Privacy Policy | TSR Labs

This policy explains how TSR Labs ("TSR Labs", "we") handles personal information on tsrlabs.ae and in the TSR Labs client portal and its mobile app. Our apps have their own policies; Car Life Tracker's is at tsrlabs.ae/car-life-tracker/privacy.

1. What we collect

When you contact us

Your name, email address, company and the message you send through the website's contact form or by email.

When you have a client account

Your name, email address and, if you give them, phone number and job title.
Your company's billing details: name, address, tax registration number and purchase order references.
Sign-in details: a securely hashed password, or the identifier Google or Apple gives us if you sign in with them.
What happens in your account: purchases, invoices, payments, time logged, proposals, requests, messages and files you upload.
Security records: sign-in attempts, the IP address and device a request came from, and an audit trail of changes.
If you use the mobile app and allow notifications, a push notification token for your device.

Payments

Card payments are made on Stripe's checkout page. Stripe handles your card details; we receive only a record of the payment, such as the amount, date and a reference, never your full card number.

2. Why we use it

To provide the services you buy and run your account (performing our contract with you).
To invoice, take payment and keep financial and tax records (legal obligation).
To keep accounts secure, prevent fraud and abuse, and fix problems (legitimate interests).
To send service messages: sign-in links, invoices, balance and expiry alerts, and replies to your requests. You can switch off non-essential alerts in the portal's notification settings.

We do not sell personal information, and we do not use it for advertising.

3. Who we share it with

Only with the providers that run the service for us, under their own privacy and security terms, and only what each needs:

Stripe, for card payments.
Replit and its cloud infrastructure, which host the website, the portal and its database.
Our email provider, to send email from the portal.
Google and Apple, if you choose to sign in with them.
Expo, to deliver push notifications to the mobile app, if you allow them.

We may also disclose information where the law requires it, or to protect our rights in a dispute. Some of these providers store data outside the United Arab Emirates; where they do, they protect it under their own contractual and security commitments.

4. How long we keep it

Account information is kept while your account is open. Invoices, payment records and the entries behind them are kept for at least five years after the year they relate to, as UAE tax law requires, even if an account is deleted. Security logs are kept for as long as they are useful for protecting accounts.

5. Your rights

You can ask to see the personal information we hold about you, to correct it, to receive a copy, or to have it deleted, and you can object to how we use it, in line with the UAE's Personal Data Protection Law. Most details can be changed in the portal's settings.

You can delete your own sign-in from the portal's settings. Deleting it removes your name, email address, password and devices from the portal; records we must keep by law, such as invoices issued to your company, stay with your company's account without your personal details. To exercise any other right, email contact@tsrlabs.ae.

6. Cookies

The portal uses a small number of cookies that are strictly necessary to keep you signed in and protect forms from forgery. The website and portal use no advertising or analytics trackers.

7. Security

Passwords are stored only as one-way hashes, connections are encrypted, access inside the portal is limited by role, and changes to financial records are logged. No system is perfectly secure; if we learn of a breach that affects you, we will tell you.

8. Children

Our services are for businesses and are not directed at anyone under 18.

9. Changes

We may update this policy and will change the date above when we do. Significant changes will be announced in the portal.

10. Contact

TSR Labs, Dubai, United Arab Emirates. Email: contact@tsrlabs.ae.