Privacy Policy

Effective October 23, 2026

This policy explains what personal information ACME Creation Lab collects, how we use it, who we share it with and what choices you have. It covers our public website at https://acmecreationlab.org, our portal at https://portal.acmecreationlab.org, and the building and services we run at 1219 South Riverfront Blvd, Dallas, TX 75207.

Who is responsible

The information is handled by the companies that run the space:

ACME Creation Lab LLC (ACME Labs), South Riverfront Boulevard, Dallas, TX 75207
ACME Studios Dallas LLC (ACME Studios), 1228 Rock Island Street, Dallas, TX 75207

You can contact us about privacy at contact@acmecreationlab.org or 469-431-5944.

What we collect

When you visit our website. Our servers record standard technical data: your IP address, the pages you request, your browser type and the time. We use it to run and protect the website. We do not use advertising or analytics trackers.

When you contact us. The inquiry form sends us your name, email address, phone number (optional) and your message, and tells us which space you asked about.

When you have an account (tenants, members, contractors, guests). Depending on your role: your name, email address, phone number and mailing address; a password you choose; a copy of your photo ID; signed agreements, waivers and tax forms (for contractors, a W-9, which includes a taxpayer identification number); invoices and payment history; your door code; maintenance requests and photos; the hours you log and what you are owed; and the guests you add (their name, contact details, photo ID and signed waiver).

When you sign in to the portal. We record when you sign in, the IP address you signed in from, whether you have chosen your own password yet, and the browser, operating system, type of device (phone, tablet or computer) and screen size you used. We use this to check that you were able to sign in, to help you if you could not, and to design and test the portal so that it works on the devices people actually use. We do not use it to track you across other sites, and we do not record your location.

Payments. Card, bank, PayPal and Venmo payments are handled by Stripe and PayPal. We receive the result of the payment and the provider's reference numbers, the type of payment method and its last four digits. We do not receive or store your full card number, card security code or bank login. If you pay by Zelle, we receive what your bank tells us about the transfer. If we pay you, we hold the PayPal email or Zelle address you gave us.

Electricity. Our meters record electricity use for each space, by the hour. We use it to bill you and to show you your usage.

Doors and access. Our smart locks record when a door code is used, which lock and whether it worked.

Cameras. We operate security cameras on the premises. See our Security Camera and Recording Notice.

Network. Our network equipment can list the devices connected to it (name, address and activity). We use that to keep the network working and secure.

Communications. We keep the emails and messages we exchange with you.

How we use it

to provide, bill and manage your membership, rental or work, and to run the portal;
to take and record payments, send invoices, reminders and notices, and keep financial and tax records;
to confirm that you can sign in, and to design and test the portal for the browsers, devices and screen sizes in use;
to keep people and property safe, investigate incidents and enforce our rules;
to answer your questions;
to meet legal, tax and accounting obligations and to protect our rights.

We do not sell your personal information, and we do not use it for advertising.

Who we share it with

We share information only as needed, with:

Payment providers: Stripe and PayPal (and your bank for Zelle).
Service providers that run parts of our operation: our email provider (we send mail through Google Gmail); Cloudflare, which hosts our domain's DNS and forwards mail sent to our public addresses; Sifely, which runs our smart locks; Emporia, which runs our electricity monitoring; and the maker of our network equipment.
An AI service. Our staff use an AI assistant (Anthropic's Claude) that can answer questions about our records and look at pictures. When staff ask it to, text, still frames and short clips from our security cameras may be sent to that service to find events or describe what it sees. We do not use it to identify people from their faces.
Embedded services on our website: Google (fonts and maps links), Eventbrite (the events calendar) and a content delivery network that serves some of the site's code. They may see your IP address and the page you are on.
Authorities and others when the law requires it, or when it is needed to protect people, property or our rights, for example to give a camera clip to the police or to an insurer.
A buyer or successor, if our business or part of it is sold or transferred.

Our staff and administrators can see what they need to do their jobs. Contractors, tenants and members see only their own records, plus any camera views we have given them access to.

Cookies

We use only the cookies needed to run the website and the portal. See our Cookies notice.

How long we keep it

Account and agreement records are kept while you are with us and afterwards as long as we need them for tax, accounting, legal and dispute purposes, which is usually several years.
Financial records are kept for the period the law requires.
Camera recordings are kept for a limited time, roughly 30 to 90 days depending on the camera and the type of recording, and are then overwritten. We keep a clip for longer if it is needed for an incident, a claim or a legal request.
Sign-in records (time, IP address, browser, device and screen size) are kept for up to a year and then deleted.
Website inquiries are kept as long as they are useful to answer you and to keep a record of the conversation.

When we delete something it is first moved to a holding area from which an administrator can restore it or remove it permanently.

How we protect it

We use reasonable measures: encrypted connections (HTTPS), password-protected accounts, limited staff access, encrypted storage of the keys we hold for payment providers, and a firewall that limits remote access to our servers. No system is perfectly secure, so we cannot guarantee it. If you think your account has been misused, tell us at once.

Your choices

See and correct your details in the portal, or ask us to.
Ask for a copy, a correction or a deletion of your personal information by writing to contact@acmecreationlab.org. We will respond within a reasonable time. We may need to keep some information to meet legal, tax or contract obligations, or for security, and we may need to confirm who you are first.
Stop emails. Invoices, receipts and notices about your account are part of our service and will continue. Other messages tell you how to stop them.
Cookies. You can block or delete cookies in your browser, but the portal will not work without its sign-in cookie.

If you live in a place whose law gives you additional rights over your personal information, such as the right to know what we hold or to correct it, you can use them by writing to us, and we will honor them to the extent the law applies to us.

Children

Our website, portal and spaces are for adults. They are not directed to children under 13, and we do not knowingly collect their information. If you think a child has sent us information, tell us and we will delete it.

Links to other sites

Our website links to other sites such as PayPal, Eventbrite, Google Maps and social media. We are not responsible for their privacy practices.

Changes

We may update this policy. The effective date shows when it last changed. If a change is significant we will tell you through the portal or by email.

Contact

ACME Creation Lab · 1219 South Riverfront Blvd, Dallas, TX 75207 · contact@acmecreationlab.org · 469-431-5944