Legal
Privacy notice
Last updated October 20, 2026
Who we are
The Lab Ledger (“we”, “us”) operates the website at thelabledger.com and the application at app.thelabledger.com. This notice explains what information we collect through them, how we use it and the choices you have.
Information we collect
When you contact us through the website, we receive the name, email address, facility or company name and message you enter. We also record the IP address and browser information sent with the request to protect the form against abuse.
When you create an application account, we collect your name and email address and the sign-in method you choose. Passwords are stored only as a one-way hash; we cannot read them.
When you sign in with Google, Google shares your name, email address, whether the email address is verified and your Google account identifier. We request only these basic profile details. We do not receive your Google password, and Google sign-in does not give us access to your email, files or other Google data.
When you request access for a facility or use the application, we store the facility details you submit, such as name, time zone and license state, and the information you and your team enter while using the service.
Technical information. Our servers keep logs of requests, including IP addresses and timestamps, to operate and secure the service.
Cookies
The application uses cookies that are necessary to keep you signed in and to protect sign-in against forgery. The website does not use advertising or analytics cookies.
How we use information
- To provide, maintain and secure the website and the application.
- To create and manage accounts, verify email addresses and review requests for facility access.
- To respond to messages and to send service emails such as account confirmations, password resets and invitations.
- To prevent abuse, investigate security issues and meet legal obligations.
We do not sell personal information, and we do not use it for advertising.
Google user data
The Lab Ledger’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Information from Google sign-in is used only to sign you in and to connect your Google account to your Lab Ledger account. If a facility separately connects Google Sheets, that connection is authorized by the facility and used only for the spreadsheet features the facility turns on.
Service providers
We share information only with providers that help us run the service, under their own privacy and security commitments:
- Railway, for application and website hosting and databases.
- Resend, for delivering service emails and contact form messages.
- Google, for Google sign-in and, where a facility chooses it, Google Sheets connections.
We may also disclose information when required by law or to protect the rights and safety of our users and the service.
Retention
We keep account and facility information while the account or facility is active, and for as long afterward as needed to meet legal, regulatory and record-keeping obligations. Contact form messages are kept for as long as needed to respond and follow up.
Your choices
You can ask us to access, correct or delete your personal information by emailing info@thelabledger.com. Some facility records may need to be retained for regulatory reasons; if so, we will tell you. You can remove The Lab Ledger’s access to your Google account at any time from your Google Account settings.
Security
We use encrypted connections, hashed passwords, secure session cookies, rate limiting and role-based access controls. No system is perfectly secure, so please use a strong, unique password and tell us right away if you suspect unauthorized access.
Children
The Lab Ledger is a business service for licensed facilities and is not directed to children.
Changes to this notice
We will update this page when our practices change and revise the date at the top.
Contact
Questions about privacy can be sent to info@thelabledger.com.