Privacy Policy

Xylo Labs (“Xylo Labs”, “we”, “us”) is an independent product lab. This Privacy Policy explains what personal information we collect through xylolabs.space and its pages (the “Site”), how we use it, and the choices you have.

We collect as little as we need. We don’t sell personal information, and we don’t use it for advertising.

Information you give us. When you contact us or request early access to an experiment, we collect your name, your email address, the topic you choose, your message, and anything else you decide to include.

Basic technical information. Like most websites, the Site records limited technical information about visits, such as the pages viewed, the type of device and browser, and the general region a visit comes from. We use it in aggregate and not to identify you. The Site doesn’t use cookies.

We use personal information to:

• read and reply to your messages;
• manage early-access requests and tell you when an experiment you asked about is ready;
• understand which parts of the Site are useful, so we can improve it;
• keep the Site secure and prevent spam and abuse; and
• meet our legal obligations.

We won’t add you to a mailing list or send you marketing unless you’ve asked us to.

Where data protection law requires a legal basis, we rely on your consent (for example, when you send us a message or ask for early access), our legitimate interests in running and improving the Site and responding to enquiries, and compliance with our legal obligations. You can withdraw consent at any time.

We don’t sell or rent personal information. We share it only:

• with service providers who help us operate the Site and deliver your messages to us. They may use it only to provide those services, and must keep it confidential and secure;
• if an experiment becomes its own company, with that company, limited to requests about that experiment;
• if required by law, or to protect the rights, safety or property of Xylo Labs, our users or others.

We keep messages and early-access requests for as long as we need them to respond, to follow up on the experiment you asked about, or to meet legal requirements. After that we delete them. You can ask us to delete your information sooner at any time.

We use reasonable technical and organisational measures to protect personal information, including encryption in transit and limited access. No system is completely secure, so we can’t guarantee absolute security, but we work to protect what you share with us.

We and our service providers may process information in countries other than the one you live in. When we do, we take steps to make sure it stays protected as described in this policy and as required by applicable law.

Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, restrict or object to how we use it, receive a copy of it, and withdraw consent.

To make a request, use our contact form. We’ll respond within the time required by law. You also have the right to complain to your local data protection authority.

The Site isn’t intended for children under 16, and we don’t knowingly collect their personal information. If you believe a child has sent us information, contact us and we’ll delete it.

We may update this policy from time to time. When we do, we’ll change the effective date at the top of this page. If a change is significant, we’ll make it clear on the Site.

Questions about this policy or your information? Reach us through our contact form.