Legal
Privacy Policy
Last updated: June 2026
Information We Collect
We collect information you provide directly (your name, email address, and organisation details when you register) and information generated through your use of TrueLinks, including project data, documents you upload, photos you capture for site analysis, AI interaction logs, and basic device and diagnostic information. We do not sell personal data to third parties.
How We Use Your Information
We use your information to operate and improve TrueLinks, deliver AI-assisted construction and tendering intelligence, send service communications, and meet our legal obligations. AI models process your data only as directed by the actions you take in your account.
Device Permissions
On mobile, the app requests permissions only when needed for a feature you use: Camera, to capture site photos for AI analysis (the “Eye” feature); Photo Library, to attach existing images to site reports; Face ID / biometrics, to unlock your account on-device (biometric data never leaves your device); Notifications, to alert you about project activity and AI results; and Microphone, reserved for future voice-note features. You can revoke any permission at any time in your device settings.
Data Storage and Security
Data is stored on Google Cloud Platform infrastructure in the Middle East (me-central1, Doha) or US regions depending on your account plan. We apply encryption in transit and at rest, role-based access control, and audit logging for all data access. On mobile, authentication tokens are held in your device’s secure, hardware-backed storage.
Documents and AI Data
Documents you upload are processed by our backend AI pipeline. Document content may be stored as vector embeddings to enable retrieval-augmented generation (RAG). Raw files are stored in Google Cloud Storage and are accessible only to your organisation. Calls to our AI providers (Google Gemini and OpenAI) do not include identifiable personal data in prompts.
Third-Party Services
TrueLinks relies on Google Gemini and OpenAI to power its AI agents, Sign in with Apple and Google for authentication, the Apple App Store and Google Play for mobile billing, and Google Cloud for hosting. These providers process data under their own privacy policies. We do not share identifiable personal data in AI prompts.
Subscriptions and Payments
Paid plans purchased on mobile are processed by the Apple App Store or Google Play as in-app purchases, under their billing rules; web and enterprise plans are billed directly. We do not collect or store your payment card details. Store-managed purchases are handled by Apple or Google.
Push Notifications
With your permission, we send push notifications about project activity, task updates, and AI results. You can disable them at any time in your device settings or in the app.
Data Retention
Your data is retained for the duration of your subscription plus a 90-day grace period, after which it is permanently deleted. You may request earlier deletion at any time. See our Account & Data Deletion page.
International Transfers
Your data may be processed in Qatar, the United States, or other regions where we or our service providers operate. Where data crosses borders, we rely on appropriate safeguards and require providers to protect it to a comparable standard.
Children’s Privacy
TrueLinks is a professional tool intended for business use and is not directed to anyone under 16. We do not knowingly collect personal data from children.
Your Rights and Account Deletion
Depending on your jurisdiction, you may have rights to access, correct, delete, or port your personal data, and to object to or restrict certain processing. You can delete your account and data directly in the app (Settings → Account → Delete account) or follow our Account & Data Deletion page. To exercise any right, contact contact@truelinks.ai.
Contact
Questions or requests about your data? Email contact@truelinks.ai and we respond within 24 hours. TrueLinks, Doha, Qatar.