1. Scope & Operator

This Privacy Policy explains how personal data is processed in connection with PandaFind and related services operated under the 17labs brand (the “Service”).

2. Data We Collect

We may collect the following categories of data:

account identifiers, if provided through a third-party platform
search and interaction data, such as search queries, request context, and feature usage
technical and security-related data, such as logs, device signals, and IP addresses
support communications and feedback submissions

We do not process payment card information because purchases occur on third-party marketplaces.

3. How We Use Data

We use data to:

provide and operate the Service
generate and return shopping search results
maintain functionality, reliability, and security
improve product quality and user experience
provide support and respond to inquiries
detect abuse, misuse, or operational issues

4. Analytics & Experiments

We use analytics and experimentation tools to understand how the Service is used and to improve features, onboarding, stability, and product usefulness.

Analytics are used for product improvement, operational measurement, and service quality, not for advertising.

5. Assistant Platform & Marketplace Context

The Service may receive limited contextual signals from the platform through which you access it, such as locale, country hints, or assistant session metadata, when made available by that platform.

The Service may also query third-party product sources and affiliate programs in order to return product results and outbound marketplace links.

6. Emails & Communications

We may send emails related to the Service, including support responses, product updates, early access notifications, and launch communications.

You may unsubscribe from promotional emails at any time using the unsubscribe mechanism provided in those emails.

We do not sell or rent personal data. We may share data with service providers that support infrastructure, security, communications, analytics, and operations, subject to appropriate safeguards.

We may also disclose data where required by law or where reasonably necessary to protect the Service, users, or third parties.

8. Retention

We retain personal data for as long as reasonably necessary to operate the Service, maintain security, support users, and improve product performance.

Some operational records and backups may be retained for a limited period for reliability and security purposes.

9. Security

We implement reasonable technical and organizational measures to protect personal data. However, no system is completely secure.

10. Children (13+)

The Service is not directed to children under the age of 13. We do not knowingly collect personal data from children under 13.

11. International Transfers

Data may be processed in locations where our service providers operate. Appropriate safeguards are applied where required.

12. Changes

We may update this Privacy Policy from time to time. Continued use of the Service after changes become effective constitutes acceptance of the updated policy.

13. Contact

For privacy-related questions, contact: legal@17labs.ai

REGIONAL PRIVACY ADDENDA

(Supplemental to the Global Privacy Policy of 17labs)

These Regional Privacy Addenda apply only where required by applicable law. If you reside in a jurisdiction listed below, the corresponding addendum supplements and forms part of the Global Privacy Policy.

A. European Economic Area (EEA) & United Kingdom Privacy Addendum

This section applies if you are located in the European Economic Area (EEA) or the United Kingdom.

A.1 Data Controller

For the purposes of applicable data protection laws, including the General Data Protection Regulation (“GDPR”) and the UK GDPR, the data controller is:

17labs, operated under the 17labs brand
Contact: legal@17labs.ai

A.2 Legal Bases for Processing

We process personal data on the following legal bases, depending on the purpose:

Performance of a contract
To provide and operate the Service, including product search, result delivery, support, and core functionality.
Legitimate interests
To maintain security, prevent abuse, ensure system integrity, conduct analytics, improve the Service, and perform internal testing and experimentation, provided those interests are not overridden by your rights.
Consent
Where required by law, including for certain promotional communications. You may withdraw consent at any time.

A.3 International Data Transfers

Your personal data may be processed by service providers located outside the EEA or the UK.

Where required, appropriate safeguards are applied, such as standard contractual clauses or other lawful transfer mechanisms.

A.4 Data Retention

Personal data is retained for as long as reasonably necessary to provide the Service, support users, maintain security, and improve product performance.

Operational logs and backups may be retained for limited periods where needed for reliability and security.

A.5 Your Rights

Subject to applicable law, you have the right to:

access your personal data
rectify inaccurate data
request deletion of your data
restrict or object to processing
request data portability
withdraw consent where processing is based on consent

You also have the right to lodge a complaint with your local data protection authority.

To exercise your rights, contact legal@17labs.ai.

A.6 Communications

Operational communications necessary to provide the Service may be sent without opt-out.
Promotional communications are sent only where permitted by applicable law and include a way to unsubscribe.

A.7 Children

The Service is not directed to children under the age of 13, and we do not knowingly collect personal data from children under 13.

B. California Privacy Addendum (CCPA / CPRA)

This section applies if you are a California resident, as defined under the California Consumer Privacy Act (“CCPA”) as amended by the California Privacy Rights Act (“CPRA”).

B.1 Categories of Personal Information Collected

Within the last 12 months, we may have collected the following categories of personal information:

identifiers (such as account email, where provided through a third-party platform)
search and interaction data
internet or electronic activity information
technical and security-related data
support communications and feedback

B.2 Purposes of Collection

Personal information is collected for the following purposes:

providing and operating the Service
maintaining security and preventing abuse
improving features and user experience
internal analytics and product development

We do not sell personal information.
We do not share personal information for cross-context behavioral advertising.

B.4 Sensitive Personal Information

We do not collect or use sensitive personal information for purposes beyond those permitted by applicable law.

B.5 Consumer Rights

California residents have the right to:

know what personal information is collected and how it is used
request access to or deletion of personal information
correct inaccurate personal information
opt out of the sale or sharing of personal information (where applicable)
not be discriminated against for exercising privacy rights

B.6 Exercising Your Rights

Requests to exercise your rights may be submitted by contacting:

legal@17labs.ai

We may take reasonable steps to verify your identity before responding to a request.

B.7 Children

The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13.

C. Availability of the Service

The Service may not be available in all jurisdictions, and access may be limited or restricted where required by law.

D. Precedence

In the event of a conflict between these Regional Privacy Addenda and the Global Privacy Policy, these Addenda shall prevail for users to whom they apply.

Privacy Policy