### Privacy policy

Last updated Oct 20th, 2026.

Lamin Labs GmbH provides this website to Team and Enterprise customers
in the EEA, the UK, and Switzerland. Lamin Labs Inc. provides this
website to all other customers. See the imprint.

Lamin Labs GmbH, Zeppelinstr. 67, 81669 Munich, Germany. Managing
directors: Alexander Wolf and Xiaoji (Sunny) Sun. Registry court:
Amtsgericht München. Registry number: HRB 279584. VAT ID: DE355996313.
Contact: "imprint-de@lamin.ai".

Lamin Labs Inc., a Delaware corporation, 1111B S Governors Ave STE
6014, Dover, DE 19904, USA. Board: Alexander Wolf and Xiaoji (Sunny)
Sun. Registered with the Delaware Division of Corporations under file
number 6905409. Contact: "imprint-us@lamin.ai".

If you have any questions about this privacy notice, including any
requests to exercise your legal rights, please contact us at
"privacy@lamin.ai". The contracting entity described below handles the
request.

The lamin.ai website provides

1. documentation for an open-source data management tool called
 LaminDB

2. a web service called LaminHub to collaborate on *LaminDB instances*

This page informs website visitors about our policies for the
collection, use, and disclosure of personal information if anyone
decides to use the lamin.ai website. If you choose to use our Service
(LaminHub), then you agree to the collection and use of information in
relation to this policy. The personal information that we collect is
used for providing and improving the Service. We will not use or share
your information with anyone except as described in this Privacy
Policy. The terms used in this Privacy Policy have the same meanings
as in our Terms unless otherwise defined in this Privacy Policy.

## Who is the controller?

The company you contract with is the controller of your account
personal data.

* On a Free plan or a Pro plan, Lamin Labs Inc. is the controller,
  wherever you are.

* On a Team plan or an Enterprise plan, Lamin Labs GmbH is the
  controller if the billing country on the order form is in the EEA,
  the UK, or Switzerland. Otherwise Lamin Labs Inc. is the controller.

* A signed Team or Enterprise agreement can name the controller for
  that customer.

## What does this policy cover?

This policy covers two categories of data.

Account data, which the contracting entity controls: your email
address, user handle, profile data from Google, GitHub, Microsoft, or
Okta, session cookies, support mail, and, on a Pro plan, billing
identifiers from Stripe. Card numbers stay with Stripe.

Customer content in a connected location or a Lamin-hosted location.
We do not control that content. Where we host it, we process it under
the Terms, or under the signed Team or Enterprise agreement.

## How do we use your data?

Your account data is used to identify you on LaminHub. A basic feature
of LaminHub consists in attributing actions on LaminHub to a user
identity. If all changes were made anonymously, LaminHub had little
value.

We also use account data to provide the plan you subscribe to, to bill
a Pro plan through Stripe, and to host the included database and
storage.

## What about cookies and other identifiers?

We do not set cookies when you only visit the website.

If you sign up, or sign in, we set a cookie through Supabase so we can
keep your session. We do not use cookies to track usage, device, or
third-party information.

## Where is data stored?

Your account data is stored on AWS in the us-east-1 region.

Customer data in hosted databases and storage are stored on AWS in the
region that you choose through the UI.

## How long is data stored?

Lamin retains service data for the duration of the customer's business
relationship with Lamin and for a period of time thereafter, to
analyze the data for Lamin's own operations, and for historical and
archiving purposes associated with Lamin's services. Account data, and
customer content in a Lamin-hosted location, is usually deleted 6
months after the account is deactivated, unless a longer period is
required by law, accounting, or regulation. Lamin retains prospect
data until such time as it no longer has business value and is purged
from Lamin systems. All personal data that Lamin controls may be
deleted upon verified request from data subjects or their authorized
agents. For more information on where and how long your personal data
is stored, and for more information on your rights of erasure and
portability, please contact us at "privacy@lamin.ai".

## Is data shared with third parties?

A list of our third-party subprocessors is at trust.lamin.ai.

* Supabase processes account data and sessions.

* Stripe processes Pro billing data. Card numbers stay with Stripe.

* AWS provides infrastructure and hosts Lamin-hosted content.

* Sentry monitors app usage and errors for authenticated users.

Where Lamin Labs GmbH is the controller, Lamin Labs Inc. is an intra-
group processor.

We may share data if: (1) you request or authorize it; (2) the
information is provided to comply with the law (for example, compelled
by law enforcement to comply with a search warrant, subpoena, or court
order), enforce an agreement we have with you, or to protect our
rights, property or safety, or the rights, property or safety of our
employees or others; (3) to address emergencies; or (4) to address
disputes, claims, or to persons demonstrating legal authority to act
on your behalf.

In the future, we may gather aggregated data about our services and
website visitors and disclose the results of such aggregated (but not
personally identifiable) information to our partners, service
providers, advertisers, and/or other third parties for marketing or
promotional purposes.

The Lamin website connects with third party services such as LinkedIn,
GitHub, and X. If you choose to share information from the Lamin
website through these services, you should review the privacy policy
of that service. If you are a member of a third party service, the
aforementioned connections may allow that service to connect your
visit to our site to your personal data.

## International transfers

If Lamin Labs Inc. is the controller, your account data is processed
in the United States. If you are in the EEA or the UK, you still have
the rights below where the GDPR or the UK GDPR applies, because the
service is offered to you.

If Lamin Labs GmbH is the controller, Lamin Labs GmbH is in Germany
and transfers account data to Lamin Labs Inc. and to subprocessors in
the United States under standard contractual clauses (GDPR Article
46). Those clauses are agreed between Lamin Labs GmbH and Lamin Labs
Inc., and with the relevant subprocessors. Depending on the
circumstance, Lamin Labs GmbH also collects and transfers personal
data with consent, to perform a contract with you, or to fulfill a
compelling legitimate interest in a manner that does not outweigh your
rights and freedoms.

Lamin endeavors to apply suitable safeguards to protect the privacy
and security of your personal data and to use it only consistent with
your relationship with Lamin and the practices described in this
Privacy Policy. Since it was founded, Lamin has received zero
government requests for information.

For more information or if you have any questions, please contact us
at "privacy@lamin.ai".

## Children's data

We do not knowingly attempt to solicit or receive information from
children.

## What are my rights under data protection laws?

You have various rights under applicable data protection laws,
including the right to:

* access your personal data (also known as a "subject access request")

* correct incomplete or inaccurate data we hold about you

* ask us to erase the personal data we hold about you

* ask us to restrict our handling of your personal data

* ask us to transfer your personal data to a third party

* object to how we are using your personal data

* withdraw your consent to us handling your personal data

You also have the right to lodge a complaint with your relevant
supervisory authority. You can find which one applies to you here.

Please keep in mind that privacy law is complicated, and these rights
will not always be available to you all of the time.

## Questions, concerns or complaints

If you have questions, concerns, complaints, or would like to exercise
your rights, please contact us at "privacy@lamin.ai". The contracting
entity handles the request. You can also reach Lamin Labs GmbH at
"imprint-de@lamin.ai" and Lamin Labs Inc. at "imprint-us@lamin.ai".