Legal
Privacy Policy
Last updated: November 2026
Information We Collect
We collect information you provide directly (your name, email address, and organisation details when you register) and information generated through your use of TrueLinksAI, including project data, documents you upload, photos you capture for site analysis, AI interaction logs, and basic device and diagnostic information. We do not sell personal data to third parties.
How We Use Your Information
We use your information to operate and improve TrueLinksAI, deliver AI-assisted construction and tendering intelligence, send service communications, and meet our legal obligations. AI models process your data only as directed by the actions you take in your account.
Device Permissions
On mobile, the app requests permissions only when needed for a feature you use: Camera, to capture site photos for AI analysis (the “Eye” feature); Photo Library, to attach existing images to site reports; Face ID / biometrics, to unlock your account on-device (biometric data never leaves your device); Notifications, to alert you about project activity and AI results; and Microphone, reserved for future voice-note features. You can revoke any permission at any time in your device settings.
Data Storage and Security
Data is stored on Google Cloud Platform infrastructure in the Middle East (me-central1, Doha) or US regions depending on your account plan. We apply encryption in transit and at rest, role-based access control, and audit logging for all data access. On mobile, authentication tokens are held in your device’s secure, hardware-backed storage.
Documents and AI Data
Documents you upload are processed by our backend AI pipeline. Document content may be stored as vector embeddings to enable retrieval-augmented generation (RAG). Raw files are stored in Google Cloud Storage and are accessible only to your organisation. To answer you, the content you submit, such as messages and document text, is sent to our AI providers (Google Gemini and OpenAI). We send only what a feature needs, and we do not use your content to train third-party models.
Third-Party Services
TrueLinksAI relies on Google Gemini and OpenAI to power its AI agents, Sign in with Apple and Google for authentication, the Apple App Store and Google Play for mobile billing, and Google Cloud for hosting. These providers process data under their own privacy policies. What is sent to AI providers is set out in section 05.
Accounts You Connect
You can connect your own Google or Microsoft account, and your organisation can connect its WhatsApp Business number. We ask only for the access the feature you choose needs, and use it only for that feature. Sending from Gmail or Outlook sends only the community emails you write and confirm, and cannot read your mailbox. Reading Gmail or Outlook happens only when you ask the assistant a question with email switched on: the few emails found are used for that one answer, and we keep no copy and never log what they say. Calendar sync adds your TrueLinksAI meetings to a calendar in your account and, if you choose, shows events from the calendars you pick; those events are held for about a minute and not stored. From Google Drive or OneDrive we read only the files you pick and copy them into Files, where they are kept like any upload; nothing in your drive can be changed. For WhatsApp, we keep what your organisation sent, each message’s delivery status and opt-outs, never what people write back, and Meta bills the organisation directly. Sign-in tokens are encrypted at rest with AES-256-GCM. You can disconnect at any time in TrueLinksAI, which hands the access back to the provider and wipes your tokens, or remove our access in your Google or Microsoft account settings.
Google User Data
Emails, calendar events and files from connected accounts are sent to our AI providers only to provide the features you use. We do not use them to develop, improve or train general-purpose AI or machine-learning models, we never sell them or use them for advertising, and our staff do not read them unless you ask us to for support, it is needed for security, or the law requires it. TrueLinksAI’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
Subscriptions and Payments
Paid plans purchased on mobile are processed by the Apple App Store or Google Play as in-app purchases, under their billing rules; web and organisation plans are billed directly. We do not collect or store your payment card details. Store-managed purchases are handled by Apple or Google.
Push Notifications
With your permission, we send push notifications about project activity, task updates, and AI results. You can disable them at any time in your device settings or in the app.
Data Retention
Your data is retained for the duration of your subscription plus a 90-day grace period, after which it is permanently deleted. You may request earlier deletion at any time. See our Account & Data Deletion page.
International Transfers
Your data may be processed in Qatar, the United States, or other regions where we or our service providers operate. Where data crosses borders, we rely on appropriate safeguards and require providers to protect it to a comparable standard.
Children’s Privacy
TrueLinksAI is a professional tool intended for business use and is not directed to anyone under 16. We do not knowingly collect personal data from children.
Your Rights and Account Deletion
Depending on your jurisdiction, you may have rights to access, correct, delete, or port your personal data, and to object to or restrict certain processing. You can delete your account and data directly in the app (Settings → Account → Delete account) or follow our Account & Data Deletion page. To exercise any right, contact contact@truelinks.ai.
Contact
Questions or requests about your data? Email contact@truelinks.ai and we respond within 24 hours. TrueLinksAI, Doha, Qatar.