Privacy Notice

What this notice covers

This notice explains how Turwin Labs handles personal information when you visit turwin.ai, search the opportunity portfolio, use the written venture brief, buy an idea diagnostic or contact us about a build.

In this notice, “Turwin,” “we,” “us” and “our” mean Turwin Labs. “You” means the person using the site or submitting a venture brief.

What we collect

Information you write

The venture brief asks about the business problem, the result you want, who can approve the work, your investment range, timing and contact email. If you request a full venture brief, we also ask what interests you about the opportunity and what you intend to do with it.

The diagnostic worksheet stays in your browser until you expressly accept the intake notice and choose to continue. Turwin then saves your high-level idea, intended user, claimed difference, decision question, optional public supporting link and selected opportunity in its restricted cloud database. Do not use this worksheet for trade secrets, source code, private files or other sensitive material.

Turwin creates a random reference for the saved worksheet and adds only that reference to the Polar checkout link. Your worksheet answers are not sent to Polar. When Polar confirms a paid or refunded order, Turwin uses the reference to associate that order with the correct worksheet. The reference is an association token, not proof of identity; Turwin uses the payer and order contact supplied by Polar for fulfillment and support.

Do not reuse or share an old checkout link. If payment arrives after its worksheet has expired or without a valid worksheet reference, Turwin records the paid order but cannot associate it automatically. Turwin may contact the payer using the order record and ask for a new intake before fulfillment.

Do not submit passwords, payment-card numbers, medical records, customer personal information, government identification numbers or material you are not allowed to share. Submitting the form does not create a confidential relationship or a client engagement.

Technical information

Our hosting and security providers may receive routine request information such as your IP address, browser type, device type, requested page, request time, error data and security signals. Turwin does not add an IP-derived identifier to the saved venture brief.

Consent information

We record whether you accepted the current Privacy Notice and Terms, the version you accepted and the time of acceptance. We use that record to show what you agreed to when you submitted the brief.

Response and scheduling information

If Turwin writes back, we record the commercial decision, the delivery status of the message and any answer you send through a private response link. If you choose a decision call, we record the booking time, changes or cancellation, the email attached to the invitation and the private meeting link.

How the written venture brief works

When you send an answer, the site sends the conversation in that session to Google's AI service. The service uses the earlier answers to write the next question or prepare a structured summary. Turwin does not ask the service to make a legal, medical, credit or investment decision.

When the brief is complete, Turwin saves the structured summary, your contact email, the venture title, the type of request, the consent record and ordinary service timestamps in a Google-hosted cloud database. Turwin does not save the full conversation in the completed lead record.

The site also sends a limited copy of that structured summary to Turwin's restricted business communications workspace so authorized team members can review the request and record the next commercial step. The full conversation is not sent to that workspace, and submitting a brief does not create a client channel or client engagement.

After an authorized team member records a decision, a transactional email provider sends Turwin's response. A private scheduling page is offered only when Turwin advances the request. Google provides the scheduling and calendar services used to record a booking, reschedule or cancellation. Turwin reads only the calendar event information needed to connect that decision call to the correct private brief.

Why we need it

We use the information to prepare the venture brief or paid diagnostic, decide whether Turwin is a suitable build partner, answer your request, process and support a purchase, protect the service, investigate errors, prevent abuse, keep the site working and meet legal obligations.

We do not sell personal information. We do not rent it to data brokers. We do not use the venture brief for targeted advertising. We do not use it to make decisions about employment, credit, housing, insurance, healthcare or access to public services.

We do not publish, sell, license, reuse or add your submitted diagnostic idea to Turwin's public opportunity library without your written permission. We do not use submitted diagnostic material to train Turwin-owned models.

If we want to use the information for a materially different purpose, we will explain that purpose before the new use begins and ask for consent where the law requires it.

Who helps us process it

Polar processes the diagnostic payment and provides Turwin with the order and contact information needed to fulfill and support it. The checkout receives an opaque worksheet reference but not your worksheet answers. Turwin does not receive your full payment-card number.

Google provides the hosting, cloud computing, database and AI services used by the site. Google processes information under its service terms, privacy terms and data-processing terms. These services may use systems and approved subprocessors in more than one country.

A business communications provider delivers the limited venture summary to authorized Turwin personnel and records the team's review decision. It processes that copy under Turwin's account settings and its service and data-processing terms.

A transactional email provider sends Turwin's direct response and reports ordinary delivery events such as sent, delivered, delayed, bounced or complained. Google provides the scheduling and calendar services used for decision calls. These providers receive only the information needed to deliver the message or maintain the booking.

We may also use professional advisers, security providers or contractors who need limited access to perform work for Turwin. We require service providers to use the information only for the work we ask them to do and to protect it in a manner appropriate to the information.

We may disclose information when the law requires it, when necessary to protect a person from serious harm, to investigate fraud or misuse, or as part of a merger, financing, sale or reorganization. If ownership changes, this notice continues to govern the information until a replacement notice takes effect.

How long we keep your information

Turwin keeps a completed venture brief for 180 days from submission so the team can review it and respond. The record carries an expiration date, and a scheduled service removes expired records. We may keep a shorter record when you ask us to delete it or a longer record when a signed contract, legal hold or law requires that.

The restricted internal alert copy follows Turwin's business communications retention controls. It may become part of an active client record if the request leads to a paid engagement; otherwise, Turwin removes it when it is no longer needed to review or answer the request. Provider backups and legal requirements may delay final removal for a limited period.

Response, delivery and decision-call records follow the same 180-day expiration attached to the completed brief unless the request becomes part of an active client record. Short-lived security receipts used to reject duplicate provider events are kept for no more than 30 days.

Messages are processed during the session so Google's AI service can continue the exchange. The production lead record keeps the final structured brief rather than the full conversation. Google may keep limited service logs under its own terms for security, abuse detection, reliability and legal compliance.

Backups and provider recovery systems may retain deleted information for a limited period before final removal. We do not restore a deleted brief to ordinary use.

Saved diagnostic worksheets carry a 180-day expiration date. A worksheet matched to a paid order becomes part of the paid client record; Turwin keeps the order, completed assessment and material needed to support them for the period required for service support, accounting, dispute handling and legal obligations, then deletes or de-identifies material it no longer needs. You may ask Turwin to delete optional source material sooner, subject to those obligations.

Your choices

You may choose not to submit a venture brief. You can still read the public portfolio without giving Turwin your name or email address.

You may ask us to tell you whether we hold a completed brief connected to your email, give you a copy, correct it or delete it. We may need to confirm your identity before acting. We will answer within the time required by the law that applies to you.

People in some places may also have rights to restrict or object to processing, receive portable data, withdraw consent, appeal a refusal or complain to a regulator. Withdrawing consent does not make earlier lawful processing unlawful.

Send a privacy request to privacy@turwin.ai. We will explain any appeal process that the law applying to your request requires.

International use

Turwin works from the United States and serves people in more than one country. Your information may be processed in the United States or another country where our providers operate. Data-protection rules differ between countries.

Where European, United Kingdom or Swiss law applies, Turwin will use the legal basis, controller information and transfer mechanism required by that law.

Security

We use access controls, encrypted network connections, service logging and provider security measures designed to protect the information. The cloud database does not allow public browser access to saved venture briefs or diagnostic worksheets. Only authorized server-side services and approved Turwin personnel may access them.

Do not send trade secrets or sensitive diagnostic files through the public worksheet. Ask for an approved private channel and, when needed, a mutual confidentiality agreement before transfer.

No service can promise perfect security. If a breach creates a legal duty to notify you, Turwin will give the required notice and explain the steps you can take.

Adults only

The site and AI-assisted venture brief are for business users who are at least 18 years old. They are not directed to children. Do not submit information about a child.

If this notice changes

We will change this notice when the product or our legal duties change. The revised date will appear at the top. If a change materially affects information already collected, we will provide additional notice or seek consent where the law requires it.

Contact

For questions, access requests, corrections or deletion requests, email privacy@turwin.ai.