Effective August 8, 2026.
Who we are
AJ Cosmo Labs LLC operates the AJ Cosmo Labs platform — an iOS app and web application that connects Clients, Chemists, Manufacturers, and Distributors for cosmetic and consumer-product formulation, validation, and contract manufacturing. This policy covers both.
What we collect
- Account and identity — the email address you sign up with, your authentication session, your role on the platform, and your display identity (a public alias and/or @handle). Sign-in is handled through our authentication system; we do not store your password in readable form.
- Profile and business information — anything you choose to add, such as chemist credentials, manufacturer capabilities, storefront settings, and profile imagery.
- Content you create — formulations, listings, projects, validation requests and bids, production bids, auction entries, storefront products, and files or images you upload.
- Messages — messages exchanged with other users through the platform, so the conversation is available to both sides and so disputes can be reviewed on their facts.
- Payment and transaction records — wallet balance, escrow state, order and payout history, and subscription status. Card details are handled by our payment processor and are not stored on our servers.
- Device and usage data — push notification tokens (only if you enable notifications), app version and platform, and in-app analytics events used to understand which features are used and to diagnose failures.
- Support correspondence — what you send to us by email, so we can act on it.
What we do not collect
We do not collect your precise location, we do not read your device contacts or photo library beyond files you explicitly select to upload, and we do not sell personal information to data brokers or advertisers.
Why we use it
- To run the platform — authenticate you, show you your projects, route validation and production work, and display your listings.
- To move money safely — hold funds in escrow, release them on dual confirmation, process refunds, and pay out.
- To keep the platform lawful and safe — screen listings against the Acceptable Use Policy, investigate reports, and review disputes.
- To communicate — transactional notifications about your projects, bids, orders, and messages.
- To improve the product — aggregate usage patterns and error diagnostics.
What other users can see
Your public identity on the platform is your public alias or @handle — not your real name, unless you choose to put it there yourself. Users you actively transact with see what the engagement requires: your messages to them, the formulation or listing under discussion, and the status of the work. Formulation contents are visible to a Chemist or Manufacturer only within an engagement you initiate or accept.
Public storefronts, public product pages, and shared insight links show only the information you chose to publish plus your public alias or @handle.
Who we share it with
We share data only with service providers who perform a specific function for us, and only what that function requires: our hosting and database provider, our payment processor, our subscription/billing provider, our push notification provider, and our file storage provider. We also disclose information where we are legally required to, or where it is necessary to investigate fraud, abuse, or a violation of the Acceptable Use Policy. We do not sell your data.
How long we keep it
- Messages are never automatically deleted. They are automatically archived after six months and remain accessible to you in the Archived tab. You can archive or unarchive them yourself at any time.
- Transaction and escrow records are retained for as long as needed for financial, tax, and dispute-resolution purposes.
- Account data is retained while your account is open.
Your rights
You can request a copy of the personal data we hold about you, ask us to correct anything inaccurate, or ask us to delete your account and associated personal data. Email [email protected] from your account email address. Some records — completed transactions, escrow history, and anything we are legally required to keep — are retained after account deletion in a form tied to the transaction rather than to an active profile.
You can turn off push notifications at any time in your device settings, which stops us from using your push token.
Security
Data is transmitted over encrypted connections and stored with our hosting provider under access controls. Payment card data never touches our servers. No system is perfectly secure, and we will not claim otherwise — if we become aware of a breach affecting your data, we will notify affected users.
Children
AJ Cosmo Labs is a business-to-business platform and is not directed at children. We do not knowingly collect information from anyone under 18. If you believe a minor has created an account, email us and we will remove it.
International users
The platform is operated from the United States and data is processed there. If you use the platform from another country, you are transferring your information to the United States.
Changes to this policy
If we make a material change we will update the effective date above and, where the change is significant, notify users in the app. Continued use after a change means you accept the updated policy.
Contact
Questions about this policy: [email protected], or see the Contact page.