1. What this notice covers
This notice explains how Turwin Labs handles personal information when you visit turwin.ai, search the opportunity portfolio, use the written venture brief or contact us about a build.
In this notice, “Turwin,” “we,” “us” and “our” mean Turwin Labs. “You” means the person using the site or submitting a venture brief.
2. What we collect
Information you write
The venture brief asks about the business problem, the result you want, who can approve the work, your investment range, timing and contact email. If you request a full venture brief, we also ask what interests you about the opportunity and what you intend to do with it.
Do not submit passwords, payment-card numbers, medical records, customer personal information, government identification numbers or material you are not allowed to share. Submitting the form does not create a confidential relationship or a client engagement.
Technical information
Our hosting and security providers may receive routine request information such as your IP address, browser type, device type, requested page, request time, error data and security signals. Turwin does not add an IP-derived identifier to the saved venture brief.
Consent information
We record whether you accepted the current Privacy Notice and Terms, the version you accepted and the time of acceptance. We use that record to show what you agreed to when you submitted the brief.
Response and scheduling information
If Turwin writes back, we record the commercial decision, the delivery status of the message and any answer you send through a private response link. If you choose a decision call, we record the booking time, changes or cancellation, the email attached to the invitation and the private meeting link.
3. How the written venture brief works
When you send an answer, the site sends the conversation in that session to Google's AI service. The service uses the earlier answers to write the next question or prepare a structured summary. Turwin does not ask the service to make a legal, medical, credit or investment decision.
When the brief is complete, Turwin saves the structured summary, your contact email, the venture title, the type of request, the consent record and ordinary service timestamps in a Google-hosted cloud database. Turwin does not save the full conversation in the completed lead record.
The site also sends a limited copy of that structured summary to Turwin's restricted business communications workspace so authorized team members can review the request and record the next commercial step. The full conversation is not sent to that workspace, and submitting a brief does not create a client channel or client engagement.
After an authorized team member records a decision, a transactional email provider sends Turwin's response. A private scheduling page is offered only when Turwin advances the request. Google provides the scheduling and calendar services used to record a booking, reschedule or cancellation. Turwin reads only the calendar event information needed to connect that decision call to the correct private brief.
4. Why we need it
We use the information to prepare the venture brief, decide whether Turwin is a suitable build partner, answer your request, protect the service, investigate errors, prevent abuse, keep the site working and meet legal obligations.
We do not sell personal information. We do not rent it to data brokers. We do not use the venture brief for targeted advertising. We do not use it to make decisions about employment, credit, housing, insurance, healthcare or access to public services.
If we want to use the information for a materially different purpose, we will explain that purpose before the new use begins and ask for consent where the law requires it.
5. Who helps us process it
Google provides the hosting, cloud computing, database and AI services used by the site. Google processes information under its service terms, privacy terms and data-processing terms. These services may use systems and approved subprocessors in more than one country.
A business communications provider delivers the limited venture summary to authorized Turwin personnel and records the team's review decision. It processes that copy under Turwin's account settings and its service and data-processing terms.
A transactional email provider sends Turwin's direct response and reports ordinary delivery events such as sent, delivered, delayed, bounced or complained. Google provides the scheduling and calendar services used for decision calls. These providers receive only the information needed to deliver the message or maintain the booking.
We may also use professional advisers, security providers or contractors who need limited access to perform work for Turwin. We require service providers to use the information only for the work we ask them to do and to protect it in a manner appropriate to the information.
We may disclose information when the law requires it, when necessary to protect a person from serious harm, to investigate fraud or misuse, or as part of a merger, financing, sale or reorganization. If ownership changes, this notice continues to govern the information until a replacement notice takes effect.
6. How long we keep your information
Turwin keeps a completed venture brief for 180 days from submission so the team can review it and respond. The record carries an expiration date, and a scheduled service removes expired records. We may keep a shorter record when you ask us to delete it or a longer record when a signed contract, legal hold or law requires that.
The restricted internal alert copy follows Turwin's business communications retention controls. It may become part of an active client record if the request leads to a paid engagement; otherwise, Turwin removes it when it is no longer needed to review or answer the request. Provider backups and legal requirements may delay final removal for a limited period.
Response, delivery and decision-call records follow the same 180-day expiration attached to the completed brief unless the request becomes part of an active client record. Short-lived security receipts used to reject duplicate provider events are kept for no more than 30 days.
Messages are processed during the session so Google's AI service can continue the exchange. The production lead record keeps the final structured brief rather than the full conversation. Google may keep limited service logs under its own terms for security, abuse detection, reliability and legal compliance.
Backups and provider recovery systems may retain deleted information for a limited period before final removal. We do not restore a deleted brief to ordinary use.
7. Your choices
You may choose not to submit a venture brief. You can still read the public portfolio without giving Turwin your name or email address.
You may ask us to tell you whether we hold a completed brief connected to your email, give you a copy, correct it or delete it. We may need to confirm your identity before acting. We will answer within the time required by the law that applies to you.
People in some places may also have rights to restrict or object to processing, receive portable data, withdraw consent, appeal a refusal or complain to a regulator. Withdrawing consent does not make earlier lawful processing unlawful.
Send a privacy request to privacy@turwin.ai. We will explain any appeal process that the law applying to your request requires.
8. International use
Turwin works from the United States and serves people in more than one country. Your information may be processed in the United States or another country where our providers operate. Data-protection rules differ between countries.
Where European, United Kingdom or Swiss law applies, Turwin will use the legal basis, controller information and transfer mechanism required by that law.
9. Security
We use access controls, encrypted network connections, service logging and provider security measures designed to protect the information. The cloud database does not allow public browser access to saved venture briefs. Only authorized server-side services and approved Turwin personnel may access them.
No service can promise perfect security. If a breach creates a legal duty to notify you, Turwin will give the required notice and explain the steps you can take.
10. Adults only
The site and AI-assisted venture brief are for business users who are at least 18 years old. They are not directed to children. Do not submit information about a child.
11. If this notice changes
We will change this notice when the product or our legal duties change. The revised date will appear at the top. If a change materially affects information already collected, we will provide additional notice or seek consent where the law requires it.
12. Contact
For questions, access requests, corrections or deletion requests, email privacy@turwin.ai.