Legal
Privacy Policy
Last updated: July 3, 2026
This Privacy Policy describes how Cliff Labs Incorporated ("Cliff Labs," "we," "us," or "our") collects, uses, and shares information when you visit this website or contact us through it.
Overview
This Privacy Policy explains how Cliff Labs Incorporated ("Cliff Labs," "we") collects, uses, discloses, and safeguards information when you use clifflabs.us and our related application portals (careers, partner, investor, and contact). By using the site or submitting information, you agree to this Policy.
Information We Collect
We collect information you provide directly — through contact, partner, and investor inquiry forms (name, email, organization, role, area of interest, message); job applications (name, email, phone, location, work-authorization status, profile links, resume/CV, education and work history, salary expectations, availability, and responses to screening questions, including scenario/values questions); and partner applications (company name, website, business identifiers such as UEI/CAGE where provided, company size and type, contact details, partnership interest, capabilities, and compliance posture). We also collect an email address and authentication credentials to create and verify your account, and a limited amount of first-party analytics data automatically (pages visited, referrer, general device/browser info). Resumes are stored in secured file storage.
How We Use Your Information
To respond to inquiries; evaluate job, partnership, and investor interest; communicate about your application or request; operate, secure, and improve the site and services; and meet legal, contractual, and regulatory obligations. We do not sell your personal information.
Recruitment Notice
Cliff Labs is an equal-opportunity employer. Application information is used to assess candidates against job-related criteria. Screening responses may be reviewed and scored to help evaluation; hiring decisions are made by human reviewers, not automatically. Where AI-assisted assessment is used, we will provide notice and, where required, obtain consent and conduct bias auditing before it affects any decision. You may request information about, or correction of, the data in your application.
How We Share Information
We share information only with our authorized personnel who need it for the purposes above; service providers that host and secure our infrastructure (Google Firebase — Authentication, Firestore, and Cloud Storage — processing data on our behalf); and others where required by law or to protect our rights. We do not sell personal information or share it for cross-context behavioral advertising.
Third-Party Service Providers
This website uses the following third-party services: (1) Google Firebase — provides website hosting, authentication, Firestore database storage, and Cloud Storage for the portals, form submissions, and first-party analytics (see below). Data is stored in Google's cloud infrastructure under Google's terms. (2) Google Fonts — serves web fonts used on this site; your IP address is transmitted to Google's servers when fonts are loaded. No third-party advertising trackers are used on this site.
First-Party Analytics
Cliff Labs collects anonymous, cookie-less page-view analytics stored exclusively in our own Firebase Firestore database. Each page-view record contains only: the page path, an anonymized referrer (external domain hostname only), your browser language, and approximate screen resolution. No user identifiers, cookies, or tracking IDs of any kind are set or stored in these records, and we do not log IP addresses in these website page-view analytics records. (Email signals, described below, are a separate first-party channel and are handled as stated in that section.) If your browser sends a Do Not Track (DNT) or Global Privacy Control (GPC) signal, no analytics data is collected for your session.
Email Signals
When we reply to an inquiry you submitted, our emails may include first-party signals that help us understand whether our reply reached you and was useful. Links in our emails route through our own domain (clifflabs.us) so that we can record when a link is clicked. Where open tracking is enabled, and only for recipients who have not opted out, we may also record that a message was opened; click tracking is our default and open tracking is opt-out-gated whenever it is turned on. These signals are stored solely in our own systems and are never shared, sold, or used for cross-site tracking or advertising. We do not store your raw IP address for these signals; any IP-derived value is salted, hashed, and truncated before storage (which means it is pseudonymous rather than fully anonymous), and browser information is reduced to a coarse family. Every email includes a one-click "Turn off tracking" link, and you may also reply "unsubscribe"; we honor either choice for that contact going forward. Email-signal records are retained for a limited period (currently up to 180 days) and then aggregated or deleted. To ask what we hold or to request deletion, contact privacy@clifflabs.us.
Data Retention & Deletion
We keep personal information only as long as needed for the purposes above and to meet legal obligations, then delete or de-identify it. Inquiries are retained up to 24 months; job applications and resumes are retained for the recruitment process and applicable record-keeping obligations (at least one to two years from the application or decision date), then deleted or de-identified; partner applications are retained for the evaluation period and any resulting relationship. You may request earlier deletion, which we honor unless retention is required by law.
Your Rights
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to opt out of sale/sharing (we do neither), and to non-discrimination for exercising these rights. If you are in the EEA or UK, you may have rights to access, rectification, erasure, restriction, portability, and objection, and to lodge a complaint with a supervisory authority. To exercise any right, contact info@clifflabs.us; we will verify and respond as required by law.
Security
We protect information with access controls (identity-bound, verified-account access; strict server-side authorization rules; least-privilege administrative access), encryption in transit and at rest via our infrastructure providers, and file-type and size limits on uploads. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Children
The site and portals are not directed to children and are intended for individuals at least 16 (or the age of majority for employment where you reside). We do not knowingly collect data from children.
International Visitors
We are based in the United States; if you access the site from elsewhere, your information is processed in the United States.
Changes to This Policy
We may update this Policy; material changes will be reflected by the "Last updated" date. Continued use after changes constitutes acceptance.
Contact
Questions or privacy requests: info@clifflabs.us. Cliff Labs Incorporated, Casper, WY.