Privacy Policy

Last updated: September 17, 2026

This Privacy Policy explains how NotyLab (“NotyLab”, “we”, “us”) handles information when you visit our website, create an account, purchase or use NotyLab products, use the web application, contact us, or choose to participate in analytics.

1. Who we are and how to contact us

NotyLab provides software and online tools for scientific image analysis, measurement, data analysis, plotting, and preparation of research outputs. Questions about privacy or data protection can be sent to info@notylab.com.

2. Information you provide

Depending on how you use NotyLab, you may provide account information such as your name and email address; optional profile information such as role, field, current tools, or discovery source; purchase and subscription information; feedback, waitlist responses, support messages, and other information you deliberately submit.

Scientific images, datasets, project information, filenames, and other research content that you choose to process may be handled by the relevant NotyLab feature only as needed to provide that feature. They are not included in the privacy-preserving aggregate analytics described below.

Image Authenticity screening runs on your device, in the browser or through a local component on your computer. The available screening methods do not upload the selected images to NotyLab’s analysis server.

AI assistant and AI analysis requests may send the text you enter, relevant project or sample titles, and numerical results through NotyLab’s AI Gateway to the configured AI provider. The AI Gateway does not receive an attached image file merely because you refer to it in an assistant request. Avoid entering confidential information in text sent to an online AI feature unless you are authorized to share it.

3. Essential technical and security data

NotyLab and its hosting, security, authentication, payment, or infrastructure providers may process technical information that is necessary to deliver and protect the service, such as IP address, browser or device information, request timestamps, security logs, login/session information, and error information. Such data may be processed for authentication, fraud prevention, abuse prevention, debugging, reliability, and security.

4. Privacy-preserving first-party aggregate statistics

We keep limited first-party aggregate statistics so we can understand which public pages, tools, and workflows are useful and improve NotyLab. These aggregate counters are designed so that the analytics tables do not contain a visitor ID, session ID, account ID, email address, IP address, external referrer, query string, filename, free-text input, uploaded file, or scientific content.

For public website measurement, a counter may contain the date, the type of metric, a normalized public page path or adjacent internal page-to-page transition, and a total count. For product measurement, a counter may contain the date, event name, NotyLab tool identifier, Tool/Workflow mode, export format, application version, and a total count. Product events include high-level actions such as opening a tool, starting or completing a workflow, importing an asset, or completing an export.

These aggregate counters operate independently of optional Google Analytics consent. Declining optional analytics does not disable these limited first-party totals. They are not sent to Google. Aggregate counter rows are automatically removed after approximately 13 months (395 days).

5. Optional analytics and journey measurement

Where consent is required, Google Analytics/Google Tag Manager and NotyLab’s consent-based journey analytics remain disabled until you choose Allow analytics. If you consent, analytics may use first-party visitor and session identifiers, page and workflow context, coarse country information, and event information to understand how users move through important journeys and where workflows are abandoned or completed.

For signed-in users, our private first-party reports may associate consented activity with a WordPress account so that we can understand product adoption and support the service. The analytics implementation is designed not to send your email address, filenames, free text, uploaded files, or scientific content to Google Analytics.

You may withdraw or change your optional analytics choice at any time using the Analytics settings link provided by NotyLab. Withdrawing consent stops future optional analytics collection; it does not retroactively change processing that was lawful before withdrawal.

6. Cookies and similar technologies

We use necessary cookies or comparable storage for functions such as authentication, security, and remembering your analytics choice. Optional analytics cookies or tracking technologies are used only in accordance with the consent rules that apply to you. Refusing optional analytics does not prevent normal use of NotyLab merely because analytics were refused.

7. Why we use information

We use information to provide and secure NotyLab; authenticate accounts; process purchases and subscriptions; deliver requested features; answer support requests; prevent fraud and abuse; diagnose errors; understand aggregate product usage; improve usability and workflows; maintain records; and comply with applicable legal obligations.

Depending on the context and applicable law, processing may be based on performance of a contract, compliance with legal obligations, our legitimate interests in operating and improving a secure service, or your consent. Optional analytics that require consent are not enabled until that consent has been obtained.

8. When information is shared

We may use service providers that help us host, secure, operate, analyze, communicate about, or accept payment for NotyLab. They may process information only as necessary to provide their services and subject to their applicable contractual and legal obligations. Google analytics services receive optional analytics data only when those services are enabled in accordance with your consent choice.

We may also disclose information when required by law, to protect the rights and security of NotyLab or others, or in connection with a legitimate corporate transaction subject to appropriate safeguards.

9. International processing

Because NotyLab and its service providers may operate in different countries, information can be processed outside your country of residence. Where required, we use appropriate legal mechanisms and safeguards for international transfers.

10. Retention

We retain information only for as long as reasonably needed for the purpose for which it was collected, to provide the service, resolve disputes, maintain security, meet accounting or legal requirements, or enforce agreements. Consent-based analytics are subject to configured retention controls. Privacy-preserving aggregate counters are retained for up to approximately 395 days before automated cleanup.

11. Your choices and rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or objection to certain processing, and to withdraw consent where processing is based on consent. You may also have the right to complain to your local data-protection authority. Some requests may be limited where we must retain information for legal, security, fraud-prevention, or contractual reasons.

12. Children

NotyLab is intended for scientific, educational, research, and professional use. If local law requires parental or guardian consent for a user’s use of an online service, the user must have that authorization before providing personal information.

13. Changes to this policy

We may update this Privacy Policy when our services, analytics, providers, or legal obligations change. The “Last updated” date above shows when this version was generated. Material changes may also be communicated through the website or application where appropriate.

14. Contact

For privacy questions or requests, contact info@notylab.com.