Privacy Policy

1. Introduction

This Privacy Policy describes how Bookit Labz LLC ("Bookit Labz", "we", "us", or "our"), the operator of M4H (the "Service") at https://made4human.com, collects, uses, and protects information about you when you use M4H. M4H is an AI-powered business operations platform that provides 26 AI agents to assist with marketing, sales, legal, HR, customer service, and finance tasks.

By using M4H you agree to the practices described in this policy. If you do not agree, please do not use the Service.

2. Information We Collect

Account information

When you create an account we collect your name, email address, company name, industry, and team size. We also store any preferences you configure during onboarding.

OAuth tokens for connected services

When you connect a third-party service (Gmail, Google Calendar, Google Drive, Google Sheets, Google Ads, HubSpot, Notion, ElevenLabs, Slack, and others) we receive an OAuth access token and, where applicable, a refresh token. These tokens are stored encrypted at rest and are used only to perform actions you direct your AI agents to take.

Usage data

We collect basic information about how you use M4H — pages visited, features accessed, agent interactions, approval decisions, and error events — so we can understand which parts of the product work well and which need improvement.

Knowledge Base content

Files and notes you upload to your Knowledge Base are stored in our database so your agents can use them as grounding context.

3. How We Use Your Information

To provide and operate the M4H platform.
To execute actions on your connected services on your behalf — sending emails, creating calendar events, managing campaigns, drafting documents, and other tasks you delegate to your agents.
To provide context to AI agents so they can make better decisions on your behalf.
To improve the Service through aggregated, non-identifying analytics.
To communicate with you about your account and the Service.

We do not use your data for advertising. We do not sell your data to third parties. We do not use your data to train general-purpose AI models.

4. Third-Party Services

M4H is built on a small number of trusted infrastructure partners. We share only the minimum data required for each service to function.

Anthropic (Claude) — processes the contents of your conversations with agents to generate responses. Anthropic does not retain user data for training under our enterprise terms.
Composio — manages the OAuth handshake and stores encrypted credentials for most third-party integrations.
Supabase — provides our database and authentication infrastructure. All tables are protected with Row Level Security so users can only access their own data.
Vercel — hosts the M4H web application.
Google APIs — Gmail, Calendar, Drive, Sheets, and Google Ads are accessed via OAuth with your explicit consent. We retrieve and write data on your behalf when an agent acts on your instructions.

5. Data Storage and Security

All data is stored in Supabase (PostgreSQL) hosted in the United States.
Row Level Security policies ensure users can only access rows they own.
OAuth tokens are encrypted at rest in our database.
All traffic between you and M4H is encrypted using HTTPS/TLS.
Access to production infrastructure is limited to a small number of authorized engineers and protected with two-factor authentication.
We monitor for unauthorized access and will notify affected users promptly in the event of a confirmed breach.

6. Google API Data Disclosure

M4H's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

We only use Google API data to provide and improve user-facing features of M4H.
We do not transfer Google API data to third parties except as necessary to provide the Service or as required by law.
We do not use Google API data for advertising purposes.
We do not allow humans to read Google API data unless we have your affirmative agreement, it is necessary for security purposes (such as investigating abuse), or it is required by law.
Google Ads data is fetched on demand from the Google Ads API and is not permanently stored on our servers.

7. Data Retention

Account data is retained for as long as your account is active.
OAuth tokens are deleted immediately when you disconnect a service from the Connectors page or when you close your account.
Conversation history is retained for 90 days and then automatically deleted.
You can request the deletion of all data associated with your account at any time by emailing admin@bookitlabz.com.

8. Your Rights

Access the personal data we hold about you.
Delete your account and all associated data, including OAuth tokens and conversation history.
Disconnect any integration at any time directly from the Connectors page in your dashboard.
Export your conversation history and Knowledge Base content on request.

9. Children\u2019s Privacy

M4H is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes we will notify users by email and update the "Last updated" date at the top of this page. Continued use of the Service after a change indicates acceptance of the updated policy.

11. Contact Information

Bookit Labz LLC, doing business as Made for Human (M4H), is incorporated in the State of Wyoming, USA (filed January 5, 2026, ID 2026-001858294). Our registered address is 30 N Gould St Ste N, Sheridan, WY 82801.

For any privacy questions, data requests, or to report concerns, contact us at admin@bookitlabz.com.

↑ Back to top