Legal
Privacy policy
How Garni Labs collects, uses and protects information from this website, the sample job form, the live demo and Larry. Garni Labs, based in Yerevan, Armenia, is responsible for the personal data handled through this English-language website.
Last updated: October 19, 2026
What we collect
We collect only what you give us and what your browser sends when you use the site.
- Your name, email address and message when you use the contact form
- Your name, work email, website and answers to the six questions when you use the sample job form
- The files and examples you email us for a sample job
- Files you drop into the Receipts Reader live demo, which are read in memory and sent to Anthropic to read
- Your name, email address, the country your connection comes from, microphone audio and the transcript of your conversation when you talk to Larry
- Your IP address, browser, the page you asked for and related request details, processed by our host and our abuse-prevention tools
- Your cookie choice and, after you accept, analytics and advertising identifiers
- After you accept cookies, browser events such as page views and form sends
The file promise for your sample job files, including where they are stored and when they are deleted, is on the data page.
How we use it
- Replying to your forms and running your sample job
- Building and running the tools you ask us for
- Running the Receipts Reader demo and the Larry consultation, and emailing you the written recap
- Preventing spam, abuse and excessive submissions, including limits on conversations with Larry
- Understanding how the site is used, after you accept cookies
- Measuring our advertising and form sends, after you accept cookies
Legal bases
- Taking steps you request before a possible contract, such as replying to a project inquiry, running a sample job or recording your call with Larry so we can email you its written summary
- Our legitimate interests in operating and securing the site, preventing abuse and answering inquiries
- Your consent for browser analytics and advertising storage, which you can withdraw any time through Cookie settings in the footer
- Compliance with legal obligations, and the establishment, exercise or defense of legal claims when they apply
Who receives it
These services process data on our behalf or receive it for the delivery, security, analytics and advertising jobs described here.
| Service | What it does for you | What data it gets |
|---|---|---|
| Vercel | Hosts this website and the sample job form. | A log of each visit: your IP address, browser details and the pages requested. |
| Upstash | Counts form sends to stop abuse, and counts Larry's conversations to enforce his limits. | Counters tied to your IP address. For Larry, also a scrambled (hashed) version of your email address, so each address gets one consultation. |
| Resend | Delivers our emails: your form answers to us, and Larry's transcript, summary and recap. | Your name, your email address and the text of the messages it delivers. |
| Anthropic | Reads the files dropped into the Receipts Reader demo, writes Larry's recap, and runs Larry's live conversation model through ElevenLabs. | The demo file or the conversation transcript it is asked to work on. Anthropic states that by default it does not use inputs or outputs from its commercial products, including its API, to train its models. It also states that it automatically deletes API inputs and outputs from its backend within 30 days, with exceptions for contracts, usage-policy enforcement and the law. |
| ElevenLabs | Runs Larry's voice and writes the transcript of your conversation. | Your microphone audio during the conversation, plus your name and email address. ElevenLabs states that it keeps conversation transcripts and audio recordings for 2 years by default, a period the account owner can change. It also states that it has agreements with each third-party model provider that expressly prohibit them from training on customer content. |
| Google Analytics and Google Ads | Measures how the site is used and which ads lead to a sample job. Runs only after you accept cookies. | Page addresses and titles, where you came from, device and browser details, and a signal when you send a form. |
| Meta Pixel | Measures page views and form sends for our advertising. Runs only after you accept cookies. | Page views and a signal when you send a form, with cookie identifiers. |
| Meta Conversions API | Confirms a contact form send from our server. Runs only after you accept cookies. | A record that you sent a form, with a hashed (scrambled) email address, your IP address and browser details. |
International processing
Garni Labs works from Armenia, and our hosting and file storage are in the United States. Some of the services above may process data in other countries too. Where the law requires a transfer safeguard, we rely on the provider terms and transfer mechanisms available for the service. Email us for detail on a specific transfer. Quebec visitors can read how we handle personal information that leaves Quebec on the data page.
How long we keep it
- Files from your sample job are deleted within 30 days of it ending, unless you ask us in writing to keep them for your build. The data page has the detail.
- Form submissions and the emails that follow are kept as long as we need them to respond, keep project records and meet legal or business obligations. Resend and our email provider keep their copies under their own terms.
- Files in the Receipts Reader demo are not stored by us.
- Larry's transcript, summary and recap are emailed through Resend and kept with our correspondence. ElevenLabs keeps conversation transcripts and audio under its own retention settings, described on the data page. To give each address one consultation, we keep a hashed version of the email address.
- Google and Meta keep analytics and advertising data under our account settings and their published policies. Declining cookies stops their tags from loading on this site.
- Rate-limit counters expire shortly after the one-hour window. Upstash rate-limit analytics may keep the IP address and the allow or block result for up to 90 days.
- Vercel keeps request logs according to our hosting plan settings.
Security
We use technical and organizational safeguards that fit this site and the data it handles. No transmission over the internet or storage system is completely secure.
- HTTPS protects data on its way between your browser and the site
- Rate limiting and access controls reduce abuse and restrict who can reach operational systems
- Every service listed above is limited to the job described for it
Your rights
Your rights depend on where you live and why the data is processed. Subject to the law and its exceptions, you may be able to:
- Ask whether we process your personal data and request access to it
- Ask us to correct inaccurate or incomplete personal data
- Ask us to delete personal data when the conditions apply
- Ask us to restrict processing, or object to certain processing, when it applies
- Request a portable copy of eligible data when it applies
- Withdraw consent for future browser analytics and advertising at any time
Send requests to hello@garnilabs.com. We may ask for what we need to verify your identity. We respond without undue delay and within the period the law requires. GDPR requests are normally answered within one month.
If GDPR applies to you, you may also complain to the data protection authority where you live, where you work or where you believe an infringement happened.
Contact us
Questions about this policy or your information go to one address.
hello@garnilabs.com