Privacy Policy

Last updated: 8 October 2026

Who we are

Laima is a laboratory inventory service operated by Cleanbit, MB in Lithuania. This policy explains how we handle personal data when you use Laima, visit our website or contact support. For questions or privacy requests, email [email protected].

Data we use

Account and team details: your name, email address, lab or team name, account role, sign-in details and account activity.
Lab records: catalog items, inventory, locations, projects, distributors, usage records, imports, notes, audit records and other content your team adds.
Billing records: AI credit purchases, your team’s credit balance, the credit each member’s AI requests use, and the status of payments, refunds and disputes.
Technical and usage details: session and security information, requests, errors, performance data, browser or device details and feature use needed to run, protect and improve Laima.
Messages to us: information you share when you contact support or communicate with us.

Your organization controls the account and lab data its members add. When we handle this data on its behalf, your organization decides what to enter and who can access it.

Why we use data

Run, maintain and secure Laima, and let you sign in.
Store and manage lab inventory and create the reports you request.
Process AI credit purchases and keep credit balances accurate.
Send verification, password-reset, service and support messages.
Prevent abuse, investigate errors and improve reliability.
Meet legal obligations and enforce our agreements.

Our legal basis depends on how we use the data. It may be to carry out our contract with you or your organization, pursue our legitimate interests in running and securing Laima, meet a legal obligation, or use your consent where required.

Who we share data with

We use service providers where needed to run Laima. They include:

Infrastructure and database hosting providers.
Mailgun, to send account and service emails.
Cloudflare Turnstile, to help prevent signup abuse.
Stripe, to process AI credit payments as explained below.
OpenRouter and AI model providers, for the optional AI features explained below.
Laravel Nightwatch and Sentry, to monitor performance and investigate errors.

These providers may handle limited data on our behalf for these purposes. We may also share data when the law requires it, to protect Laima and its users, or during a business reorganization. If a provider handles data outside the European Economic Area, we use appropriate safeguards where required. We do not sell personal data or use it for behavioral advertising.

Optional AI features

Ask Laima and the catalog import’s AI column suggestions use AI models through OpenRouter, Inc., a company in the United States.

When data is sent

We send data to these AI services when you send or continue a chat request, or choose Suggest columns with AI during a catalog import. Attaching a file alone does not send it to the AI service. Scheduled weekly briefing emails use your Laima records without sending them to an AI model. Other Laima features do not contact AI models.

What is sent

Chat: your message, relevant earlier messages, attached files or their contents, and the lab records the assistant reads to answer you. These can include inventory, catalog, project and report data.
Column suggestions: column headings and sample values from the sheet, its name, your lab’s currency and the Laima fields already matched.

Laima does not automatically add your name, email address or other account profile details, or those of your teammates, to AI requests. If you choose to include personal information in a message or file, it may be sent to our AI providers as part of that request.

AI providers and your data

We ask OpenRouter to use model providers that do not use your messages and answers to train their models. How long AI providers keep messages and answers depends on the provider and the privacy settings in use.

Your saved chats

Laima saves your chats and attached files so you can return to them. Other team members cannot open your chat history. You can delete a chat and its attached files from Previous chats. Deleting a chat does not delete inventory or orders you have already saved. Our general data-retention terms below also apply.

Payments

Team administrators can buy credit for the AI features. Stripe processes these payments through its Managed Payments service and is the seller of record, so checkout, receipts and invoices show the purchase as sold through Link, Stripe’s payment service.

What you give Stripe: you enter your payment method, email address and billing details on Stripe’s checkout page. Laima never receives your full card number and does not store the payment or billing details you enter there.
What we send Stripe: internal references for your team and purchase, and the credit amount you chose. We do not send your name, email address or lab records.
What we keep: who started each purchase, its amount, status and payment date, Stripe references, and the status of any refunds or disputes, so we can add credit to your team and keep its balance accurate.

Stripe calculates and collects tax, screens payments for fraud, handles disputes, emails receipts and invoices, and answers payment questions. You can manage saved payment methods and past invoices on Link. Stripe handles the details you enter at checkout under the Stripe Privacy Policy.

Registration analytics

We use Pirsch Analytics, provided by Emvi Software GmbH, to count successful account registrations. We send the page URL without query parameters, your IP address, browser user-agent and preferred language. We do not send registration form fields, lab data or pageview events.

Pirsch uses no cookies and follows Privacy by Design. It combines the IP address, browser user-agent, date and a site-specific random value (a “salt”) to create a 16-digit visitor identifier using a one-way calculation called hashing. It does not store any part of the IP address. The date and site-specific salt prevent recognition beyond 24 hours or tracking across different websites. Pirsch also estimates country and city using its local database. Read how Pirsch handles visitor data.

Cookies and local storage

We use cookies and similar storage to keep you signed in, secure your session, protect requests and remember preferences such as your color theme. We do not use advertising cookies.

Keeping data secure

We use technical and organizational safeguards to protect personal data. No online service can guarantee complete security. Account owners should use strong sign-in credentials and give access only to authorized team members.

How long we keep data

We keep account and lab data while your account is active. Afterward, we keep it only as reasonably needed to provide the service, maintain backups, resolve disputes, enforce agreements or meet legal obligations. We may keep technical logs and support messages for shorter periods needed to operate and secure Laima.

You can contact us to request deletion. Legal or contractual requirements may limit what we can delete.

Your privacy rights

Depending on the law that applies, you may be able to:

Access, correct or delete your personal data.
Restrict or object to how we use it.
Receive a portable copy of your data.
Withdraw consent when we rely on it.
Complain to the relevant data protection authority.

Email [email protected] to make a request. If your organization submitted the data, we may ask you to contact it or involve it in our response.

Changes to this policy

We may update this policy when our practices or legal obligations change. We will post the new version here and update its date.

Contact us

Email questions or concerns to [email protected].