Privacy Policy

GemHub OS is a product of Labtika Ltd. (“we”, “us”, “our”). We operate the jewelry operations platform available at gemhubos.com and admin.gemhubos.com.

Questions about this policy: privacy@labtika.com

We collect the following categories of data:

• Account data — name, email, company name, phone number provided during sign-up or contact forms.
• Tenant data — inventory records, orders, memos, certificates, and other operational data you enter into GemHub OS. This data belongs to you.
• Usage data — pages visited, features used, session duration, IP address, browser type. Collected via server logs and first-party analytics.
• Communications — emails and messages you send to us.

We do not collect payment card numbers directly. Payments are processed by our payment provider and governed by their privacy policy.

• To provide, operate, and improve the GemHub OS platform.
• To communicate with you about your account, product updates, and support requests.
• To detect fraud, abuse, and security threats.
• To comply with legal obligations.

We do not sell your personal data to third parties. We do not use your tenant data to train AI models without explicit written consent.

Tenant data is stored on Google Cloud Platform in the US-CENTRAL1 region by default for US tenants. Data is encrypted at rest (AES-256) and in transit (TLS 1.2+).

We are pursuing SOC 2 Type I certification. Until that certification is issued, we operate under equivalent controls documented in our internal security program.

Your tenant data is retained for the duration of your subscription plus 90 days after termination, during which you may export it. On written request we will delete it sooner.

You can export all tenant data at any time in CSV and JSONL format from within your GemHub OS account.

We use the following third-party services that may process your data:

• Google Cloud Platform — infrastructure and storage
• Anthropic / OpenAI — AI inference (no training on your data)
• SendGrid / similar — transactional email
• Stripe — payment processing

Each provider is bound by a data processing agreement with us.

Depending on your jurisdiction you may have the right to: access, correct, delete, port, or restrict the processing of your personal data. To exercise these rights email privacy@labtika.com.

We will respond to verifiable requests within 30 days.

We will post any changes here and update the “Last updated” date. Material changes will be notified by email to registered users at least 14 days in advance.