Privacy Policy

1. Overview & Core Philosophy

At TAR, we believe your business records, customer conversations, patient notes, orders, and financial ledgers belong exclusively to you. Unlike traditional cloud software platforms that centralize and monetize customer data, TAR is built around a local-first architectural paradigm.

This Privacy Policy explains how information is handled when you use the TAR mobile applications, client software, credit wallets, and cloud relay services (collectively, the "Services").

2. What Stays on Your Device

The vast majority of your data never touches our cloud servers and remains stored locally on your physical hardware:

• Workspace Databases: Products, customer contacts, order histories, sales transactions, inventory balances, and custom business tables.
• Documents & Knowledge: Procedure manuals, Markdown specifications, catalogs, and operational guides.
• Message History: Full customer chat transcripts, voice note recordings, and interaction logs.
• Encryption: Local databases are encrypted on-device using hardware-backed cryptographic keys.

3. Information We Collect & Process

To provide identity, billing, and connectivity services, we collect minimal operational information:

• Account & Identity: Permanent Google User ID, verified email address, and device registration identifiers.
• Billing & Credits: Transaction records, credit pack purchases, wallet balance history, and payment gateway receipts.
• Relay Telemetry: Essential network diagnostics, operational error codes, and API rate-limiting metadata required to maintain service availability.

4. AI Operations & Zero Model Training

When you invoke AI capabilities in your Workflows (such as automated WhatsApp customer replies via Gemma, audio transcription via Whisper, or invoice scanning via DeepSeek-OCR):

• Transient Processing Only: Specific prompt texts, audio snippets, or document images are transmitted securely to upstream model inference APIs solely to fulfill the requested task and return the result to your Workspace.
• Zero Training Invariant: Your business records, customer messages, and prompts are never used to train, fine-tune, or improve public or proprietary foundation models.
• No Persistent Third-Party Storage: Inference endpoints process your requests ephemerally and do not retain customer content for secondary purposes.

5. Encrypted Sync & Cloud Relays

If you enable optional multi-device cloud backup:

• End-to-Transit Security: Data replicated across your authorized phones, tablets, and store registers is transmitted using TLS 1.3 encryption.
• Working-Set Sync: Only your active, authorized working set is synchronized, minimizing cloud exposure.
• No Unrestricted Credentials: Mobile client devices sync only their authorized Personal DB working sets and never receive unrestricted master credentials.

6. Zero Monetization or Selling of Data

We operate on a transparent computational utility model. We do not sell, rent, license, monetize, or trade your personal data, customer records, or communication telemetry to data brokers, third-party advertisers, or surveillance intermediaries.

7. Data Portability & Erasure

Complete Portability: Because TAR structures records in open, documented formats (SQLite, OKF Markdown, standard JSON), you can export your entire database and files at any moment with 1 click.

Immediate Erasure: When you delete a Workspace, local records are immediately wiped from your device. If cloud backup was enabled, all associated cloud backups and relay events are permanently purged from server storage.

8. Security & Cryptographic Protection

TAR enforces strict architectural safeguards:

• Gateway Boundary: All state mutations must pass strict Gateway verification (checking role, membership, schema, version, and idempotency key).
• Device Revocation: Revoked devices lose decryption access on reconnection, and logging out immediately flushes local cryptographic keys and caches.

9. Your Privacy Rights & Choices

Depending on your jurisdiction (such as GDPR, CCPA, or DPDP Act), you have the right to access, export, correct, or delete your personal data. Because your data is stored locally on your device, you have immediate, direct control over your records without needing to submit administrative data subject requests.

10. Policy Updates & Contact

We may update this Privacy Policy periodically. When updates occur, we will update the "Last Updated" date at the top of this document. Material updates will be communicated via in-app notification.

If you have questions or inquiries regarding our privacy architecture, contact our data protection team at privacy@tarfw.com.