This notice describes how b-12, Co. (“B12,” “we,” or “us”) handles information when you use our website, platform, and Selenium plugin. When we process information on behalf of an organization, its instructions and agreement with B12 also apply.
Information we collect
We process account and organization details; research inputs, uploaded materials, and generated results; usage and credit records; and information you provide to support or through website forms. Technical information can include IP addresses, browser and device information, activity, and diagnostic records. Our website uses Plausible analytics. Our platform uses operational monitoring and PostHog product analytics, including interaction events, session replay, and diagnostic logs where enabled, to understand usage and investigate problems. Cookies and similar browser storage support authentication and analytics.
The Selenium plugin sends B12 the inputs supplied to the selected tool and information needed to authenticate your connected account. It is not designed to collect your entire ChatGPT or Codex conversation, although tool inputs may include context supplied by you or the assistant. B12 stores requests and results needed to provide the service.
Stripe processes website payments. B12 records purchase identifiers, amounts, currency, status, and the organization receiving credits. The plugin uses existing credits and does not collect payment-card details or sell credit packs.
How we use information
We use information to provide requested research and laboratory software services, authenticate users, enforce access permissions, save results, account for usage, process payments, respond to requests, maintain and improve service reliability and usability, and detect abuse or security issues. We also use information to meet legal obligations and administer our business relationships.
Where applicable law requires a legal basis, processing is based on performing our agreement, legitimate interests in operating and protecting our services where those interests do not override your rights, compliance with law, or consent where required. This notice does not grant permission to use customer research for unrelated purposes.
Who receives information
Information is processed by providers of hosting and storage, authentication, AI and research services, payments, analytics and monitoring, and customer support. AI and research providers receive information needed for the requested function, which can include submitted research content and search queries. Authorized members and administrators of your organization can access information according to their permissions.
We may disclose information when required by law, to protect rights and service security, or as part of a business transaction subject to applicable protections. Providers may process information in countries other than your own. Applicable agreements and legally required safeguards govern those arrangements; contact us for information relevant to your organization’s service. Services you connect separately, including ChatGPT and Codex, have their own privacy terms.
Retention and deletion
Our data-management policy requires retention only for the relevant purpose or applicable legal, regulatory, or contractual obligations. Its default periods, subject to those requirements and documented business needs, are:
- Financial records: seven years.
- Customer data: the customer relationship plus at least thirty days to allow an account to return to good standing. This is not a promise to delete all data on day thirty.
- Personal information: until the collection purpose is fulfilled or for the period required by applicable data-protection obligations.
- Intellectual property records: for the duration of their legal protection or until no longer required by the organization.
- Security logs: at least one year and no more than five years.
- Backups: one year, followed by secure deletion or overwriting.
Records no longer required are deleted or anonymized under our retention procedures. Legal holds can extend retention. Deletion requests are assessed against applicable obligations and organization instructions; backup copies follow the backup retention process rather than immediate erasure of every copy.
Your choices and rights
Contact [email protected] to request access, correction, or deletion of personal information. Depending on applicable law, you may also request portability or restriction, object to processing, withdraw consent, or complain to a competent privacy authority. We may verify your identity and authority and coordinate organization-managed requests with your administrator. We handle requests according to applicable legal requirements.
Disconnecting a plugin is not a request to delete information already stored by B12. Contact us for account closure or deletion requests. You can manage browser storage through your browser settings; restricting storage may affect sign-in and other service features. Contact us to opt out of marketing communications, or use an unsubscribe link where provided.
Security, changes, and contact
Our policies require access controls, data minimization, and secure handling and disposal. Security documentation, including access to our SOC 2 Type II report, is available through our Trust Center. No service can guarantee absolute security.
We may update this notice and will communicate material changes as appropriate. Where a new use requires consent, changing this notice does not replace that consent. For privacy questions, contact [email protected]. For product help, visit Support.