Skip to main content
Reverse Lab

Last updated · April 1, 2025

Legal

Privacy Policy

This policy describes how Reverse Lab (“we,” “our”) handles personal information from visitors to this site and from clients in the course of an engagement.

Scope

This document covers two distinct populations: visitors to this website (subject to GDPR, CCPA, and similar regimes) and clients with whom we have an executed engagement (subject to a separate, mutual NDA which controls in case of conflict).

Data we collect

From this website, we collect:

  • Information you submit through forms — name, work email, company, project description.
  • Server-side request metadata (IP, user-agent) for security and rate-limiting, retained for 30 days.
  • Privacy-respecting analytics — aggregate page views with no cross-site tracking, no cookies, no fingerprinting.

Client engagement data

Once you sign a mutual NDA with us, all materials you ship — samples, firmware dumps, source code, schematics, documents — are governed by that NDA, this privacy policy notwithstanding.

What this means concretely

  • Materials are stored on encrypted-at-rest infrastructure under our sole control.
  • Access is logged and limited to engineers assigned to your engagement.
  • We do not share your materials with subcontractors or third parties.
  • We do not train any model on your materials.
  • At engagement close we either return or destroy materials per your written direction, with a destruction certificate available on request.

Site analytics

We use a self-hosted privacy-respecting analytics tool. It does not set cookies, does not track across sites, and does not collect personally identifiable data. You can verify this in your browser's developer tools.

Retention

Form submissions are retained for as long as necessary to respond and execute on any resulting engagement. Server logs are retained for 30 days. Analytics records are aggregated and retained indefinitely in non-identifying form.

Your rights

Depending on your jurisdiction you may have rights to access, correct, delete, or export your personal information. Contact us at contact@reverse-lab.example and we will respond within 30 days.

For privacy-related questions, contact contact@reverse-lab.example. For formal data-subject requests, please use the same address with the subject line “Data Subject Request.”