Privacy Notice & Data Protection
At TBLLAB, we design software around authentic problems and respect your personal information with engineered discipline and cryptographic rigor.
Encrypted at Rest
All application inquiries and telemetry are stored in dedicated MongoDB Atlas cloud clusters with TLS 1.3 in-transit and AES-256 at-rest encryption.
Zero Ad Trackers
We never run invasive third-party ad pixels (no Facebook Pixel, no Google Ads remarketing). We do not sell or monetize personal data.
Anonymized Metrics
Page navigation and button click telemetry are anonymized with IP masking (`xxx.xxx.xxx`) to safeguard your personal identity.
01.Information We Collect
We collect information in three specific scenarios:
Full name, email address, LinkedIn profile or company website, problem thesis description, target demographic, market validation stage, and operational background.
Full name, email, background role (Engineer / Domain Expert / Operator), and preferred workshop cohort timing.
When browsing TBLLAB, our automated telemetry engine captures page paths visited, specific product pages inspected (e.g. LeadPilot specifications), button interaction clicks, section scroll engagement, general device type (Desktop / Mobile), browser family, and masked IP address (for brute-force and DDoS rate-limiting defense).
02.How We Use Collected Information
- Partnership Evaluation: Reviewing founder submissions against studio criteria, market viability, and engineering feasibility.
- Studio Communications: Responding to inquiries, scheduling exploratory calls, and sending workshop enrollment notifications.
- Infrastructure Optimization: Reviewing telemetry to identify which venture specifications generate authentic reader interest and optimizing web performance.
- Security & Abuse Prevention: Enforcing rate-limiting shields (e.g. 3 wrong login attempts per minute lockout) and mitigating malicious scrapers.
03.Cookies & Local Client Storage
We employ minimal, strictly functional client-side storage keys:
| Storage Key | Category | Purpose |
|---|---|---|
| tbl_visitor_id | LocalStorage | Anonymous random hash to distinguish unique visitors without tracking across external websites. |
| tbl_session_id | SessionStorage | Session continuity identifier cleared when closing browser tab. |
| tbl_admin_session | HTTP-Only Cookie | 256-bit cryptographic authentication token for authorized internal studio access. |
04.Data Retention & Security Measures
We employ stringent technical guardrails:
- All database communications route through dedicated TLS connections directly to MongoDB Atlas.
- Founder applications that do not result in a formal venture co-build partnership are deleted or archived after 12 months unless explicit consent for future venture opportunities is granted.
- Administrative portals require constant-time password verification with bcrypt cryptographic salting.
05.Your Rights (GDPR & DPDP Act 2023)
Depending on your jurisdiction, you have the right to:
- Request a copy of any personal data submitted to TBLLAB.
- Request correction, amendment, or complete deletion (“Right to be Forgotten”) of your data.
- Withdraw consent for marketing or workshop notifications at any time.
06.Data Protection Officer & Contact
To exercise your privacy rights, file a grievance, or ask questions regarding data processing, contact our Data Protection desk directly: