Privacy policy

Who we are

TSB Labs is a brand of Ahmed Yahya Al Kindi Enterprise, a sole proprietor establishment registered in the Sultanate of Oman (commercial registration 1399884), whose other brand is Madar OS. It decides what happens to the details described here, under Oman’s Personal Data Protection Law. For anything on this page, write to ahmed@tsblabshq.com. Our data protection officer is Ahmed Yahya Al Kindi, at the same address. Madar OS and Madar POS have their own policy at madar-os.com/privacy.

This site

The site sets no cookies. Vercel, which hosts it, counts page views with its Web Analytics, which sets no cookies and stores no IP address; it tells one visit from another only by a hash of the request that Vercel discards after 24 hours.

What the sign up collects

When you sign up for email updates on this site, we keep:

• your email address, and your first name if you give it;
• which lists you ticked: TSB Labs updates, Madar OS updates, The System Builder;
• the consent sentence you agreed to, word for word, and the time you agreed;
• the site you signed up on;
• a one way hash of your IP address, never the address itself;
• a short browser string, the kind of browser and device you used.

To send you the updates you asked for. Nothing is sent until you confirm your address by clicking the link in the first email. The consent record and the hashed address are kept so we can show that you asked, and to keep automated sign ups out.

Booking a call

Book a call opens Cal.com’s own page. What you enter there, such as your name, email, company, website and what you want to discuss, goes to Cal.com, Inc. in the United States, under its own privacy policy, and to us: the booking is filed in our own records and appears in our Google Calendar. Before the call, Madar, our own AI assistant, prepares a short brief for us with Anthropic’s Claude from what you told us.

Emails with us

Mail you send to our addresses is kept in our mailbox at Zoho, and a copy of mail we send is kept in our Google mailbox. A person reads and answers it.

If we wrote to you first

We sometimes write to a business we think TSB Labs could help. Ahmed Yahya Al Kindi writes from his own address, ahmed@ahmedyahyak.com, to a business email address that was published on the company’s own website or in a business directory, and we record where and when we found it. We write this way to businesses in the United Arab Emirates, Bahrain, Kuwait, the United States and Oman. In Oman that can be a named person’s address on the company’s own domain; everywhere else it is a company address only, such as info@. We never write this way to personal free mail addresses, and not to anyone in Saudi Arabia or Qatar unless they agreed first.

We write at most three times, a first email and up to two short follow ups, and stop as soon as you answer or book a call. Each email says at its foot that it was written with AI help and that Ahmed replies personally, and carries no tracking image and no tracked links. Every address is checked against our do not contact list before the first email. Every email has a one click unsubscribe link that stops all further emails at once; reply “stop” instead and we stop within 24 hours. Either way your address stays only on that list, so it is never used again. When you answer, Madar reads your reply with Anthropic’s Claude to sort it and, where you asked something, to draft an answer that Ahmed reads and sends himself.

Payments

Client work is paid by invoice and bank transfer. Card payments are not enabled yet. We keep your invoices and payment records, with your name, company and billing details, for as long as tax law requires.

Learners under 18

This applies to AI training run through TSB Labs, including the AI program with Ahmed and private group sessions, whenever a learner is under 18.

• A student may give their own email at any age. It is used only for their student portal, meeting links and session materials, and never for marketing.
• A parent or guardian name and email are always required.
• The parent or guardian is copied on every email to a student under 18.
• Student data is kept to a minimum: first name, age group and age.

A parent or guardian can ask to see, correct or delete a student’s details at ahmed@tsblabshq.com.

Who handles it

• Brevo (Sendinblue SAS, France) sends the update emails and holds the list.
• Supabase, in Frankfurt, Germany, stores our records: sign ups, bookings and the businesses we talk to.
• Oracle Cloud, in Frankfurt, Germany, runs our own server, which receives the sign up form and Cal.com’s booking notices.
• Vercel, in the United States, hosts this site and its Web Analytics, which sets no cookies.
• Cal.com, in the United States, takes bookings on its own page.
• Zoho holds our mailboxes and sends our mail, including our first emails to businesses.
• Google holds our calendar and a copy of the mail we send.
• Anthropic, in the United States, runs the Claude models that prepare our briefs and draft answers. We do not let it use this data to train its models.

We never sell, rent or trade your details.

How long we keep it

A sign up is kept until you unsubscribe. After that the record is kept, marked unsubscribed, as proof of your choice, so you are not added again by mistake. Our records of the businesses we talk to, with names, contact details and notes of our exchanges, have no set end date yet; ask and we delete yours. An address on our do not contact list stays there, so we keep our promise not to write again. Invoices are kept for as long as tax law requires.

Your rights

Under Oman’s Personal Data Protection Law you can ask to see what we hold about you, have it corrected, have it deleted, and object to marketing at any time, including our first emails to businesses. Write to ahmed@tsblabshq.com and we answer within 30 days. Every update email also has a link to unsubscribe.