Privacy Policy

1. Who we are

Dagny Labs LLC ("Dagny," "we," "us," or "our") is a California limited liability company. This Privacy Policy explains how we handle personal information when you visit https://dagnylabs.ai (the "Site"), subscribe to Field notes, book a conversation, apply for a role, or otherwise interact with our marketing presence.

Controller / business: Dagny Labs LLC, 10 Lula Way, Mill Valley, CA 94941, United States.

Privacy contact: privacy@dagnylabs.ai

Customer engagements (for example Dagny Rails, delivery work, or partner programs) are governed by the contracts for those engagements. Those contracts control if they conflict with this Policy for that engagement data.

2. Scope

This Policy covers personal information we collect through:

the Site and pages linked from the Site that we operate;
optional website analytics, if you accept them;
Field notes email signup;
booking flows we host or link to (for example Cal.com, when configured);
career applications sent to our careers mailbox;
ordinary business email and other outreach you start with us.

This Policy does not cover third-party sites, apps, or services we do not control, even if we link to them.

3. Information we collect

3.1 Information you provide

Depending on how you use the Site, you may give us:

Contact details: name, email address, company, role, phone number, and message content when you email us, book a call, or fill a form.
Newsletter details: email address for Field notes.
Careers materials: email address, resume or work links, and whatever you include in an application to talent@dagnylabs.ai.
Preferences: analytics consent choice (accept or reject) stored in your browser.

3.2 Information collected automatically

When you visit the Site, our hosting and security layers (and, if you consent, analytics) may collect:

IP address, approximate location derived from IP, browser type, device type, operating system, referring URL, pages viewed, timestamps, and similar diagnostic data;
cookies, local storage, or similar technologies described in Section 6.

3.3 Information from service providers

We receive limited information from processors that help us run the Site, such as email delivery status from our newsletter provider, booking metadata from our scheduling tool, and hosting or security logs from our website host.

3.4 Information we do not intentionally collect on the Site

We do not ask Site visitors for government ID numbers, payment card numbers, or special-category health data through the marketing Site. Do not send sensitive personal information to marketing forms or the newsletter list.

4. How we use information

We use personal information to:

operate, secure, and improve the Site;
respond to inquiries and schedule conversations;
send Field notes if you subscribe, and manage unsubscribes;
review career applications;
measure Site performance with analytics only if you grant consent;
detect abuse, spam, and fraud (including rate limits and honeypot fields on forms);
meet legal obligations and enforce our Terms of Use;
protect Dagny, our customers, and the public as permitted by law.

We do not use Site analytics for advertising personalization, and we configure analytics (when enabled) to deny ad storage and ad user-data signals by default.

5. Legal bases (where required)

If a law such as the GDPR or UK GDPR applies to you, we rely on:

Contract / steps prior to contract: responding to requests and scheduling calls you initiate;
Consent: optional analytics and email marketing (you can withdraw anytime);
Legitimate interests: securing the Site, preventing abuse, understanding aggregate traffic patterns, and improving our services, balanced against your rights;
Legal obligation: retaining or disclosing information when the law requires that retention or disclosure.

6. Cookies, local storage, and analytics

6.1 Essential storage

The Site may use local storage or similar storage for:

your analytics preference (dagny-analytics-consent);
theme preference (light / dark), if you use the theme control.

These are needed for the Site to remember a choice you made, or for basic presentation.

6.2 Analytics (optional)

In production, if a Google Analytics 4 measurement ID is configured, we show a consent banner. Analytics scripts load only after you choose Accept analytics. If you choose Reject analytics, we do not load analytics for that browser profile (subject to ordinary browser storage limits). You can reopen the banner with Analytics preferences in the footer area when that control is shown.

When analytics run, Google may process device and usage data as described in Google's documentation. We instruct Google Consent Mode defaults to deny ad storage and related ad signals.

6.3 Third-party embeds and fonts

The Site may load fonts or other assets from providers such as Google Fonts. Those providers may receive your IP address and standard request headers when your browser fetches the asset.

Booking links may send you to Cal.com or a similar tool. That tool's privacy policy applies once you leave the Site.

We share personal information only as described here:

Service providers (processors): website hosting (for example Vercel), email / audience tools (for example Resend), analytics (Google, only with consent), scheduling (Cal.com, when used), security and infrastructure vendors. They may process data only to provide services to us.
Professional advisors: lawyers, accountants, and insurers under confidentiality.
Business transfers: in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate protections.
Legal and safety: when we believe disclosure is required by law, legal process, or to protect rights, safety, or security.
With your direction: when you ask us to share information.

We do not sell personal information as that term is commonly used under California law, and we do not share personal information for cross-context behavioral advertising. We do not knowingly allow third parties to collect personal information from the Site for their own advertising.

8. Retention

We keep personal information only as long as needed for the purposes above:

Newsletter contacts: until you unsubscribe or we close the list, then for a short period to honor suppression and prevent re-add errors.
Inquiry and booking records: typically up to 24 months after last meaningful contact, unless a longer period is needed for an active discussion or legal hold.
Career materials: typically up to 24 months unless you ask us to delete sooner or we hire you (then employee/contractor rules apply).
Server and security logs: typically 30 to 90 days, longer if needed for security investigations.
Analytics: according to our analytics provider settings and your consent state.

When we no longer need information, we delete or de-identify the information.

9. Security

We use administrative, technical, and organizational measures appropriate to the risk, including HTTPS, access controls on vendor accounts, and least-privilege practices. No method of transmission or storage is perfectly secure. If we learn of a breach that requires notice, we will notify you and regulators as the law requires.

10. International transfers

We are based in the United States. If you access the Site from another country, your information may be processed in the United States and other countries where our providers operate. Those countries may have different data-protection rules than your home country. Where required, we use appropriate transfer mechanisms offered by our providers.

11. Your rights and choices

11.1 Everyone

You may:

request access to personal information we hold about you;
ask us to correct inaccurate information;
ask us to delete information, subject to legal exceptions;
unsubscribe from Field notes using the link in each email or by emailing us;
reject or later change analytics consent using Analytics preferences (when shown).

Email privacy@dagnylabs.ai. We will verify your request in a reasonable way before acting on the request.

11.2 California (CCPA / CPRA)

If you are a California resident, you may have the right to know, access, correct, delete, and opt out of sale or sharing of personal information, and the right not to be discriminated against for exercising those rights. As stated above, we do not sell or share personal information for cross-context behavioral advertising.

Categories we may collect (depending on your use of the Site): identifiers (such as name, email, IP address); internet or electronic activity (Site interactions); professional information you choose to send (company, role, application materials); and inferences we do not generally create from Site traffic alone.

Sources: you, your devices, and our service providers. Business purposes: Section 4. Disclosure to service providers: Section 7.

You may designate an authorized agent to make a request. We may ask the agent for proof of authority and may still need to verify you.

11.3 EEA / UK

Where GDPR or UK GDPR applies, you may also have rights to restrict or object to certain processing, and to data portability. You may lodge a complaint with your local supervisory authority. We encourage you to contact us first so we can help.

12. Children

The Site is for a general business audience and is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child provided information, contact us and we will delete the information.

13. Do Not Track

There is no consistent industry standard for Do Not Track browser signals. Our analytics only run after an affirmative consent choice on the Site.

14. Changes

We may update this Policy from time to time. We will change the "Last updated" date at the top of the page and, for material changes, take additional steps when required by law. Continued use of the Site after an update means you acknowledge the revised Policy.

15. Contact

Dagny Labs LLC 10 Lula Way Mill Valley, CA 94941 United States

Privacy: privacy@dagnylabs.ai