This Privacy Policy explains how Sunmesa Labs collects, uses, shares and protects personal information when you visit sunmesalabs.com, buy our products or use our software. Effective date: October 13, 2026.
1. Who We Are
Sunmesa Labs (“Sunmesa Labs”, “we”, “us” or “our”) is an independent software studio that creates and sells digital products, including web-based tools, AI generators, game builders and marketing applications. We are the controller of the personal information described in this policy. You can contact us at any time at hello@sunmesalabs.com or through our Contact page.
2. Information We Collect
Information you give us
- Contact and account details: name, email address, username and password (stored in hashed form) when you create an account, join a waitlist, subscribe to emails or contact support.
- Order details: products purchased, order ID, price, currency, billing country and transaction date.
- Communications: messages, support requests, refund requests and feedback you send us.
- Affiliate and partner details: name, email, website and promotional channels if you apply to our affiliate or JV program.
- Content you submit to our tools: prompts, text, settings and files you enter when using our software.
Information collected automatically
- Device and usage data: IP address, browser type, operating system, referring pages, pages viewed, and the date and time of your visit.
- Cookies and similar technologies: see Section 7.
Payment information
Payments are processed by third-party payment processors such as Stripe, PayPal or the marketplace where you purchased (for example, WarriorPlus). We never receive or store your full card number or security code. We only receive limited information such as the last four digits of your card, card brand, billing country and payment status.
3. How We Use Your Information
| Purpose | Legal basis (EEA/UK) |
|---|---|
| Process orders, deliver products, provide licenses and software access | Performance of a contract |
| Provide customer support, handle refunds and respond to requests | Performance of a contract; legitimate interests |
| Send transactional emails (receipts, access details, important updates) | Performance of a contract |
| Send marketing emails about new products and launches | Consent (you can unsubscribe at any time) |
| Operate, secure and improve our website and tools; prevent fraud and abuse | Legitimate interests |
| Manage our affiliate and JV program, including commission tracking | Performance of a contract; legitimate interests |
| Comply with tax, accounting and other legal obligations | Legal obligation |
4. How We Share Information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only with:
- Payment processors and marketplaces (such as Stripe, PayPal and WarriorPlus) to process payments, prevent fraud and handle refunds and chargebacks.
- Service providers who help us run our business, such as web hosting, email delivery, customer support, analytics and AI model providers used to power our tools. They may use your information only to provide services to us.
- Affiliates who referred you, limited to information needed to attribute and pay commissions (for example, order ID and amount).
- Legal and safety reasons: when required by law, court order or government request, or to protect the rights, property or safety of Sunmesa Labs, our customers or others.
- Business transfers: if Sunmesa Labs is involved in a merger, acquisition, reorganization (including formation of a company to operate this business) or sale of assets, your information may be transferred as part of that transaction.
5. Data Retention
We keep personal information only as long as needed for the purposes described in this policy. Order and transaction records are kept for as long as required by tax and accounting laws (generally up to 7 years). Account data is kept while your account is active and deleted or anonymized within a reasonable time after you ask us to delete it, unless we must keep it for legal reasons.
6. Data Security
Our website uses HTTPS (TLS encryption) on every page. Payment data is handled by PCI DSS-compliant payment processors. We use access controls, strong passwords and regular updates to protect our systems. No method of transmission or storage is 100% secure, but we work to protect your information and will notify you of a data breach where required by law.
7. Cookies and Tracking
We use cookies and similar technologies to keep you signed in, remember your preferences, measure site traffic, and attribute affiliate referrals. You can block or delete cookies in your browser settings; some features may not work without them. Where required by law, we will ask for your consent before using non-essential cookies. Our site does not currently respond to “Do Not Track” signals, but we honor Global Privacy Control (GPC) signals as an opt-out of any sale or sharing where applicable.
8. Your Privacy Rights
Depending on where you live, you may have the right to:
- access the personal information we hold about you and receive a copy;
- correct inaccurate information;
- delete your information;
- object to or restrict certain processing, including direct marketing;
- withdraw consent at any time (this does not affect processing before withdrawal);
- data portability;
- opt out of the sale or sharing of personal information, and of targeted advertising (we do not sell or share it);
- not be discriminated against for exercising your rights.
To exercise these rights, email hello@sunmesalabs.com with the subject “Privacy Request”. We will verify your identity and respond within the time required by applicable law (usually 30 days for GDPR requests and 45 days for U.S. state law requests). You may appoint an authorized agent to make a request on your behalf. If you are in the EEA or UK, you also have the right to complain to your local data protection authority.
9. International Data Transfers
We and our service providers may process information in the United States, Vietnam and other countries whose data protection laws may differ from those in your country. When we transfer personal information from the EEA, UK or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
10. Children’s Privacy
Our website and products are intended for adults and are not directed to children under 16. We do not knowingly collect personal information from children under 13 (or under 16 where local law requires). If you believe a child has provided us with personal information, contact us and we will delete it.
11. Third-Party Links and Services
Our site and products may link to third-party websites, marketplaces and services. Their privacy practices are governed by their own policies, and we are not responsible for them.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top shows when it was last changed. If we make material changes, we will notify you by email or by a notice on our website.
13. Contact Us
Questions about this policy or your personal information? Contact Sunmesa Labs at hello@sunmesalabs.com or via our Contact page.