Privacy
Privacy & GDPR
How Entity_OS processes marketplace and end-user data. A formal DPA is available for enterprise contracts.
Who we are
Entity Labs operates Entity_OS, a marketplace intelligence platform. When you integrate as a customer, you are typically the controller of end-user search data; Entity_OS acts as processor under your instructions.
Contact: privacy@entitylabs.example
Lawful bases: contractual necessity for delivering search APIs; legitimate interest for security, abuse prevention, and audit logs.
Your rights (GDPR)
Right of access
Receive a copy of personal data we process for your account.
Email privacy@entitylabs.example with subject DSAR-ACCESS
Right to rectification
Correct inaccurate personal data.
Email privacy@entitylabs.example with subject DSAR-CORRECT
Right to erasure
Request deletion where legally applicable.
Email privacy@entitylabs.example with subject DSAR-DELETE
Right to portability
Export machine-readable copies of search/session metadata we store.
Email privacy@entitylabs.example with subject DSAR-EXPORT
Right to object / restrict
Object to certain processing or request restriction.
Email privacy@entitylabs.example with subject DSAR-OBJECT
We aim to respond to DSARs within 30 days. Identity verification may be required.
Retention
- API audit logs13 months — Security investigations + SOC 2 evidence window
- Search session metadata90 days (default) — Product quality + support; configurable per MSA
- Webhook delivery logs30 days — Delivery debugging
- Sandbox API keys14 days then expire — Self-serve evaluation
- Metric samples90 days hot — Reliability dashboards
Subprocessors
- Infrastructure host (Vercel / Node runtime)DPA
Application hosting and edge delivery · EU / US (configurable)
- PostgreSQL providerDPA
Primary datastore (Prisma) · Customer-selected region
- Google GeminiDPA
Optional AI enrichment / ranking assistance · Google Cloud (EU preferred when configured)
- RealtyAPI / listing providersDPA
Marketplace inventory ingestion (customer-authorized) · Provider-dependent
Data Processing Addendum
Enterprise customers may request our DPA template covering processing instructions, security measures, subprocessors, international transfers, and audit rights. Email privacy@entitylabs.example.