PrivacyPolicy

Effective Date: 7/1/2025
Last Updated: 8/4/2025

This Privacy Policy explains how CU Labs (“we,” “us,” “our”) collects, uses, and protects information in connection with the CU Labs Single Sign-On External Login Provider (“CU Labs SSO” or “Service”).

1. Information We Collect

When you use CU Labs SSO, we process:

Identity Attributes provided by your connected identity provider (e.g., Microsoft Entra ID). These may include:
- Name
- Email address
- Unique user identifier
- Organization domain
- Authentication tokens
Technical Information such as:
- IP address
- Browser type and version
- Date and time of login requests

We do not collect or store passwords.

2. How We Use Information

We use collected information to:

Authenticate your identity and allow secure access to integrated applications.
Authorize your access based on your organization’s policies.
Maintain, improve, and secure the Service.
Comply with legal obligations.

3. How We Share Information

We do not sell or rent your personal information. We may share identity attributes:

With your organization’s administrators to manage access.
With service providers who assist in operating our authentication systems.
If required by law or in response to valid legal requests.

4. Data Security

We implement reasonable technical and organizational measures to protect your information from unauthorized access, use, or disclosure. Authentication requests are encrypted in transit.

5. Data Retention

We retain authentication logs for up to [X] days for security, troubleshooting, and auditing purposes, unless a longer retention period is required by law.

6. Your Rights

Depending on your jurisdiction, you may have rights to:

Access, correct, or delete your personal information.
Restrict or object to certain processing.
Request a copy of the information we hold about you.

Requests should be directed to your organization’s administrator or support@culabs.ai.

7. Third-Party Services

Authentication is performed in part by your chosen identity provider (e.g., Microsoft Entra ID). Use of such services is governed by the provider’s own privacy policy.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last Updated” date.

9. Contact Us

If you have questions about this Privacy Policy, please contact:

CU Labs
Email: support@culabs.ai
Address: [Your business address]