Privacy & contact

This notice covers the 6WLabs website, enquiries and client workspace. It explains the information we use, why we use it and how to exercise your privacy rights.

Company & contact

6w Labs LLC, trading as 6WLabs, is responsible for the personal information used to operate this website, respond to enquiries and manage client accounts.

For privacy questions or requests, email [email protected]. You do not need a client account to make a request.

When a client supplies personal information for a project and determines how it should be used, we may act as that client's processor. The project agreement and data-processing terms govern that work. Requests about the client's own data should normally go to that client; we assist under their instructions.

Information we use

Enquiries and project preparation

We use your name, email, brief and optional organisation, workflow, timing or process information to respond, assess feasibility and prepare an agreed scope. Without contact details and a brief we cannot respond through the enquiry form. Submitting does not create an account or a marketing subscription.

Under GDPR, responding to a request to enter a contract with you can rely on steps taken at your request before a contract. When you contact us on behalf of a business, our legitimate interest is responding to business enquiries and managing that relationship. The form acknowledgement records that you saw this notice; it is not consent to unrelated marketing.

Accounts, projects and security

Invited clients provide a name, email and time zone. Role, phone number and contact notes are optional and visible to the studio, not other clients. We use project messages, review comments, files, decisions and access records to deliver and document agreed work. Contract performance applies where you are the contracting person; legitimate interests apply to administering a business client's relationship and protecting the service.

Session records include browser details, IP address and last activity. Authentication, access and job records support fraud prevention, service security and resolving problems. Our legitimate interest is operating a reliable and secure service. Records needed to meet an applicable legal obligation, such as accounting requirements, are handled on that basis.

Documents and AI assistance

Only share material you are authorised to provide. Remove passwords, access keys, sensitive personal information and unnecessary third-party details. Automated qualification tools may use your brief and validated text from supported documents to prepare questions or a proposed scope. Customer documents are untrusted context, never permission to act. We do not reuse them for unrelated customer work.

The assessment does not itself create a contract or authorise paid work. The studio agrees the scope with you before work begins. Ask the studio for a human explanation or review of a qualification result.

Providers & international transfers

Authorised service providers may process information for hosting, private file storage, transactional email, security, AI-assisted qualification and payment administration. The information shared depends on the service: an email provider receives the destination address and message; an AI provider may receive the brief or validated document text used for the assessment.

Contact the studio for the provider details applicable to your proposed project before supplying personal data in project documents.

Provider locations and international-transfer arrangements depend on the services used. Ask the studio for those arrangements before sharing personal data for a project.

For Stripe invoicing, we share billing email, agreed service description, amount, currency, due date and project references. Payment details are entered on Stripe's hosted page. We retain invoice references and observed payment status, not full card numbers. Uploaded process documents are not sent through this billing integration. Stripe's privacy notice explains its processing.

We do not include advertising trackers or sell personal information through this website. If a legal requirement calls for disclosure to an authority, we assess the requirement and limit the information disclosed.

Retention and account closure

We retain inquiry details and uploaded files to evaluate your request and follow up with you. To request deletion, contact [email protected]. Records for agreed project work are handled under the project terms.

Account writing drafts expire seven days after the last save. Optional browser-only enquiry drafts expire after 24 hours and can be removed from the form. Files, email records, extracted text, agent records and recovery backups are separate records; removing a draft does not remove them.

Closing your account ends access and removes your profile, authentication factors and private drafts. It also opens a deletion review. Shared project records, agreements, invoices, invitation and mail records are reviewed separately for deletion, restrictions or necessary retention. A restricted contact record is kept to respond to your request. Closure does not cancel a contract or invoice, and does not instantly erase backups.

Your privacy rights

You can ask for access to your personal information, correction, deletion, restriction, portability where applicable, or object to processing based on legitimate interests. If processing relies on consent, you can withdraw it without affecting earlier lawful processing. Rights have conditions and exceptions, including protecting other people's information and meeting legal obligations.

Email [email protected] and describe the information or request. We may ask for proportionate identity information before disclosing or changing records. Do not send identity documents unless we explain why they are needed and arrange a suitable method.

We aim to respond within one calendar month. If applicable law permits an extension for complexity or multiple requests, we will explain the reason and new deadline within the original month. Requests are normally free. You may complain to the data-protection authority where you live or work, or where a suspected infringement occurred. Find an EEA supervisory authority; UK users can contact the ICO.

Signed-in clients can update details, verify a new email, review devices, control routine notifications, download account details and request closure in Account settings. That download covers account details and current access; a broader request may include information in messages, files and historical records after a privacy review.

Cookies and saved drafts

Necessary cookies support sign-in and form protection. We do not load advertising or audience-analytics trackers. Cookie names differ in a private preview to keep it separate from local development.

Session cookie

sixwlabs_sessionid identifies your browser session. Standard sessions last up to 12 hours; sign-in choices and security controls can shorten that period. Sign out to end your current session.

Form-protection cookie

sixwlabs_csrftoken helps prevent forged form submissions. Its browser expiry is up to 364 days.

Optional enquiry draft

Stored on your device only when you choose to save it, for up to 24 hours. It includes contact details and the written brief, but not attachments or your acknowledgement. Anyone with access to that browser may read it. Clear it using the form's draft controls or your browser's site-data settings.

This service is intended for business and professional projects, not directed to children. Please do not send children's information or special-category personal data through the initial enquiry form.

Notice changes

We update this notice when the service or its processing changes. Material changes affecting your account or project will be brought to your attention through the applicable communication channel.

Notice version: 2026-09-24