Privacy Notice

Information you provide

• Quote and contact requests: name, email address, optional phone and company, selected service, and the project details you submit.
• Accounts: name, email address, and a password stored by the service as a bcrypt password hash rather than readable password text.
• Project delivery: project titles, service requests, instructions, project messages, and file names, types, sizes, versions, and the files you upload or receive as deliverables.
• AI tools: prompts, conversation messages, and generated responses. Anonymous AI conversations are retained for up to 90 days and may be reviewed by authorized administrators.
• Search: search terms and result counts are recorded for search analytics for up to 90 days. A short recent-search list is stored in your browser’s local storage.
• Purchases: PayPal order and capture identifiers, selected plan, amount, currency, status, and related timestamps. PayPal handles checkout and payment credentials; this application does not intentionally store your card or PayPal password.

How we use information

• Respond to enquiries and provide requested consulting, training, tools, or other services.
• Create and secure accounts, administer access, and respond to support requests.
• Store project files privately, scan them for malware before making them available for download, exchange deliverables, and maintain project communication and activity history.
• Send text submitted to an AI tool to our AI service provider, currently Groq, to generate a response. Do not submit confidential client material, passwords, payment details, government identifiers, or sensitive personal information unless you have authority and have assessed the risks.
• After an administrator confirms that the client authorized the processing, send the extracted text of a malware-scanned project file (up to 10 MB) to Groq for an AI-generated draft summary, insights, and recommendations. An administrator must review the result before it is relied on or shared.
• Use PayPal to create and verify checkout orders and record completed payments.
• Maintain service security, diagnose failures, and meet applicable legal, accounting, and record-keeping obligations.

Service providers and international processing

Information is handled by service providers needed to operate the site. These include Groq for AI generation, Cloudflare Turnstile for bot verification on public forms, PayPal for checkout, AWS S3 for private project and temporary knowledge-file storage, AWS GuardDuty Malware Protection for file scanning when configured, and the website, API, and database hosting providers selected by the operator. Approved knowledge-file text and, following the documented administrator confirmation, extracted text from project files may be sent to Groq. Original knowledge files are removed from S3 after successful indexing; extracted knowledge text is retained in the application database until an administrator deletes the entry. Provider terms and privacy notices apply. Providers may process information in countries other than Qatar. TMG should confirm hosting regions, provider terms, and appropriate transfer safeguards before launch.

We do not sell personal information. We may disclose information where necessary to provide a requested service, protect rights and security, or comply with applicable law.

Retention and security

AI conversations, search queries, and rate-limit records are automatically deleted after 90 days, 90 days, and 24 hours respectively. AI knowledge text remains until an administrator deletes it. Project files and AI file-analysis reports remain with their project until removed by an authorized administrator; this workflow does not yet provide a project recycle bin. Website enquiries and account records follow operational and applicable legal/accounting requirements. Payment records may need to be retained for financial and legal records.

We use measures intended to protect information, including hashed account passwords and restricted administrative access. No internet transmission or storage system can be guaranteed completely secure.

Browser storage and third-party features

The sign-in token is stored in session storage in the browser and is removed when you sign out or the browser session ends. A signed, HTTP-only AI session cookie is used for AI session-level rate limiting. Project file upload and download use short-lived AWS S3 signed URLs; do not share those URLs. Cloudflare Turnstile protects public forms. The pricing page loads PayPal’s checkout software when configured; PayPal may use cookies or similar technologies under its own privacy practices.

Your choices and requests

Depending on applicable law, you may be able to request access to, correction of, or deletion of personal information, or raise an objection or complaint. To make a privacy request, use the contact form and identify it as a privacy request. We may need to verify your identity and may retain some records where the law permits or requires it.

Children

The website and business services are intended for businesses and adults. They are not designed for children, and we do not knowingly seek to collect children’s personal information.

Changes and contact

We may update this notice as the services or applicable requirements change. The latest version will be published on this page with its update date. For questions, contact us through the Contact page.