Privacy Policy

Who we are

LMW Labs ("we", "us") operates lmwlabs.dev and builds custom websites, funnels, and business systems for clients. This policy explains what we collect through this website, why, and who else touches it.

What we collect

We only collect information you actively give us. There is no advertising tracker, no analytics script, and no third-party marketing pixel on this site.

Intake form. If you submit the project intake form, we collect your name, email address, business name, website URL, a description of your main offer and pricing, your buyer type, audience size, your biggest current friction, what you have tried before, and how you found us. You may also optionally upload a file, which we store alongside your submission.

Leak audit. If you request a leak audit, we collect your business name and type, location, traffic sources, your answers about lead capture and follow-up, a revenue band, what you want built, any frustration you describe, and your email address and/or phone number plus your chosen delivery method.

Chat assistant. Messages you type into the chat widget are sent to Anthropic to generate a reply. We do not save those conversations to our database — the transcript lives in your browser and disappears when you close or reload the page.

Payments. Deposits and payments are handled entirely by Stripe on Stripe-hosted checkout pages. Your card number never reaches our servers and we never store it. We receive only a confirmation that a payment succeeded, along with the amount and the associated session.

Server logs. Our host, Vercel, records standard technical request logs — IP address, browser user agent, requested URL, and timestamp — for security and reliability.

How we use it

We use what you submit to:

• —Respond to you, prepare for a call, and scope or deliver work you have asked for.
• —Generate and send your leak report, by email or SMS, depending on which you chose.
• —Send transactional confirmations — for example, the email confirming we received your form.
• —Process payments you initiate.
• —Keep the site secure and working.

We do not sell your information, rent it, or share it with advertisers. We do not add you to a marketing list from a form submission alone.

Text messages

If you give us your phone number and choose SMS delivery, you are agreeing to receive text messages from us about your request — a confirmation and then your report. Message and data rates may apply. You can stop them at any time by replying STOP. We do not send marketing texts to numbers collected through this site.

Instagram

We run an Instagram business account and use our own internal tool, MasteryOS, to help manage it through Meta’s official APIs. We connect only our own account. MasteryOS does not offer Instagram or Facebook login to anyone else, and no one else authenticates through it. It does not access Instagram direct messages.

If you comment on one of our Instagram posts, that comment reaches us through Meta and may be processed by MasteryOS so we can read, reply to, or moderate it. Comments on a business account are already public on Instagram. What we may access includes:

• —The text of your comments and of any replies to them.
• —Your Instagram username and account ID.
• —Timestamps and basic comment metadata.
• —Our own account’s profile information, posts, media, and their comment threads.

MasteryOS also publishes to our own account — creating and scheduling our posts. That is outbound only and collects nothing about you.

We use comment data only to read, reply to, hide, or delete comments on our own posts and to manage our own account. We do not use it to build advertising or targeting profiles, we do not sell it, and we do not merge it with website form submissions for marketing. It is not used to train any machine learning model.

Comment data is kept on the same 6 months schedule as everything else in this policy. Meta also holds this data independently under its own privacy policy, and your Instagram privacy settings remain under your control inside the app. You can delete your own comments in Instagram at any time, or email us at info@lmwlabs.faith and we will delete what we hold.

Who else handles your data

We use a small set of service providers to run this site. Each one only receives what it needs to do its job:

• —Vercel — website hosting and server logs.
• —Supabase — the database and file storage where form and audit submissions are kept.
• —Resend — sends our transactional email, including your report.
• —Twilio — sends SMS confirmations and report links when you choose SMS delivery.
• —Anthropic — powers the chat assistant; receives the messages you type into it.
• —Stripe — processes payments and handles all card data.
• —Cal.com — powers our booking links if you schedule a call.
• —Meta (Instagram) — delivers comments left on our Instagram business account, and holds that data under its own privacy policy.

We may also disclose information if the law requires it, or where it is necessary to protect our rights or someone else’s safety.

How long we keep it

We keep form and audit submissions for 6 months after your last contact with us, and longer where we need to for an active client relationship or to meet a legal, tax, or accounting obligation. Files you upload are stored with your submission and deleted on the same schedule. You can ask us to delete your information sooner.

Your choices

Write to info@lmwlabs.faith and we will, within a reasonable time: tell you what we hold about you, correct anything wrong, delete it, or send you a copy. Step-by-step deletion instructions are at lmwlabs.dev/data-deletion. Depending on where you live you may have additional rights under laws such as the GDPR or the CCPA; we will honor those requests regardless of where you are. We will not treat you differently for making a request.

Security

The site is served over HTTPS, and credentials for our service providers are held as server-side environment variables, never exposed to your browser. Uploaded files are stored in a non-public bucket and shared only through short-lived links. No system is perfectly secure, but we take reasonable measures appropriate to the sensitivity of what we hold.

Cookies

We do not set tracking or advertising cookies. If you go through Stripe checkout or a Cal.com booking page, those services set their own cookies under their own policies.

Children

This site is for business operators and is not directed to children under 13. We do not knowingly collect information from them. If you believe a child has given us information, contact us and we will delete it.

Changes

If we change this policy we will update the effective date at the top of this page. Material changes will be described here rather than made quietly.

Contact

Questions or requests: info@lmwlabs.faith