Legal
Privacy Policy
Last updated 20 August 2026
This policy explains how TrueSquare (“we”) handles personal data when you interact with an AI assistant we operate — on a website, on WhatsApp, or on another messaging surface — and when you use our operations console as a customer.
We act in two different roles, and your rights differ accordingly. When a business uses our platform to talk to its own customers, that business decides what is collected and why; we process the data on their instructions. When you deal with us directly, we decide.
What we collect
From a conversation with an assistant:
- The messages you send and the answers we return, kept as a transcript.
- On WhatsApp, your phone number and your WhatsApp profile name, because the messaging service provides them and the phone number is how a conversation is addressed.
- Details you volunteer that the operating business asked us to record — typically a name, phone number, email address, and what you are enquiring about.
- A pseudonymous identifier for your conversation. On a website this is tied to your browser session; on WhatsApp it is derived from your phone number by a one-way hash, so the stored identifier does not contain the number itself.
- Technical delivery records: whether a message was sent, delivered or read, and any error the messaging provider returned.
If you use our console as a customer, we also hold your email address, a password stored only as a salted hash, and a record of sign-ins and configuration changes you make.
Why we use it
- To answer your question and continue the conversation across messages.
- To pass an enquiry to the business you contacted, where that is the point of the conversation.
- To keep a governance record. Every AI answer that carries a business claim is logged with what it was based on, so the operating business can show afterwards why it said what it said. This record is central to the product and is not optional.
- To keep the service secure, prevent abuse, and meet legal obligations.
We do not sell personal data. We do not use the content of your conversations to train general-purpose AI models.
Remembering you between conversations
An assistant may retain a short profile — preferences and facts you have stated — so a later conversation does not start from nothing. This is off unless the operating business enables it, is stored separately from the transcript, and can be switched off or erased for an individual on request. Because a phone number is a durable identifier, this memory can persist across months on WhatsApp, which is why we treat it as something you can turn off.
Who we share it with
We share personal data only with the operating business you contacted, and with providers who process it for us:
- Meta Platforms — delivers WhatsApp messages and returns delivery receipts.
- OpenAI — generates answers and, where enabled, transcribes voice notes. Content sent for this purpose is not used to train their models.
- Cloud hosting and infrastructure providers — run our servers, databases and backups.
These providers operate outside your country in some cases, including the United States. Where that happens we rely on the provider’s contractual data-transfer terms.
How long we keep it
Conversations, enquiry records and governance logs are kept while the operating business’s workspace is active, and are deleted when it closes or earlier on that business’s instruction. Backups are retained on a rolling schedule and expire automatically. Remembered profile details can carry an explicit expiry.
Your choices
- Stop messages. Reply STOP on WhatsApp, or tell the assistant you do not want to be contacted. We record that against you and it applies across every channel we operate for that business, not only the one you said it on.
- Access a copy of what we hold about you.
- Correction of anything inaccurate.
- Erasure — see the limit described immediately below.
What erasure does, precisely
We would rather state this plainly than let a general promise mislead you. When you ask to be erased, we delete the profile and remembered details we hold about you, and we remove the identifiers that link you to a past conversation — your phone number and profile name are removed from our records and replaced with a marker, so nobody can look up the conversation by who you are, and a later message from you starts fresh.
We do not delete the transcript of the conversation itself. It remains as a record of what was said, no longer connected to you by name or number. It is retained because the operating business may need it as evidence of what its assistant told a customer. If you need the transcript removed as well, contact us and we will handle it with the operating business directly.
Security
Access credentials and integration secrets are encrypted at rest. Console access requires a password and supports two-factor authentication. Deletion of configuration is recorded rather than performed silently, so a change can be traced to a person. We do not currently hold any third-party security certification and do not claim one.
Children
Our services are provided to businesses and are not directed at children. We do not knowingly collect data from anyone under 16.
Changes
We will update this page when our handling changes, and revise the date at the top. Material changes affecting customers will be notified through the console.
Contact
For any request or question about this policy, or to exercise a right described above, write to privacy@truesquare.io. If you contacted a business through an assistant we operate, tell us which business, so we can route your request to the right place.