Privacy Policy

Last updated: November 8, 2025

1. Introduction

Label ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our crowdsourced annotation platform.

We comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

Label is the data controller responsible for your personal data. If you have any questions about this privacy policy or our data practices, please contact us at:

  • Email: privacy@label.example.com
  • Address: [Your Company Address]

3. Information We Collect

3.1 Information You Provide

  • Account Information: Name, email address, profile picture (via Google OAuth)
  • Profile Data: Bio, skills, qualifications
  • Work Data: Annotations, labels, and task completions
  • Payment Information: Payment method details (processed securely by third-party providers)

3.2 Automatically Collected Information

  • Usage Data: Pages visited, time spent, features used
  • Device Information: Browser type, operating system, IP address
  • Cookies: See our Cookie Policy for details

4. How We Use Your Information

We use your personal data for the following purposes:

  • To provide and maintain our annotation platform
  • To process your work and facilitate payments
  • To communicate with you about your account and projects
  • To improve our services and develop new features
  • To ensure platform security and prevent fraud
  • To comply with legal obligations

5. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

  • Contract: To fulfill our contractual obligations with you
  • Consent: When you provide explicit consent (e.g., cookies)
  • Legitimate Interests: For improving our services and preventing fraud
  • Legal Obligation: To comply with applicable laws

6. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate data
  • Right to Erasure: Request deletion of your data
  • Right to Restrict Processing: Limit how we use your data
  • Right to Data Portability: Receive your data in a structured format
  • Right to Object: Object to certain processing activities
  • Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, please contact us at privacy@label.example.com

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Account data is typically retained for 7 years after account closure for legal and accounting purposes.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Encryption of data in transit and at rest
  • Regular security assessments and audits
  • Access controls and authentication
  • Employee training on data protection

9. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses approved by the EU Commission
  • Adequacy decisions by relevant authorities
  • Other lawful transfer mechanisms under GDPR

10. Third-Party Services

We use the following third-party services:

  • Google OAuth: For authentication (subject to Google's Privacy Policy)
  • Payment Processors: For handling transactions
  • Analytics: To understand platform usage

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact:

  • Email: privacy@label.example.com
  • Data Protection Officer: dpo@label.example.com

You also have the right to lodge a complaint with your local data protection authority.