FieldworkSign in

Privacy Policy

Locallabs Pty Ltd (ABN to be inserted) operates Fieldwork at dofieldwork.io. This policy explains what personal data we collect, how we use it, and your rights. If you have questions, contact us at joel@locallabs.dev.

Effective date: 13 April 2026

Who we are

Fieldwork is operated by Locallabs Pty Ltd, a company registered in Queensland, Australia. We provide an AI-native qualitative research platform that allows researchers and teams to design, run, and analyse interview-based studies.

For customers based in the European Economic Area or United Kingdom, Locallabs Pty Ltd acts as the data controller for your account data, and as a data processor for any research data you collect through the platform.

What data we collect

Account and billing data. When you sign up, we collect your email address and, if you subscribe to a paid plan, your billing details. Payment processing is handled by Stripe. We do not store card numbers.

Usage data. We collect information about how you use the platform, including study configurations, session activity, and feature usage. This is used to operate the service and improve it.

Communications. If you contact us by email, we retain that correspondence.

Analytics. We use Vercel Analytics to collect anonymised, aggregate data about page visits. No personal identifiers are stored by this tool.

We do not collect personal data from your research participants directly. When participants interact with a Fieldwork study, you are the data controller for that data. We process it on your behalf as a data processor, subject to the terms of our Data Processing section below.

How we use your data

We use your data to:

  • Create and manage your account
  • Process payments and send receipts
  • Deliver the platform, including AI-powered study features
  • Send transactional emails (account events, billing) via Resend
  • Send lifecycle and onboarding communications via Loops, where you have not opted out
  • Enforce usage limits and protect against abuse via rate limiting

We do not sell your data. We do not use your data to train AI models beyond what is necessary to operate your session in real time.

Sub-processors

We share data with the following third-party processors to operate the platform:

| Processor | Purpose | Location | |---|---|---| | Supabase | Database, authentication, file storage | US (AWS) | | Vercel | Application hosting and delivery | US / global edge | | Anthropic | AI language model processing | US | | Stripe | Payment processing | US | | Resend | Transactional email delivery | US | | Loops | Lifecycle email and onboarding | US | | Upstash | Rate limiting (Redis) | US | | Inngest | Background job orchestration | US | | Vercel Analytics | Anonymised usage analytics | US |

We will update this table when we add or change sub-processors. For customers with active paid plans, we will provide 30 days' notice of material sub-processor changes.

Data retention

Account data. If you cancel your subscription, your workspace is downgraded to the free tier. Your account and data are not automatically deleted. If you wish to have your account and data deleted, contact joel@locallabs.dev and we will action the request within 30 days.

Research session data. By default, message content from interview sessions is anonymised after 180 days. Participant records are deleted after 365 days. These defaults can be adjusted in workspace settings on Scale and Growth plans.

Interview session records. Session metadata (not message content) is retained for the life of the workspace unless you request deletion.

Your rights

Depending on where you are located, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Object to or restrict certain processing
  • Data portability (receiving your data in a structured format)
  • Lodge a complaint with a supervisory authority

Australia. Your rights are governed by the Australian Privacy Act 1988. Complaints can be directed to the Office of the Australian Information Commissioner (oaic.gov.au).

European Economic Area and UK. Your rights are governed by the GDPR or UK GDPR respectively. You have the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, contact joel@locallabs.dev. We will respond within 30 days.

Cookies

We use cookies for authentication (session management) and for core platform functionality. We do not use advertising cookies or third-party tracking cookies.

Security

We use industry-standard measures to protect your data, including encryption in transit (TLS) and encryption at rest. See our Security page for more detail.

Changes to this policy

We will post updates here and update the effective date. For material changes, we will notify customers by email.

Contact

Locallabs Pty Ltd joel@locallabs.dev Queensland, Australia

Last updated: 2026-04-13