Privacy Policy

Tobala Labs LLC ("Tobala Labs", "we", "us", or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit tobalalabs.com (the "Site") or interact with our services. By using the Site, you agree to the practices described here.

1. Information We Collect

We may collect the following types of information:

a. Information You Provide to Us

Information you voluntarily submit through our contact form, our booking widget, or by emailing or calling us, including but not limited to:

• Name
• Email address
• Phone number
• Company name
• Budget range (when provided through the contact form)
• Project details, scheduling preferences, or messages you send us

When you book a consultation, the details you enter are processed through our scheduling provider (Apoindy) to confirm and manage your appointment.

b. Automatically Collected Information

When you visit the Site, our hosting provider and analytics tools may automatically collect:

• IP address
• Browser type and settings
• Device information
• Pages visited, referring page, and time spent on the Site

This information is used for security, analytics, and website improvement purposes.

2. How We Use Your Information

We use the information we collect to:

• Respond to inquiries and contact requests
• Schedule, confirm, and manage consultations and calls
• Provide, maintain, and improve our services
• Communicate about projects, proposals, or updates
• Maintain website security and performance
• Comply with legal obligations

We do not sell or rent your personal information, and we do not share it for cross-context behavioral advertising.

3. Cookies and Tracking Technologies

The Site and the third-party services we use may set cookies or similar technologies to operate the Site, remember preferences, analyze traffic, and understand how visitors interact with our content. This may include analytics cookies (such as Google Analytics) and cookies set by our hosting and scheduling providers. You can disable cookies through your browser settings, though some features of the Site may not function properly.

4. Service Providers and Sharing of Information

We do not sell your personal information. We share it only with trusted service providers that help us operate the Site and our business, and only as needed to perform their services. These providers currently include:

• Cloudflare — website hosting, content delivery, security, and our contact-form processing (Cloudflare Workers);
• Resend — delivery of contact-form submissions to our team by email;
• Apoindy — scheduling and management of consultations booked through the Site;
• Google — web fonts and, where enabled, website analytics.

We may also disclose information when required by law or legal process, or to protect our rights, safety, or property. All service providers are expected to keep your information confidential and to use it only for the services they provide to us.

5. Data Retention

We retain personal information for as long as needed to fulfill the purposes described in this Policy — for example, to respond to your inquiry and maintain our business records — and as required by applicable law. When information is no longer needed, we take reasonable steps to delete or anonymize it.

6. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Your Privacy Rights (California Residents)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the "CCPA/CPRA"), gives you the following rights:

• The right to know what personal information we collect, use, and disclose;
• The right to request access to or a copy of your personal information;
• The right to request correction of inaccurate personal information;
• The right to request deletion of your personal information;
• The right to opt out of the sale or sharing of personal information (we do not sell or share your information);
• The right not to receive discriminatory treatment for exercising your privacy rights.

To exercise any of these rights, contact us using the information below. We will not discriminate against you for exercising your rights, and we may need to verify your identity before responding.

8. International Users

The Site is operated from the United States. If you access it from outside the United States, you understand that your information will be processed in the United States, where data protection laws may differ from those in your country. By using the Site, you consent to this processing.

9. Third-Party Links

The Site may contain links to, or embedded content from, third-party websites and services. We are not responsible for the privacy practices or content of those sites, and we encourage you to review their privacy policies.

10. Children's Privacy

Our services are not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by a revised "Last updated" date at the top of this page.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, or to exercise your privacy rights, contact us at: