Privacy Policy

Privacy policy

This policy describes the data HandoffLab currently handles in the launch version, including the lightweight session cookie, browser-local workspace state, support email, and hosted checkout handoff.

Last updated: March 15, 2026

What HandoffLab collects today

When you start a workspace session, HandoffLab stores the name, email address, selected plan intent, and session creation time in an HTTP-only cookie so the current browser session can reopen the workspace or checkout path.

When you use the workspace, shared handoff, or scope-change tools, project records, change-order drafts, data packs, and related workflow history are stored in your browser local storage. That local state remains on the device and browser you are using unless you delete it or replace it.

If you email support, the information you include in that email is processed through the support inbox at support@handofflab.com.

What happens around checkout and hosting

If a paid checkout link is configured, HandoffLab can redirect you to a hosted payment page operated by a third-party payment provider. Payment details are entered on that provider-hosted page, not inside the HandoffLab app.

Like most web applications, infrastructure and hosting providers may process routine technical request data such as IP address, browser type, requested URL, and timestamps to deliver and secure the site.

HandoffLab does not currently run a separate analytics or advertising tracker inside the app codebase.

How data is used and retained

Session-cookie data is used to reopen the workspace or checkout path. The current session cookie is configured for up to 30 days unless it is cleared sooner.

Browser-local workspace data is used to make the product useful before durable server persistence exists. That local data remains until you clear it, overwrite it, or export and move away from the current browser.

Support emails are retained as needed to answer requests, resolve launch issues, or keep a record of billing and cancellation communication.

Your choices

You can clear the current session from the workspace, delete local browser storage, or export a workspace data pack before changing devices or browsers.

Because the current launch version is local-first, avoid storing sensitive regulated information or anything that requires secure shared access controls HandoffLab does not yet provide.

Privacy questions or deletion requests related to support correspondence can be sent to support@handofflab.com.