PRIVACY POLICY

Effective Date: March 18, 2026

Out of Distribution Labs ("OOD Labs," "we," "us," or "our") operates the website ood-labs.com (the "Site") and develops desktop software products including Sentinel and Meridian. This Privacy Policy explains what information we collect, how we use it, and your choices regarding that information.

We collect very little data. We do not use cookies, tracking pixels, or third-party analytics on our Site. We do not maintain user accounts. This policy is written to be straightforward and honest about what we do and do not do with your information.

1. Information We Collect

Information You Provide Directly

We only collect personal information that you voluntarily submit through forms on our Site:

  • Waitlist signup form: your name, email address, and optionally a social media handle. This information is used to notify you about product availability and updates.
  • Contact/support form: your name, email address, the product your inquiry relates to, and your message content. This information is used to respond to your inquiry.

Information Collected Automatically

Our Site is hosted on Cloudflare Pages. Cloudflare may automatically collect standard server log data such as your IP address, browser type, referring URL, and pages visited. This data is collected and retained by Cloudflare as part of their infrastructure services and is subject to Cloudflare's Privacy Policy. We do not add any additional analytics, cookies, or tracking mechanisms to our Site.

Information We Do Not Collect

  • We do not set cookies on our Site.
  • We do not use analytics services (Google Analytics, etc.).
  • We do not use tracking pixels or advertising networks.
  • We do not collect payment or financial information directly — all payment processing is handled by LemonSqueezy (see Section 3).
  • We do not require or maintain user accounts on our Site.

2. How We Use Your Information

We use the information you provide for the following purposes:

  • Waitlist management: to notify you when products become available, send product announcements, and provide early-access information.
  • Support responses: to respond to questions, bug reports, or other inquiries you submit through our contact form.
  • Product announcements: to send occasional updates about OOD Labs products. You may opt out of these communications at any time (see Section 5).

We do not sell, rent, or trade your personal information to third parties. We do not use your information for advertising or profiling.

3. Third-Party Services

We use a small number of third-party services to operate our Site and business. Each service receives only the minimum data necessary to perform its function.

Resend (Email Delivery)

We use Resend to send transactional and notification emails. When you submit a waitlist or contact form, your name and email address are transmitted to Resend for email delivery and stored in Resend's Audiences feature for future communications. If you provide an optional social media handle on the waitlist form, it is included in internal notification emails sent through Resend but is not stored in Resend's contact database. Resend's handling of your data is governed by their Privacy Policy.

LemonSqueezy (Payments)

We use LemonSqueezy as our Merchant of Record for product purchases. LemonSqueezy collects and processes payment information (credit card numbers, billing address, etc.) directly — this information never passes through our servers or Site. LemonSqueezy handles sales tax, VAT, and payment compliance on our behalf. Their handling of your data is governed by their Privacy Policy.

Cloudflare (Hosting and CDN)

Our Site is hosted on Cloudflare Pages, and static media assets are served from Cloudflare R2. Cloudflare provides infrastructure-level security and performance services that may process standard connection data (IP addresses, request headers) as described in Cloudflare's Privacy Policy.

4. Data Storage and Security

Form submission data (names, email addresses, messages) is processed through Astro Server Actions and transmitted to Resend's servers for storage and email delivery. We do not operate our own database or store your personal data on our own servers.

We take reasonable measures to protect your information, including:

  • All data transmission occurs over HTTPS/TLS encryption.
  • API keys and service credentials are stored securely in environment variables and are never exposed to client-side code.
  • Our Site is statically generated, minimizing attack surface.
  • We use only established, reputable third-party service providers with their own security programs.

No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

5. Your Rights

You have the following rights regarding your personal information:

  • Access: you may request a copy of the personal information we hold about you by contacting us at support@ood-labs.com.
  • Deletion: you may request that we delete your personal information. We will remove your data from Resend Audiences and any other systems where it is stored. Contact us at support@ood-labs.com to make a deletion request.
  • Correction: you may request that we correct any inaccurate personal information we hold about you.
  • Opt-out of communications: every email we send includes an unsubscribe link. You may also email support@ood-labs.com to be removed from our mailing list. Opting out of marketing emails does not affect transactional emails (such as direct replies to support inquiries).

We will respond to all legitimate requests within 45 days. We may ask you to verify your identity before processing your request.

6. Children's Privacy

The Site and our products are intended for users who are at least 18 years old. We do not knowingly collect personal information from anyone under the age of 18. If we learn that we have collected personal information from someone under 18, we will delete that information promptly. If you believe we have collected information from someone under 18, please contact us at support@ood-labs.com.

7. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Effective Date" at the top of this page. If we make material changes to how we handle your personal information, we will notify you by email (if we have your email address) or by posting a prominent notice on our Site.

Your continued use of our Site after any changes to this policy constitutes your acceptance of the updated terms.

8. Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us:

9. California Privacy Rights

While OOD Labs may not currently meet the statutory revenue or data-volume thresholds that mandate CCPA compliance, we voluntarily extend the following rights to all California residents as a matter of transparency and good practice.

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information:

  • Right to know: you may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business purpose for collecting it, and the categories of third parties with whom we share it.
  • Right to delete: you may request that we delete the personal information we have collected from you, subject to certain exceptions.
  • Right to non-discrimination: we will not discriminate against you for exercising any of your CCPA rights.
  • Right to correct: you may request that we correct inaccurate personal information we have collected about you.
  • Sale of personal information: we do not sell or share your personal information as those terms are defined under the CCPA/CPRA. We have not sold or shared personal information in the preceding 12 months. We do not collect sensitive personal information as defined by the CPRA.

To exercise any of these rights, contact us at support@ood-labs.com. We will verify your identity before processing your request and respond within 45 days.

10. International Users and European Privacy Rights

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the following additional provisions apply:

Legal Basis for Processing

We process your personal data based on (a) your consent, which you provide by voluntarily submitting forms on our Site; and (b) our legitimate interests in responding to support inquiries and communicating product updates.

Additional Rights

In addition to the rights described above, you may have the right to: request data portability (receive your data in a structured, machine-readable format); restrict processing of your personal data; withdraw consent at any time (without affecting the lawfulness of processing before withdrawal); and lodge a complaint with your local data protection authority.

International Data Transfers

Your data is processed in the United States through our service providers (Resend, Cloudflare). These providers maintain appropriate safeguards for international data transfers, including Standard Contractual Clauses where applicable.

To exercise any of these rights, contact us at support@ood-labs.com.

11. Data Retention

We retain waitlist signup data for a maximum of 24 months following the associated product's public launch. If you have not made a purchase or engaged with our communications within that period, your data will be securely deleted. Support inquiry data is retained for up to 3 years following resolution for legal defense and record-keeping purposes. You may request deletion of your data at any time by contacting support@ood-labs.com, and we will process your request within 45 days.

Please note that certain transactional data (such as purchase records held by LemonSqueezy and license activation records held by Keygen.sh) may be retained by our third-party service providers as required for tax compliance, fraud prevention, and legal obligations, even after you request deletion of your marketing and support data.

12. Desktop Software

Our desktop applications (including Sentinel) currently do not collect or transmit personal data beyond what is described below. If we introduce features such as crash reporting or usage analytics in the future, we will update this Privacy Policy and clearly disclose what data is collected, how it is used, and how you can opt out. Any such data collection will require your explicit consent.

To verify your software license and prevent unauthorized use, Sentinel transmits a unique machine identifier and license key to our licensing provider (Keygen.sh). Under applicable privacy laws including the GDPR and CCPA, a unique machine identifier may constitute personal data. Our legal basis for processing this data is our legitimate interest in protecting our intellectual property and preventing software piracy. This data is used solely for license verification and is not combined with any other personal information collected through our website.

13. Governing Law

This Privacy Policy is governed by the laws of the State of California, without regard to conflict of law principles.