep a record of agreements and payments, and to meet legal, tax and accounting duties.
• To run our team workspace: assigning work, scheduling meetings and sharing documents within the team and with you.

We do not sell personal data and we do not use it for advertising.

Who we share it with

Only the service providers that run our systems, and only for that purpose:

• Vercel hosts this website and its server functions, and counts visits to it (Vercel Web Analytics, described below).
• Supabase stores our database and files.
• Resend sends and receives our email.
• Google serves the fonts on our pages, and provides Google Calendar, Google Meet and Google Drive when a team member connects their Google account (see below).

We may also share data where the law requires it.

Google account data in the team workspace

LABH team members can connect their own Google account to the workspace to send Google Meet invites and share documents from Google Drive. When they do, the workspace asks Google for:

• Your Google email address (email, openid), to show which account is connected and to share documents with teammates.
• Calendar events you schedule from the workspace (calendar.events). The workspace creates, moves and cancels only the events you schedule through it, each with a Google Meet link and the guests you choose. It does not read your other events.
• Only the Drive files you upload through the workspace or pick yourself (drive.file). The workspace reads their name, type and link, and changes who they are shared with when you ask it to. It cannot see the rest of your Drive.

We store the connected Google email, an encrypted access token, and the IDs, names and links of the events and files above, so the workspace can show them and manage sharing. Only the team members who can see the related lead, and the people you share with, see this information.

LABH Advisory’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, or use it to develop, improve or train generalised AI or machine-learning models. People at LABH read it only when needed for the work, for security, or to comply with the law.

To stop access, use Settings → Google → Disconnect in the workspace; this revokes the token with Google and deletes it from our database. You can also remove access at myaccount.google.com/permissions. Files and events stay in your own Google account.

How long we keep it

We keep enquiry, client and agreement records for as long as we need them for the work and to meet legal, tax and accounting duties, and then delete them. Records of agreement acceptance are kept for as long as the agreement could need to be relied on. Sign-up requests that are never confirmed are deleted after a day.

Security

Data is sent over encrypted connections. Our database is not publicly accessible; only our own server functions can read it. Team members see only the leads and contacts they work on. Google tokens are stored encrypted.

Cookies and storage

This website does not use advertising or analytics cookies. To count visits, we use Vercel Web Analytics, which records the page you visit, the site that referred you, your approximate location (country, region and city), and your device, operating system and browser type, without cookies. It recognises a visit only by a hash of the request that is discarded after 24 hours, and the data is not tied to you or your IP address. We see only totals.

The team workspace keeps your sign-in session in your browser’s local storage.

Your choices

You can ask us for a copy of your data, to correct it, or to delete it where we are not required to keep it, by writing to saksham@labhadvisory.com. You can also raise a complaint about how we handle your data at the same address.

Changes

If we change this policy, we will update this page and the date at the top.