01 Introduction
Volk Product Labs, LLC ("Laminar," "we," "us") is committed to protecting the privacy of users of the Laminar platform. This Privacy Policy explains what data we collect, how we use it, and your rights with respect to that data.
02 Information We Collect
When you register, we collect your name, email address, Google account identifier, and profile photo via Google OAuth.
We store your organization's name and domain to support multi-tenant access controls.
If your Org Admin connects Google Workspace, we collect user directory data including names, email addresses, admin status, suspension status, Google user IDs, profile photos, and invitation history for users within your organization.
When you connect Xero or QuickBooks, we import transaction records including date, amount, currency, description, contact name, contact ID, bank account reference, and line item details.
We collect and store data about your organization's software subscriptions, including service names, renewal dates, paid license counts, GitHub seat usage, active users, and billing patterns derived from your transaction history.
We collect OAuth event data from Google Workspace and GitHub to help identify which services your users are accessing. This includes app names, OAuth client IDs, permission scopes, event types, and timestamps.
To maintain live connections to third-party services, we store OAuth access tokens and refresh tokens for Google, Xero, and GitHub. All tokens are encrypted at rest using Google Cloud KMS (Key Management Service).
We may collect standard server log data including IP addresses, browser type, pages visited, and timestamps when you use the Service.
03 How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve the Service
- Sync and analyze your subscription and financial data
- Train and improve our internal machine learning models that power subscription detection and spend analytics
- Send transactional communications (e.g., sync status, alerts) where Gmail send is authorized
- Support role-based access controls within your organization
- Detect and prevent unauthorized access or abuse
- Comply with legal obligations
04 Data Sharing
We do not sell your data to third parties.
We may share data with:
- Service providers — third-party vendors who assist us in operating the Service (e.g., cloud hosting on Google Cloud Platform), under data processing agreements
- Third-party integrations — data is transmitted to and from connected platforms (Xero, QuickBooks, Google Workspace, GitHub) as directed by your account actions
- Legal requirements — we may disclose data if required by law, court order, or to protect the rights, property, or safety of Laminar, our users, or others
05 Artificial Intelligence and Machine Learning
Laminar uses machine learning to power core features including subscription detection, spend categorization, and analytics.
- Internal models only — we train and run our own machine learning models using your data. These models are built and operated entirely within Google Cloud infrastructure.
- No external LLM training — your data is not shared with any external AI service for training purposes.
- No commercial LLMs — we do not use commercial large language models such as ChatGPT, Gemini, or Claude to process your data.
- Open source models — where language models are used, we use open source models deployed within our own Google Cloud environment. Your data does not leave our infrastructure.
06 Data Security
We implement industry-standard security practices including:
- Encryption of OAuth tokens at rest using GCP KMS, scoped per organization
- Encrypted data transmission (TLS/HTTPS)
- Role-based access controls within the application
We do not currently hold third-party security certifications (e.g., SOC 2).
07 Data Retention
We retain your data for as long as your account is active. To request deletion of your account and all associated data, contact us at [email protected]. We will process deletion requests promptly, subject to any legal retention obligations.
08 Third-Party Services
The Service integrates with Xero, QuickBooks, Google Workspace, GitHub, and Gmail. Your use of those services is governed by their respective privacy policies. We are not responsible for the data practices of third-party platforms.
09 Cookies and Analytics
We use session cookies to maintain your authenticated session. We also use analytics tools to understand how users interact with the Service and to improve its performance and usability. These tools collect anonymized usage data and do not track you across third-party websites.
10 Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data — contact us at [email protected]
- Object to or restrict certain processing
- Export your data in a portable format
To exercise any of these rights, contact us at [email protected].
11 Children's Privacy
The Service is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, contact us immediately at [email protected].
12 Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notice. Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.
13 Contact
For privacy-related questions or requests, contact us at [email protected].
Looking for the rules that govern your use of Laminar? Read the Terms of Service.