Privacy Policy
Last updated: September 30, 2026
1. Who is responsible for your data
TrueGuard Labs (a brand operating under KOBY SOFT, Girne, Northern Cyprus) is the controller of the personal data described in this policy. Contact: info@trueguardlabs.com. [To be confirmed: full legal entity name and whether an EU representative under GDPR Article 27 is needed.]
2. What this policy covers
This policy covers personal data collected through this website (trueguardlabs.com) and through your contact with us by form, email, phone or WhatsApp. Information exchanged while we carry out an independent AI verification for a client is governed by the agreement with that client. [To be confirmed: wording for client engagement data.]
3. What data we collect
- Contact form and messages: first and last name, company name, email address, website address, the link to your AI assistant (optional), your message, and a phone number if you give one.
- Technical data: like any website, our hosting provider automatically records technical data such as your IP address, browser type and the time of your visit in server logs, for security and reliable operation.
We do not ask for special categories of data (such as health data). Please do not include them in your message.
4. Why we use it, and on what legal basis (GDPR Article 6)
- To answer your enquiry and discuss our services. Basis: taking steps at your request before a contract (Art. 6(1)(b)), and our legitimate interest in replying to business enquiries (Art. 6(1)(f)). You also tick a consent box when you send the form.
- To keep a record of our communication. Basis: our legitimate interest in documenting business correspondence (Art. 6(1)(f)).
- To keep the website secure and working. Basis: our legitimate interest (Art. 6(1)(f)).
Where we rely on consent, you can withdraw it at any time; this does not affect processing that already took place.
5. Who receives your data
We do not sell your data or use it for advertising. We share it only with service providers that process it on our behalf and under our instructions, to the extent needed to run this website and our email:
- Website hosting: Vercel Inc.
- Domain name system and network protection: Cloudflare, Inc.
- Email: Migadu (email hosting).
- If you contact us on WhatsApp, Meta’s WhatsApp service processes that conversation under its own terms and privacy policy.
We may also disclose data where the law requires it. [To be confirmed: final list of providers.]
6. Transfers outside the EU/EEA
Some providers, such as Vercel and Cloudflare, may process data in countries outside the EU/EEA, including the United States. Where this happens we rely on the safeguards allowed by GDPR Chapter V, such as an adequacy decision or Standard Contractual Clauses. [To be confirmed with each provider’s current data processing terms.] Our own operations are based in Northern Cyprus.
7. How long we keep it
Enquiries that do not lead to a contract are kept for [24 months — proposed, to be confirmed] after our last contact and are then deleted or anonymised. If you become a client, we keep the data for the duration of the contract and afterwards for as long as the law requires. Server logs are kept by our hosting provider for a short period.
8. Your rights under the GDPR
You have the right to: access your data; have it corrected; have it erased; restrict its use; receive it in a portable format; object to processing based on our legitimate interests; and withdraw consent at any time. To exercise a right, write to info@trueguardlabs.com. We will respond within one month.
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work.
9. Visitors in Türkiye
If you are in Türkiye, this policy also serves as our notice under Turkey’s Law No. 6698 on the Protection of Personal Data (“KVKK”). Your rights under Article 11 of KVKK are substantially the same as those listed above, and you can exercise them through the same email address.
10. Cookies
This website does not currently use cookies, analytics or advertising trackers. If that changes, this policy will be updated first and, where required, we will ask for your consent.
11. Automated decisions
We do not make decisions about you based solely on automated processing.
12. Security
We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS) and access limited to the people who need it.
13. Changes
We may update this policy from time to time. The current version is always published on this page.