What we know about you, why we know it, and what we do with it.

We are The DaaS Labs, registered in Pakistan. We provide Development as a Service to founders and ambitious teams. This policy applies to all visitors to our website, clients using our sprint boards, and anyone who contacts us.

Our Data Controller is directly accountable for this policy. You can reach them at privacy@thedaaslabs.com.

Information you give us directly:

Information we collect automatically:

We use specific third-party sub-processors to process data on our behalf. Here is exactly who they are:

A cookie is a small text file stored on your device that helps us remember your preferences and understand how you use our site. Here is what we use:

After each period, data is automatically deleted or permanently anonymized so it can no longer uniquely identify you.

GDPR Rights (EU/UK users):

• Right to access — request a copy of your data
• Right to rectification — correct inaccurate data
• Right to erasure — request deletion within 30 days
• Right to restrict processing — pause processing while in dispute
• Right to portability — receive your data in a portable format
• Right to object — object to processing based on legitimate interest
• Right to withdraw consent — for any consent-based processing
• Right to lodge a complaint — with your national supervisory authority

CCPA Rights (California users):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt out of the sale of personal information
• Right to equal service and price (non-discrimination)

We are based in Pakistan. Our clients are typically in the US, UK, and EU. This means data flows across borders. We ensure safeguards are in place for these transfers by relying on Standard Contractual Clauses (SCCs) with our sub-processors or localized adequacy decisions where applicable. Specifically, your data may be transferred to and hosted in the United States and the United Kingdom by our aforementioned sub-processors.

We do not knowingly collect data from anyone under 16. If we discover we have, we delete it immediately. Contact us if you have a concern.

We will notify active clients by email before material changes to this policy take effect. We maintain a log of significant changes below.

Data Controller: The DaaS Labs
Email: privacy@thedaaslabs.com
Response time: Within 48 hours
Postal address: [Pakistan registered address]