Privacy Policy

1. Introduction

Lapis Labs LLC ("we," "us," or "our") operates lithos.co ("the Platform"). This Privacy Policy explains what information we collect, how we use it, and your choices regarding your data.

We believe in transparency and simplicity. We collect only what we need to provide our services, and we never sell your personal data.

2. Information We Collect

Information you provide

• Account information: name, email address, password, company, profession, and location when you create an account
• Inquiry and consultation forms: name, email, phone, project details, and any messages you submit
• Business listing claims: name, email, phone, role, and business association when you claim a directory listing
• Newsletter signup: email address

Information collected automatically

• Usage data: pages visited, search queries, features used, and interaction patterns via Vercel Analytics
• Device information: browser type, operating system, and screen size
• Location data: approximate location based on IP address, or precise location if you grant geolocation permission for directory search

3. How We Use Your Information

• Provide our services: process inquiries, manage your account, deliver consulting recommendations, and connect you with stone professionals
• Improve the Platform: understand how users interact with our tools to make them better
• Communications: send transactional emails (account verification, inquiry confirmations, claim approvals) and, if you opt in, newsletters and product updates
• Business operations: route inquiries to relevant stone professionals, facilitate business-to-customer connections

4. Information Sharing

We share your information only in these circumstances:

• With stone professionals: when you submit an inquiry to a business through the Platform, your contact information and project details are shared with that business so they can respond
• Service providers: we use trusted third-party services to operate the Platform (see Section 5)
• Legal requirements: if required by law, regulation, or legal process

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5. Third-Party Services

We use the following services to operate the Platform:

• Supabase: database, authentication, and file storage (hosted in the United States)
• Vercel: hosting, deployment, and analytics
• Resend: transactional email delivery
• Google Maps Platform: location autocomplete and map display in the directory

Each service processes data according to their own privacy policies. We select providers that maintain strong data protection practices.

6. Cookies and Tracking

We use cookies for:

• Authentication: session cookies to keep you signed in (essential, no opt-out)
• Analytics: Vercel Analytics for anonymous, privacy-friendly usage statistics (no cross-site tracking, no personal data collection)

We do not use advertising cookies, tracking pixels, or third-party analytics tools that build advertising profiles.

7. Data Retention

• Account data: retained while your account is active. You may request deletion at any time.
• Inquiry data: retained for up to 2 years to facilitate ongoing business relationships and service quality
• Analytics data: aggregated and anonymized, retained indefinitely

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate information via your account settings
• Delete your account and associated data by contacting us
• Export your data in a portable format
• Opt out of marketing communications at any time via unsubscribe links

To exercise any of these rights, email derin@lithos.co.

9. Data Security

We protect your data with industry-standard measures including encrypted connections (HTTPS/TLS), secure authentication, row-level database security, and access controls. While no system is 100% secure, we take reasonable precautions to protect your information.

10. Children's Privacy

The Platform is not intended for children under 13. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us and we will promptly delete it.

11. International Users

The Platform is operated from the United States. If you access the Platform from outside the US, your information may be transferred to and processed in the United States. By using the Platform, you consent to this transfer.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. We encourage you to review this page periodically.

13. Contact

Questions or concerns about your privacy? Contact us at derin@lithos.co.

Lapis Labs LLC
Phoenix, Arizona, United States