Privacy Policy

Last updated: April 2026

⚠️ Experimental Service: McLab is a private personal research lab offering experimental applications for personal trial only. AI-generated responses are for educational and reference purposes only — not official financial advice. This service is intended for users 18 years and older.

1. Information We Collect

We collect only what is necessary to operate the service:

Account information: Email address and password (stored as a one-way hash — we cannot read your password)
Session data: Saved queries and analysis history to restore your work across sessions
Support requests: Name, email, and message when you contact support

2. How We Use Your Information

Your data is used solely for operational purposes:

Authenticate and maintain your session
Restore your saved work across sessions
Respond to support requests
Ensure security and prevent unauthorized access

We do not use your data for advertising, profiling, or any purpose beyond operating the service.

3. Data Storage

Your data is stored on secure servers hosted on AWS Lightsail in Canada (ca-central-1 region). Research data and analysis history are stored in encrypted PostgreSQL databases. We do not sell your personal data to third parties.

4. Third-Party Services

McLab uses the following third-party services to deliver its features:

OpenAI: AI analysis queries are processed via OpenAI's API. Our account is configured with training data opt-out. Queries include stock symbols and analysis parameters but never personal financial account credentials. See OpenAI's Privacy Policy.
Yahoo Finance: Market data, stock prices, and financial metrics (public data only)
Cloudflare: Content delivery, DDoS protection, and SSL termination
AWS SES: Transactional email (alerts, support responses)

5. Data Retention

We retain your account data for as long as your account is active. You may request deletion of your account and all associated data at any time by contacting support. Upon deletion, your data is permanently removed within 30 days.

6. Security

We implement industry-standard security measures including HTTPS/TLS encryption for all traffic, bcrypt-hashed passwords, session-based authentication with expiry, and firewall restrictions on all servers. No system is 100% secure — please use a strong, unique password.

7. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and all associated data at any time

We do not collect data beyond what is needed to operate the service, so there is nothing to export. To request account deletion or data removal, contact us via mclab.vip.

8. Cookies

We use session cookies for authentication only. These cookies expire when you log out or after 30 minutes of inactivity. We do not use tracking, advertising, or analytics cookies.

9. Age Requirement

McLab is intended for users 18 years of age or older. We do not knowingly collect data from minors.

10. Applicable Law

This service operates under Canadian law (PIPEDA). Users in the European Union have additional rights under GDPR. For data subject requests, contact us via the Support form.

11. Changes to This Policy

We may update this policy periodically. We will notify registered users of material changes via email. Continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact

For privacy-related requests or questions, contact us via mclab.vip.