Privacy Policy

What We Mean by Personal Data

When we say "personal data," we mean any information that identifies you or could reasonably be used to identify you — your name, phone number, email, or device information. We treat all personal data with the same high standard of care, regardless of where you live.

What We Collect

We strive to collect only the data we need. Here's what that means in practice:

Information You Give Us

• Account information — name, email address, and phone number when you sign up
• Conversations — messages you exchange with your AI Concierge, via SMS or web
• Configuration data — documents and materials you upload to personalize your Concierge
• Payment information — processed securely through third-party providers; we never store card numbers

Information We Collect Automatically

• Device type, browser, and operating system
• IP address and approximate location (city/region level only)
• How you use the Service — pages visited, features used, and when

How We Use Your Data

We use your data for clear, specific purposes:

• Deliver your Concierge — power conversations, maintain context, and send SMS replies
• Run your account — process payments, manage your subscription, and provide support
• Improve the Service — understand how features are used so we can make them better
• Keep things secure — detect and prevent fraud, abuse, and unauthorized access
• Meet legal obligations — comply with applicable laws and regulations

That's it. We don't use your data for purposes you wouldn't expect, and we don't build advertising profiles from your conversations.

SMS Messaging & Your Phone Number

When you use SMS to talk to your AI Concierge, here's exactly what happens with your data:

• Your phone number is used only to deliver and receive Concierge messages
• Message content is stored securely to maintain your conversation history
• Messages are transmitted via Twilio, our SMS provider, who is contractually bound to protect your data
• You can opt out of SMS at any time by replying STOP — or simply telling the Concierge you want to stop
• See our SMS Opt-In & Terms for complete messaging disclosure

Who We Share Data With

We share your data only when necessary to deliver the Service, and only with these categories:

• Infrastructure providers — hosting (Vercel, Railway), database (Supabase), and SMS delivery (Twilio). These providers process data on our behalf and are contractually prohibited from using it for any other purpose.
• AI model providers — your message content is processed by AI providers (such as Google Gemini or Anthropic) to generate Concierge responses. We require that these providers do not use your data for model training.
• Legal requirements — when we are required to by law, court order, or governmental regulation.
• Business transfers — in connection with a merger, acquisition, or sale of assets. If this happens, we will notify you before your data is transferred to a new entity.

We never sell your personal information. We never share it with data brokers. We never use it for advertising.

Data Security

We believe that great privacy rests on great security. We protect your data with encryption in transit (TLS) and at rest, secure authentication, access controls, and regular security reviews. We keep our dependencies updated and follow security best practices for the platforms we build on. While no system is perfectly secure, we are committed to protecting your data with vigilance and care.

How Long We Keep Your Data

We retain your data only for as long as necessary — while your account is active and for a reasonable period afterward. Conversation history is kept to maintain your Concierge's context. When you delete your account or request data deletion, we remove your personal data promptly, except where we are legally required to retain it (such as for tax or compliance purposes). When retention is required, we keep data for the shortest period permitted by law.

Your Privacy Rights

We respect your ability to know, access, correct, and delete your personal data. These rights apply to everyone, regardless of where you live:

• Access — see what personal data we hold about you
• Correction — fix inaccurate or incomplete data
• Deletion — request removal of your data from our systems
• Portability — export your data in a usable format
• Opt out of SMS — stop receiving messages at any time
• Withdraw consent — change your mind about any processing you previously agreed to

To exercise any of these rights, email support@truesignal.ai. We will respond within 7 days. You will never be treated differently or receive a lesser degree of service for exercising your privacy rights.

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected, the right to request deletion, and the right to opt out of the "sale" of personal information. We do not sell your personal information as defined by the CCPA. We also do not "share" your personal data as that term is defined under California law.

Children

Our Service is designed for adults 18 and older. We do not knowingly collect personal data from children. If we learn that we have collected data from someone under 18, we will delete it as soon as possible. If you believe a child has provided us with personal information, please contact us immediately.

Changes to This Policy

When we make material changes to this Privacy Policy, we will post a notice on this page at least 7 days in advance and update the "Last updated" date. If we have your contact information on file, we will notify you directly. Your continued use of the Service after changes constitutes acceptance of the updated policy.

Questions

We take your privacy questions seriously. If you have concerns or want to exercise your rights, reach out — a real person will respond:

• Email: support@truesignal.ai
• Web: www.truesignal.ai