Privacy Policy

This Privacy Policy describes how Subculture Laboratories LLC collects, uses, stores, and shares information when you access or use Hoodflow, including public pages, account login and signup flows, tenant workspaces, hosted workflow tools, printing and label features, connected integrations, and related support communications.

Hoodflow is a business software platform used to manage lab and operations workflows. This Privacy Policy applies when you browse the public site, create or administer an account, invite teammates, connect third-party services, submit information to support, or otherwise interact with the service.

The information we collect depends on how you use Hoodflow, what features you enable, and whether you connect third-party services.

• Account and profile data, including names, usernames, email addresses, authentication identifiers, hashed or protected credentials, tenant membership status, and account preferences.
• Tenant, lab, and workspace setup data, including organization names, subdomains, locations, operational settings, workspace configuration, and onboarding details.
• Inventory, workflow, and audit records, including vessel, lot, section, rack, room, media, task, project, transfer, demand, and event history created inside the service.
• Files and operational assets, including uploaded photos, PDFs, label templates, generated labels, print job metadata, and other files you choose to store or process through Hoodflow.
• Billing and subscription information, including selected plan, trial status, subscription status, Stripe customer or subscription references, invoice state, and billing history metadata. Payment card data is processed by Stripe and is not stored directly by us except as reflected in Stripe-provided records and identifiers.
• Integration data and secrets, including configuration details, account references, store identifiers, listing or order metadata, API tokens, and encrypted or protected credentials for integrations such as Etsy and Squarespace when you enable them.
• Authentication, session, device, and log data, including session records, IP address, approximate device or browser details, request logs, security events, failed login attempts, and related troubleshooting information.
• Support and communications data, including messages sent to us, implementation or support requests, account recovery inquiries, and similar correspondence.

We use the information we collect to operate, protect, improve, and support Hoodflow and to fulfill our contractual and legitimate business obligations.

• Provide and maintain the service, including tenant provisioning, login and signup flows, workspace administration, printing, and operational workflow tools.
• Authenticate users, manage sessions, prevent fraud or abuse, investigate incidents, and enforce security controls.
• Process subscription and billing activity, administer trials, create checkout sessions, support billing portal activity, and reconcile subscription records.
• Send transactional emails and service communications such as verification messages, sign-in links, billing notices, security alerts, workflow-triggered messages, and support replies.
• Sync data with third-party platforms you choose to connect, including pulling or pushing marketplace, storefront, listing, order, or inventory data when enabled.
• Monitor service quality, troubleshoot issues, develop new functionality, produce internal analytics, and maintain operational records and audit trails.
• Comply with legal obligations, resolve disputes, and protect the rights, safety, and property of Hoodflow, our users, and the public.

Hoodflow uses session cookies, security cookies, and similar storage technologies to keep you signed in, remember tenant context, preserve security state, and maintain core product functionality. We may also use local browser storage for limited interface or preference features.

These technologies are used for essential service operation, fraud prevention, diagnostics, and user experience. If you disable essential cookies or storage, some parts of Hoodflow may not function correctly.

We use service providers and infrastructure partners to operate Hoodflow. Those providers may process information on our behalf subject to contractual or operational restrictions.

• Stripe for subscription billing, checkout, customer portal actions, and related payment processing.
• Google OAuth when you choose Google sign-in or Google signup, in which case we receive identity information necessary to authenticate and provision your account.
• Email delivery providers for transactional and account-related email.
• Cloud hosting, databases, logging, monitoring, and storage providers used to run the application and store operational content and uploaded assets.
• Etsy and Squarespace, when you connect those services, so Hoodflow can exchange authorized account, listing, order, catalog, or inventory data needed for the features you enable.

We do not sell your personal information. We share information only as reasonably necessary to operate Hoodflow, comply with law, or protect legitimate business and security interests.

• With service providers and subprocessors that help us host, secure, communicate, store, bill, or support the service.
• With third-party platforms you authorize us to connect, such as Google, Stripe, Etsy, or Squarespace, based on the features you choose to use.
• Within your organization or tenant workspace, according to your account role, workspace permissions, and administrator settings.
• If required by law, subpoena, court order, or other valid legal process, or when we believe disclosure is necessary to protect rights, property, safety, or investigate misuse of the service.
• In connection with a merger, financing, acquisition, reorganization, sale of assets, or similar corporate transaction, subject to appropriate confidentiality protections.

We retain information for as long as needed to provide the service, maintain security and audit records, comply with legal obligations, resolve disputes, and enforce our agreements.

Retention periods vary by data type. Account records, billing history, audit logs, and security logs may be retained longer than transient session data or deleted workspace content where operationally appropriate. We may also retain backup or archival copies for disaster recovery and continuity purposes for a limited period after deletion.

We use administrative, technical, and organizational safeguards designed to protect Hoodflow data, including access controls, credential protections, transport security, audit logging, and operational monitoring. No system is completely secure, and we cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your account credentials, using appropriate access controls inside your organization, and notifying us promptly if you suspect unauthorized access or a security incident involving your account.

You may access, update, or delete certain account information through the product or by contacting us. Workspace administrators may also control, export, correct, or remove certain tenant data depending on the feature and account role.

Depending on where you live, you may have legal rights to request access to, correction of, deletion of, or information about the processing of your personal information. To make a request, contact us at subculturelaboratories@gmail.com. We may need to verify your identity and authority before acting on a request.

Hoodflow is not directed to children under 13, and we do not knowingly collect personal information from children under 13 through the service. If you believe a child has provided us personal information, contact us so we can investigate and take appropriate action.

We may update this Privacy Policy from time to time to reflect changes to the product, our practices, legal requirements, or operational needs. If we make material changes, we may provide notice through the service, by email, or by updating the effective date at the top of this page.

Your continued use of Hoodflow after an updated Privacy Policy becomes effective means the updated version applies going forward.

Subculture Laboratories LLC is the operator of Hoodflow. Questions, privacy requests, or notices about this Privacy Policy may be sent to subculturelaboratories@gmail.com.