Privacy Policy

Last updated: 2026-02-11

Bald Labs Inc. (“we,” “our,” or “us”) operates the Faster Than Normal AI service. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our website and services. We comply with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), and other US state and international privacy laws.

1. Information We Collect

We may collect the following categories of personal data:

  • Account and identity: Email address, and (where provided) name, when you sign up or use our authentication provider (Clerk).
  • Payment and subscription: Stripe customer ID and subscription status. Payment card details are processed directly by Stripe and are not stored by us.
  • Usage and content: Chat titles, messages you send, and AI-generated responses and citations, to provide the service and improve it.
  • Technical data: IP address, browser type, and similar data as necessary for security and operation of the service.

2. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve Faster Than Normal AI.
  • Process subscriptions and manage your account.
  • Authenticate you and enforce our Terms of Use.
  • Respond to your requests, including data subject requests (see below).
  • Comply with legal obligations and protect our rights.

3. Legal Basis (GDPR / UK GDPR)

Where applicable, we process personal data on the basis of: (a) performance of our contract with you (providing the service); (b) your consent (e.g. optional cookies or marketing where offered); (c) our legitimate interests (security, analytics, improvement of the service); and (d) compliance with legal obligations.

4. Sharing and Disclosure

We share data only as needed with: (1) our service providers (e.g. Clerk for authentication, Stripe for payments, and our database and hosting providers), who act as processors under contract; (2) authorities when required by law; (3) in connection with a merger, sale, or restructuring, in accordance with applicable law.

5. International Transfers

Your data may be processed in the United States or other countries where our service providers operate. Where we transfer data from the EEA or UK, we rely on adequacy decisions, standard contractual clauses, or other approved transfer mechanisms as required by law.

6. Retention

We retain your data for as long as your account is active and as needed to provide the service and comply with law. After you delete your account or request deletion, we delete or anonymize your personal data within within 14 days, except where we must retain it for legal or regulatory reasons.

7. Your Rights

Depending on where you live, you may have the right to:

  • Access and receive a copy of your personal data.
  • Rectify inaccurate data.
  • Request erasure (“right to be forgotten”).
  • Restrict or object to certain processing.
  • Data portability (receive your data in a structured format).
  • Withdraw consent where processing is based on consent.
  • Lodge a complaint with a supervisory authority (e.g. in the EU or UK).

In California and certain other US states, you may also have the right to know what we collect and disclose, to delete your personal information, to correct it, and to limit use of sensitive personal information, and to not be discriminated against for exercising these rights.

8. Data Subject Access Requests (DSAR)

You may delete your account and associated data at any time from your account: go to Dashboard → Account → Delete my account. To exercise other rights (access, correction, portability, etc.), contact us at info@baldlabs.co or write to us at 995 Market Street, 94103, San Francisco, CA. We will respond within the time required by applicable law (e.g. within 30 days under GDPR).

9. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse.

10. Children

Our service is not directed at children under 16 (or higher age in certain jurisdictions). We do not knowingly collect personal data from children. If you believe we have collected such data, please contact us and we will delete it.

11. Changes

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the “Last updated” date. Continued use of the service after changes constitutes acceptance of the updated policy where permitted by law.

12. Contact

For privacy-related questions or requests: info@baldlabs.co. Mailing address: 995 Market Street, 94103, San Francisco, CA.