Privacy policy

North Star Labs LLC Effective date: August 19, 2026 Last updated: August 19, 2026

North Star Labs LLC ("North Star Labs," "we," "us") is a defense cybersecurity company headquartered in Alexandria, Virginia. This policy describes how we collect, use, share, and protect personal information when you visit northstarlabs.ai, submit a form on our website, submit a LinkedIn Lead Gen Form, download our content, book a meeting with our team, or otherwise interact with us. It applies to prospective customers, customers, partners, and visitors. It does not apply to data we process on behalf of customers inside our products, which is governed by the agreements covering those deployments.

1. Information we collect

We collect information you provide directly, including your name, business email address, company name, job title, phone number, and any message you include when you submit a website form, a LinkedIn Lead Gen Form, a content download request, or a meeting booking. When you submit a LinkedIn Lead Gen Form, LinkedIn transfers to us the profile fields you confirm in the form, and your submission is also subject to LinkedIn's own privacy policy.

We collect limited information automatically when you visit our website, including IP address, browser type, device type, pages viewed, referring page, and interactions with our content, through cookies and similar technologies described in section 6.

We do not knowingly collect information from individuals under 18, and our website and marketing are directed at business audiences.

2. How we use information

We use personal information to respond to your inquiries, deliver content you request, schedule and conduct meetings, send communications about our products, services, and relevant industry analysis, evaluate interest in our offerings, administer and improve our website, and comply with legal obligations. Where we send marketing email, every message includes a way to unsubscribe, and we honor unsubscribe requests promptly.

We do not sell personal information, and we do not share personal information with third parties for their own marketing purposes.

3. Legal bases

Where the EU or UK General Data Protection Regulation applies, we process personal information on the basis of our legitimate interest in marketing our services to business audiences and operating our website, your consent where you have given it, and performance of a contract where processing is necessary to take steps you have requested. You may withdraw consent at any time without affecting processing that occurred before withdrawal.

4. How we share information

We share personal information only with service providers who process it on our instructions and under contractual confidentiality and data protection obligations. These currently include HubSpot (customer relationship management, forms, email, and meeting scheduling), LinkedIn (lead generation and advertising), our website hosting and infrastructure providers, and professional advisors where required. We may disclose information if required by law, regulation, legal process, or enforceable governmental request, in connection with a merger, acquisition, or sale of assets with notice to you, or to protect the rights, property, or safety of North Star Labs, our customers, or others.

5. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. Our controls are aligned with the SOC 2 Trust Services Criteria for security, confidentiality, and privacy, and include access controls based on least privilege, encryption of data in transit, logging and monitoring, vendor risk review, and workforce confidentiality obligations. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we review and improve our safeguards on an ongoing basis.

6. Cookies and tracking

Our website uses cookies and similar technologies from HubSpot to operate forms, attribute submissions, and understand how visitors use our content, and from LinkedIn to measure the performance of our advertising. You can control cookies through your browser settings, and where required by law we present a consent mechanism before non-essential cookies are set. Our website does not respond to browser Do Not Track signals, but we honor the opt-out rights described in section 8.

7. Retention

We retain personal information for as long as needed for the purposes described in this policy, including maintaining a business relationship with you, and afterward as required for legal, accounting, or compliance purposes. Lead records associated with no activity are reviewed periodically and deleted or anonymized when no longer needed. You may request deletion at any time as described in section 8.

8. Your rights

Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, receive a copy in a portable format, object to or restrict certain processing, opt out of marketing communications, and appeal a decision we make about a rights request. Virginia residents have these rights under the Virginia Consumer Data Protection Act, California residents under the California Consumer Privacy Act, and EU and UK residents under the GDPR. We do not sell personal information or process it for targeted advertising as those terms are defined under the CCPA, other than advertising measurement described in section 6.

To exercise any of these rights, email privacy@northstarlabs.ai. We will verify your request and respond within the time required by applicable law, and we will not discriminate against you for exercising your rights. If you are in the EU or UK, you also have the right to lodge a complaint with your local supervisory authority.

9. International transfers

We are based in the United States and process information there. If you access our website or submit a form from outside the United States, your information will be transferred to the United States. Where required, we rely on appropriate safeguards for such transfers, including standard contractual clauses entered into by our service providers.

10. Changes to this policy

We may update this policy from time to time. When we do, we will revise the last updated date above, and material changes will be noted on this page. Your continued interaction with our website or forms after an update indicates acceptance of the revised policy.

11. Contact us

North Star Labs LLC Alexandria, Virginia privacy@northstarlabs.ai https://northstarlabs.ai