01 Scope of this policy
Thelaywala ("Thelaywala," "we," "us," or "our") respects your privacy and is committed to handling personal information responsibly. This Privacy Policy explains how we collect, use, disclose, transfer, and safeguard personal information, and the rights and choices available to you.
Thelaywala is an AI automation studio (Registered LLC · PSEB Certified) based in Austin, Texas, serving clients worldwide and most frequently in the United States and Canada. We design and operate automations, AI agents and chatbots, CRM integrations, custom dashboards, websites and applications, and marketing campaigns.
This policy applies to personal information collected when you:
- visit or interact with our website at thelaywala.com;
- submit one of our lead forms on Meta platforms (Facebook and Instagram);
- contact us by email, web form, scheduled call, or messaging channel; or
- engage us as a client and receive our services.
It does not apply to the websites, products, or services of third parties, or to data we process solely on behalf of a client under that client's instructions (where the client is the controller of that data).
02 Key terms
To keep this policy clear, the following terms have these meanings:
- Personal information
- Any information that identifies, relates to, or can reasonably be linked to an identifiable individual — for example, a name, email address, or phone number.
- Processing
- Any operation performed on personal information, such as collecting, storing, using, sharing, or deleting it.
- Service provider / processor
- A third party that processes personal information on our behalf and under our instructions.
- Sensitive information
- Personal information that requires additional protection, such as financial account details or precise location. We avoid collecting sensitive information unless necessary.
03 Information we collect
We collect only the information we need for the purposes set out in this policy. The categories below reflect the personal information we may collect, depending on how you interact with us.
| Category | Examples | Why we collect it |
|---|---|---|
| Identifiers | Name, email address, phone number, company name | To identify you and respond to your inquiry |
| Inquiry & project details | Message content, requirements, goals, budget range you share | To prepare quotes and deliver our services |
| Lead form data | Information you enter into our Facebook / Instagram forms | To follow up on the request you submitted |
| Client account data | Business information and content you provide for a project | To deliver and support the services you engage us for |
| Communications | Emails, call notes, chat and message history | To manage our relationship and keep records |
| Technical & usage data | IP address, browser and device type, pages viewed, timestamps | To operate, secure, and improve our website |
| Marketing data | Your preferences and responses to our campaigns | To send relevant communications you have agreed to |
We do not knowingly collect special categories of data (such as health, race, or religious beliefs), and we ask that you not share such information with us unless it is strictly necessary for a project.
04 How we collect it
We obtain personal information from three sources:
- Directly from you — when you fill out a form, book a call, email us, or provide information during a project.
- Automatically — through cookies and similar technologies when you use our website (see Section 10).
- From third parties — such as Meta when you submit a lead form, and the service providers and platforms we use to run our business, which may share information about your interactions with us.
05 Meta lead forms (Facebook & Instagram)
How we handle data from our Facebook & Instagram lead ads
When you submit one of our lead forms ("Instant Forms") on Facebook or Instagram, Meta collects the information you enter and transmits it to us so we can follow up. The details we receive typically include your name, email address, phone number, and any answers you provide within the form.
We use this information solely to respond to your inquiry, discuss your needs, send the resource or quote you requested, and — where you have agreed — to send related updates. We do not pay Meta for this data beyond standard advertising, and we do not use it for unrelated purposes. You can opt out of marketing at any time (see Section 13).
Your use of Facebook and Instagram is also governed by Meta's Privacy Policy. We do not control how Meta collects or processes data on its own platforms. Once your submission reaches us, it is handled in accordance with this Privacy Policy.
06 Purposes & legal bases
We use personal information for the following purposes:
- Responding to you — to answer inquiries and provide quotes, proposals, and scopes of work.
- Providing services — to deliver, maintain, and support the services you engage us for.
- Relationship management — to communicate about your project, account, invoicing, and support.
- Marketing — to send promotional messages where you have consented, with the ability to opt out at any time.
- Improvement & analytics — to understand and improve our website and services.
- Security & fraud prevention — to detect, investigate, and prevent misuse and security incidents.
- Legal compliance — to meet our legal, regulatory, tax, and accounting obligations and to enforce our agreements.
Where the law requires a legal basis to process your information, we rely on one or more of the following: your consent; the performance of a contract with you; compliance with a legal obligation; or our legitimate interests in operating and improving our business, balanced against your rights. For individuals in Canada, we collect, use, and disclose personal information only for purposes a reasonable person would consider appropriate, and with your knowledge and consent except where the law permits otherwise.
08 Sale & sharing of personal information
We do not sell your personal information for money, and we do not share it for cross-context behavioral advertising in the way those terms are defined under U.S. state privacy laws. We do not exchange your personal information with third parties for their own independent marketing.
If we ever introduce practices that would constitute a "sale" or "share," we will update this policy and provide a clear opt-out mechanism beforehand.
09 International data transfers
Thelaywala operates from Pakistan and works with clients and service providers in the United States, Canada, and other countries. Your personal information may therefore be transferred to, stored in, and processed in Pakistan and other jurisdictions whose data protection laws may differ from those where you live.
Wherever your information is processed, we take reasonable steps — including contractual safeguards with our providers — to ensure it receives a level of protection consistent with this policy. By submitting your information to us, you acknowledge that it may be transferred and processed in these locations.
11 Data retention
We retain personal information only for as long as necessary to fulfil the purposes in this policy. In deciding how long to keep information, we consider its nature and sensitivity, the purposes for which we process it, applicable legal and accounting requirements, and the need to resolve disputes or enforce our agreements.
When information is no longer required, we securely delete or anonymize it. Where you ask us to delete your information, we will do so unless we are required or permitted by law to retain it.
12 Security
We maintain reasonable administrative, technical, and organizational measures designed to protect personal information against loss, misuse, and unauthorized access, disclosure, alteration, or destruction. These include access controls, encryption in transit where appropriate, and limiting access to those who need it.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities where required by applicable law.
13 Your privacy rights
Depending on where you live, you have rights over your personal information. To exercise any right, email us at mail@thelaywala.com with the subject line "Privacy Request." We will verify your identity, may ask for limited information to do so, and will respond within the timeframe required by applicable law. You may also use an authorized agent where the law allows. We will not discriminate against you for exercising your rights.
United States
California & other state laws
If you are a resident of California (CCPA/CPRA) or another U.S. state with comparable rights, you may request to:
- know the categories and specific pieces of personal information we have collected, and how we use and disclose it;
- delete personal information we hold about you;
- correct inaccurate personal information;
- opt out of any "sale" or "sharing" of personal information; and
- limit the use and disclosure of sensitive personal information.
As stated in Section 8, we do not sell or share your personal information. If we deny a request, you may appeal by replying to our response.
Canada
PIPEDA & provincial laws
If you are in Canada, you may:
- access the personal information we hold about you;
- request correction of inaccurate or incomplete information;
- withdraw consent to our use of your information, subject to legal or contractual limits; and
- raise a question or complaint about how we handle your information.
If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.
Marketing opt-out: unsubscribe using the link in any marketing email, or email mail@thelaywala.com. We will still send essential messages relating to a project or service you have engaged us for.
14 Automated processing & AI
As an AI automation studio, we use automated tools and AI systems to deliver our services and operate our business. Where we use AI to handle inquiries (for example, chatbots) or to process information, we apply reasonable oversight and do not use these tools to make decisions that produce legal or similarly significant effects about you without human involvement.
When we build AI systems for clients, we process data under that client's instructions and only as needed to deliver the agreed work. We do not use your personal information to train third-party AI models for our own unrelated purposes, and we configure our tools to limit such use where that option is available.
15 Children's privacy
Our website and services are intended for businesses and adults. We do not knowingly collect personal information from children under the age of 16. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
16 Third-party links
Our website and communications may contain links to third-party websites, platforms, and tools that we do not control. This policy does not apply to those services. We encourage you to review the privacy policy of any third party before providing your information to them.
17 Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will revise the "Last updated" date at the top of this page, and we will provide a more prominent notice where the changes are significant. Your continued use of our website or services after an update means you accept the revised policy.
18 Contact & complaints
If you have questions about this policy, wish to exercise a right, or want to make a complaint about how we handle your personal information, please reach out. We are the point of contact for privacy requests and read every message.