THESIS LAB / ACCESS REQUESTS
Privacy, in plain language.
Updated October 18, 2026 · Consent version 2026-10-18-v1
This notice covers the email access-request form at agents.oraxlabs.io. The service is operated by OraXLabs, LLC, a US company whose founder and operator is based in South Korea.
What you share, and why
We collect your email address, the time of your request and the consent version you accepted. We use this record to manage access requests and contact you about Thesis Lab product access, updates and marketing, as you consented. This form does not create an account, take payment or collect agent code, model credentials or financial account details.
The consent checkbox is not selected by default. You can withdraw consent or request deletion by emailing help@oraxlabs.io. Do not send passwords, access keys or financial account information.
Where the information goes
Cloudflare Workers hosts this page and Cloudflare D1 stores the normalized email address, submission timestamp and consent version. The South Korea-based operator may access these records to administer requests and respond to support or privacy inquiries. Cloudflare uses distributed infrastructure; processing may occur in multiple countries. We do not promise that records remain in one country.
This signup page has no advertising pixels, third-party analytics or external model-provider calls. No automated email service is currently connected. A successful submission means your request was stored; it does not mean a confirmation email was sent.
Abuse prevention and hosting records
To limit automated submissions, the application keeps hourly counters using a SHA-256 value derived from the hour and the network IP address, plus an aggregate counter. It does not store the raw IP address in these application counter records. Counters expire after two hours; expired records are removed during a subsequent submission, so removal does not happen at an exact two-hour deadline.
Cloudflare may separately process network and request metadata to deliver and protect the site. This notice is not a claim that the hosting provider keeps no operational records.
Retention and your choices
We retain access-request records while managing product access and the updates you requested, or until you ask us to remove them. There is no automatic deletion schedule for email requests. Contact help@oraxlabs.io to ask for access, correction, deletion or withdrawal of consent. We may need to verify that the request concerns your email address. Hosting-provider backup and operational retention may differ from removal of the active application record.
If this collection or its purpose changes, we will update this notice and seek additional consent where needed.