Privacy Policy

Last updated: October 10, 2026

SZD Labs ("we", "us", "our") operates the Aurora platform and related services at szdlabs.io. This policy describes how we collect, use, and protect your information.

1. Information We Collect

We may collect the following types of information:

Account Information: Email address provided when subscribing to our newsletter.
Contact Form: Your name, email address, the topic you pick and your message, when you send the contact form at szdlabs.io/contact. When the form in use is HubSpot's, HubSpot also receives the address of the page you sent it from and the page that referred you.
Gated Resources: Name and email address provided when you unlock a gated resource, such as a practice exam. This also subscribes you to our newsletter through Buttondown. You can unsubscribe at any time.
Health & Wearable Data: If you connect a wearable device (e.g., Oura Ring), we access data such as sleep metrics, heart rate, activity levels, and readiness scores through the device's API. This data is only accessed with your explicit authorization.
Usage Data: Anonymous analytics collected via Vercel Insights (page views, no personal identifiers).

2. How We Use Your Data

To provide personalized AI-powered insights through the Aurora platform.
To send newsletter updates (only if you subscribe).
To deliver access to gated resources you request.
To reply to messages you send through the contact form.
To improve our services and user experience.

We do not sell or rent your personal or health data. We share it only with the services listed in section 4, as described there. Your wearable data is processed solely to provide you with insights and is not used for advertising or marketing purposes.

3. Data Storage & Security

Your data is stored securely using industry-standard encryption. Wearable device data is accessed via OAuth 2.0 authorization and is only retained as long as necessary to provide the service. You may revoke access at any time through your device's settings.

4. Third-Party Services

We integrate with the following services:

Oura: Health and wellness data (with your authorization)
Buttondown: Newsletter delivery
HubSpot: The contact form is provided by HubSpot when it loads; otherwise the page uses the backup form described under Formspree. What you enter in the HubSpot form (name, email address, topic and message) is sent to HubSpot, along with the address of the page you sent it from and the page that referred you, and stored in SZD Labs' HubSpot CRM, where we use it to reply to you. See HubSpot's privacy policy.
Formspree: Backup contact form processing. When the HubSpot form isn't in use (for example, when a browser blocks it), the page's own form sends your name, email address, topic and message to us through Formspree.
Calendly: Intro-call booking, if you book a call. Calendly receives the details you enter when you book.
Google Fonts and cdnjs: Web fonts, and a charting library on the cost analyzer. Your browser downloads these files from Google's and cdnjs's servers, which receive your IP address with each request.
Vercel: Hosting and anonymous analytics

Each service has its own privacy policy governing how they handle data.

Cookies on the contact form: HubSpot's analytics cookies (such as __hstc and hubspotutk) come with HubSpot's tracking code, which this site does not install. When the HubSpot form loads, HubSpot's content delivery provider may set necessary bot-protection cookies (such as __cf_bm, which HubSpot says expires after 30 minutes) on HubSpot's own domains.

5. Your Rights

You may at any time:

Request access to your personal data
Request deletion of your data
Revoke third-party API access (e.g., Oura) through the respective service's settings
Unsubscribe from newsletter communications

6. Contact

For privacy-related questions, contact us at tyler@szdlabs.io.