Privacy Policy
Last updated: August 2026 · 78 Skincosmetic Pvt Ltd ("78 Labs", "we")
This policy is written to the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025.
Who's responsible for your data.
78 Skincosmetic Pvt Ltd, a company registered in Telangana, India. Under the DPDP Act we're the Data Fiduciary for the personal data described below — meaning we decide why and how it's processed, and we're accountable for it. Reach us any time at hello@78labs.in.
What we collect.
Right now, one thing: your email address, when you join the waitlist.
That's the entire list. No name, no phone number, no address, no payment details, no date of birth. We don't build tracking profiles and we don't buy data about you from anyone else.
Our host records standard server logs (IP address, browser type, pages requested) for security and to keep the site running. We don't use those logs to identify you or link them to your email.
Why we collect it.
Three purposes, and nothing beyond them:
- To send you journal updates about how the product is being made.
- To tell you when we launch.
- To send you your founding-batch code so you can claim your first bottle.
If we ever want to use your email for something outside that list, we'll ask you first.
Your consent, and taking it back.
You gave us your email by choosing to — that's the only basis we process it on. You can withdraw that consent whenever you like, and it should be exactly as easy as giving it was.
Two ways: click unsubscribe at the bottom of any email we send you, or write to hello@78labs.in and ask. Either one works. You don't have to give a reason, and we won't ask for one or try to talk you out of it.
Withdrawing consent stops future processing. It doesn't undo emails we already sent.
Your rights.
Under the DPDP Act you can ask us to:
- Show you what personal data of yours we hold and what we've done with it.
- Correct or complete anything that's wrong or out of date.
- Erase your data entirely.
- Nominate someone to exercise these rights for you if you die or become incapacitated.
Write to hello@78labs.in for any of these. We'll act within 90 days, and in practice much sooner — there are two of us and the list is small.
Who else touches it.
Your email is stored and sent through MailerLite, our email service provider, under their data-processing terms. They process it on our instructions and for no other purpose. MailerLite's servers are outside India, so your email is transferred abroad — the DPDP Act permits this except to countries the Government specifically restricts, and none currently apply.
The site itself is hosted on Vercel. Waitlist signups pass through a Google Apps Script endpoint on their way to MailerLite.
We do not sell, rent, or trade your email. Not to advertisers, not to other brands, not to anyone. If we're ever legally compelled to hand over data, we'll tell you unless we're barred from doing so.
How long we keep it.
Until you unsubscribe or ask us to delete it — or until it's clear the purpose is finished, whichever comes first.
Concretely: if we abandon this product and never launch, we delete the whole waitlist. We don't keep data "just in case."
Keeping it safe.
Access to the waitlist is limited to the two founders, protected by strong unique passwords and two-factor authentication. Data is encrypted in transit. If a breach ever affects your data, we'll notify you and the Data Protection Board as required — and we'll tell you plainly what happened rather than burying it.
Children.
This site isn't directed at children, and we don't knowingly collect data from anyone under 18. Under the DPDP Act, processing a child's data needs verifiable consent from a parent or guardian — we'd rather not be in that position at all. If you believe a child has joined our waitlist, write to us and we'll remove the record.
Cookies and analytics.
This site sets no marketing cookies, no advertising pixels, and no cross-site trackers. We use Vercel Analytics, which counts page views without cookies and without identifying individual visitors — so we can see that the journal gets read, not who read it.
Complaints.
Our Grievance Officer can be reached at hello@78labs.in. A founder reads it — not a ticketing queue. We'll respond within 90 days and usually within a few.
If we don't resolve it to your satisfaction, you have the right to complain to the Data Protection Board of India.
Changes.
When this policy changes we'll update the date at the top. If a change materially affects how we use your data, we'll email you about it rather than quietly editing the page.