Privacy Policy
This Privacy Policy explains how MediaLabs Group Inc. (“MediaLabs,” “we,” “us”) collects, uses, discloses and protects personal information when you visit our websites (medialabs-co.com and medialabs.us), use our client portal (clients.medialabs-co.com), view an offer or forecast we send you (offers.medialabs-co.com), fill in one of our forms, book or join a call with us, receive our emails or text messages, or otherwise work with us as a brand, creator or partner (together, the “Services”). It also explains the choices and rights you have. Information about our own employees and contractors in that capacity is covered by separate notices.
1. Information We Collect
1.1 Information you give us
- Contact details — name, email address, phone number, job title, company or brand name and website.
- Business information — your answers on our application, booking and forecasting forms, such as your product category, TikTok Shop status, goals, revenue ranges and catalog details.
- Creator information — if you apply to or join our creator programs: your name, mailing address (for product samples), age confirmation, social media handles, audience and sales performance (such as GMV), payout details and the content you create for campaigns.
- Client and contract information — billing contacts and addresses, contract details, campaign briefs, product information, files you upload to the client portal, and messages exchanged with our team (including through Slack Connect).
- Payment and tax information — payments are made through our invoicing and payment providers’ hosted pages. We do not receive or store your full card or bank account number. We collect a tax identification number (such as an EIN or VAT number) to put on invoices, and payout details for creators we pay.
- Communications — emails, text messages, chat messages and support requests you send us.
1.2 Calls and meetings
We may record, transcribe and summarize sales, onboarding and client calls and video meetings to keep accurate records, follow up on what was agreed and train our team. We tell participants when a call is being recorded, for example through the meeting invitation, an on-screen notice or the visible presence of a recording assistant. If you do not want a call recorded, tell us before or at the start of the call and we will not record it. Recordings and transcripts can include your voice, image and what you say.
1.3 Information collected automatically
When you use our websites we and our analytics provider collect device and usage information: IP address, approximate location derived from it, browser and device type, pages viewed, links clicked, the page that referred you, campaign parameters in the link you followed (UTM tags), and identifiers stored in cookies or your browser’s local storage. See Section 6 for details and choices.
1.4 Information from other sources
We obtain information from TikTok and TikTok Shop tools you or a brand authorize us to use; from market-data providers that report publicly available creator, shop and product performance; from public profiles and websites; from brands and creators we work with; and from people who refer you to us.
2. How We Use Information
- To provide our Services: respond to enquiries, schedule and hold calls, prepare proposals and forecasts, run campaigns, match creators with brands, ship samples, report results and pay creators.
- To create and manage contracts, invoices and payments, and to operate the client portal (including signing you in with a one-time code sent to your email).
- To communicate with you about your enquiry, account or engagement, and to send appointment confirmations and reminders.
- To send marketing emails about our Services. You can opt out at any time (Section 7).
- To measure and improve our websites, content and Services.
- To keep the Services secure, prevent fraud and abuse, and enforce our agreements.
- To comply with legal obligations and respond to lawful requests.
Artificial intelligence. We use AI tools provided by our service providers to help summarize calls, draft documents, analyze performance data and answer our team’s questions. These providers process information on our behalf under contracts that limit their use of it to providing services to us. Our team reviews AI output before relying on it for decisions about you, and we do not use automated decision-making that produces legal or similarly significant effects.
3. How We Disclose Information
We disclose personal information only as described here:
- Service providers that process information on our behalf, such as website and database hosting (including Vercel and Supabase), analytics (Google Analytics), scheduling and forms (Calendly, Typeform, Google Forms), CRM, automation and communications (including Close, Zapier, Slack, Google Workspace and our email delivery provider), call recording and transcription (Fathom), e-signature (PandaDoc), invoicing and payments (including Settle, QuickBooks and Whop), project and knowledge tools (such as Notion and Loom), market-research tools, and AI service providers (such as Anthropic and Google).
- Brands and creators we work with, to the extent needed to run a campaign. For example, a creator’s name, handles, performance and shipping address may be shared with the brand whose products they promote, and a brand’s product and campaign information is shared with participating creators.
- Platforms, such as TikTok, when needed to set up collaborations, affiliate programs or ads you have asked us to run.
- Professional advisers, such as lawyers, accountants and insurers.
- Legal and safety — when we believe disclosure is reasonably necessary to comply with law or legal process, protect the rights, property or safety of MediaLabs, our clients or others, or prevent fraud.
- Business transfers — in connection with a merger, acquisition, financing or sale of assets, subject to this Policy.
- With your consent or at your direction.
We do not sell personal information for money. Some state laws treat the use of advertising and analytics cookies as a “sale” or “sharing” of personal information, or as “targeted advertising.” You can opt out of this at any time using the Cookie preferences link in our website footer. We also treat a Global Privacy Control (GPC) signal from your browser as a request to opt out of the sale or sharing of personal information and of targeted advertising: when we detect it, we switch off advertising cookies and signals for that browser. We do not knowingly sell or share the personal information of anyone under 16.
Text messaging. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are excluded from all of the categories of sharing described above and will not be shared with any third parties, except the aggregators and providers that deliver our text messages.
4. Retention
We keep personal information only for as long as we need it for the purposes described in this Policy, then delete or de-identify it. In setting retention periods we consider the nature of the information, why we collected it, whether you have an ongoing relationship with us, and our legal, tax and accounting obligations. As a guide: enquiries from prospects who do not become clients are generally kept for up to three years after our last contact; contract, invoicing and payment records for the length of the relationship plus seven years; call recordings and transcripts for as long as they are needed for the engagement and our records; and Google Analytics data for no more than fourteen months. We may keep information longer where the law requires it or to establish, exercise or defend legal claims.
5. Security
We use reasonable administrative, technical and physical safeguards designed to protect personal information, including encryption in transit, role-based access controls and restricted access to sensitive records. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we learn of a security incident affecting your personal information, we will notify you as required by law.
6. Cookies and Similar Technologies
Our websites use cookies and browser storage for the following purposes:
- Strictly necessary — remembering your cookie choice (“ml-consent”), keeping you signed in to the client portal, and security.
- Analytics — Google Analytics (“_ga”, “_ga_*”) measures how visitors use our site. Google describes its use of this data in How Google uses information from sites that use its services.
- Attribution — we store the campaign that first brought you to our site and your Google Analytics client ID in your browser’s local storage (“ml-attr”, “ml-ga-cid”), and for the current visit the page you came from in session storage (“ml-cta-origin”), and pass them to our booking and application forms (Calendly and Typeform) so we know which pages and campaigns lead to enquiries. In the EEA, UK and Switzerland this happens only after you accept, and declining deletes all three.
- Preferences — remembering that you have dismissed a prompt (“ml_cta_dismissed_at”, “ml_exit_shown_at”) or unlocked the TikTok Shop Forecaster (“ml_fc_unlocked”).
- Embedded content — Typeform, Calendly, YouTube and Vimeo set their own cookies when you interact with content they host. Their privacy policies apply to that use.
Your choices. Use the Cookie preferences link in our website footer to accept or decline analytics and advertising cookies at any time. Visitors in the European Economic Area, the United Kingdom and Switzerland are not tracked by analytics or advertising cookies, and their first-visit attribution is not stored, unless they accept. Declining also deletes the stored attribution and analytics ID. We honor Global Privacy Control signals as described in Section 3. Our websites do not otherwise respond to “Do Not Track” browser signals, because there is no common standard for them. You can also block or delete cookies in your browser settings, or install the Google Analytics opt-out browser add-on.
Google, Calendly and Typeform may collect information about your online activities over time and across different websites when you use our websites.
7. Your Choices
- Marketing emails — click “unsubscribe” in any marketing email or email us. We may still send you messages about an active enquiry, contract or account.
- Text messages — reply STOP to any message to opt out, or HELP for help. Message and data rates may apply.
- Call recording — ask us not to record a call before or at its start.
- Cookies — see Section 6.
8. Your Privacy Rights
Depending on where you live, you may have the right to: know what personal information we hold about you and how we use it; access or receive a portable copy of it; correct it; delete it; opt out of its sale or sharing, targeted advertising, or profiling with legal or similarly significant effects; limit the use of sensitive personal information; withdraw consent; and not be discriminated against for exercising these rights. Residents of California, Colorado, Connecticut, Delaware, Iowa, Indiana, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia and other states with consumer privacy laws may exercise the rights those laws provide.
How to make a request. Email hello@medialabs-co.com with the subject “Privacy request” and tell us what you are asking for. We will confirm receipt, verify your identity by matching information you provide with what we hold (we may ask you to confirm from the email address we have on file), and respond within the time the law requires (generally 45 days). You may use an authorized agent; we will ask for proof of the agent’s authority and may ask you to verify your identity directly.
Appeals. If we decline your request, you may appeal by replying to our decision with the word “Appeal.” We will respond to appeals within the time the law requires. If you are not satisfied, you may contact your state Attorney General.
8.1 California residents
In the past 12 months we have collected the following categories of personal information, from the sources and for the purposes described in Sections 1 and 2, and disclosed them for business purposes to the categories of recipients described in Section 3:
- Identifiers (name, email, phone, postal address, IP address, online identifiers).
- Customer records described in Cal. Civ. Code § 1798.80(e) (contact, billing and payout details).
- Commercial information (services enquired about or purchased; sales performance).
- Internet or other electronic network activity (browsing and interaction with our websites and emails).
- Approximate geolocation derived from IP address (not precise geolocation).
- Audio, electronic and visual information (call recordings, photos and creator content).
- Professional or employment-related information (job title, company).
- Inferences drawn from the above (for example, whether a brand is a good fit for our Services).
- Sensitive personal information limited to a tax identification number provided for invoicing and payout account details for creators we pay. We do not use or disclose sensitive personal information to infer characteristics about you or for any purpose that would give rise to a right to limit under California law.
Analytics and advertising identifiers and internet activity may be “shared” with Google for cross-context behavioral advertising as described in Section 3; you can opt out as described there. We retain each category as described in Section 4. California’s “Shine the Light” law: we do not disclose personal information to third parties for their own direct marketing purposes.
8.2 European Economic Area, United Kingdom and Switzerland
MediaLabs Group Inc. is the controller of your personal information. We rely on the following legal bases: performance of a contract with you or steps you asked us to take before entering one; our legitimate interests in operating, marketing, securing and improving our business, where those interests are not overridden by your rights; your consent (for example, for analytics cookies), which you can withdraw at any time; and compliance with legal obligations. You have the rights to access, rectify, erase, restrict, object to processing (including direct marketing), data portability and withdrawal of consent, and the right to lodge a complaint with your local data protection authority. We are based in the United States, and your information is processed there. Where required, we rely on the European Commission’s Standard Contractual Clauses (and the UK and Swiss equivalents) or another lawful transfer mechanism.
9. Children
Our Services are intended for businesses and for adults aged 18 or older. They are not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.
10. Third-Party Sites and Services
Our Services link to and embed content from websites and services we do not operate, such as TikTok, Whop, Calendly and Typeform. Their own privacy policies govern how they handle your information.
11. Changes to This Policy
We may update this Policy from time to time. We will post the updated version here and change the “Last Updated” date above. If we make material changes, we will provide additional notice, such as a notice on our website or an email to clients. Changes take effect when posted unless we say otherwise.
Questions or Concerns?
If you have any questions about this Privacy Policy or our privacy practices, please contact us at:
MediaLabs Group Inc.
Attn: Privacy
163 NE 24th St, Miami, FL 33137
hello@medialabs-co.com · (216) 314-8323