1. Overview

Taqql, Inc. (“Taqql,” “we,” “us,” or “our”) operates the taqql.io website, the Taqql web application, the Taqql mobile applications (iOS and Android), and the Taqql MCP (Model Context Protocol) API. This Privacy Policy describes how we collect, use, store, disclose, and protect personal information from users of these services (“you”).

By using our services you agree to the practices described in this policy.

2. Information we collect

2.1 Information you provide

• Account information: name, email address, employer or organization name, job title, and password credentials.
• Field capture data: timesheet entries (hours, dates, project codes), expense records, mileage, progress updates, daily report narratives, voice transcripts, photos and attachments.
• Contact and waitlist submissions: name, work email, and company submitted through our marketing website.

2.2 Information collected automatically

• Usage data: pages visited, features used, timestamps, and error logs.
• Device and browser data: IP address, device type, operating system, browser type and version, and mobile device identifiers.
• Location data: GPS coordinates stamped on field entries (timesheets, expenses, receiving records, safety incidents) when you grant location permission in the mobile app.
• Voice recordings: audio captured during Q voice commands is processed in-session for transcription; raw audio is not stored after the transaction is confirmed.
• Cookies and similar technologies: see our Cookie Policy.

2.3 Information from integrations

When you connect Taqql to third-party services (such as Digits or ADP), we receive the data necessary to fulfill the integration as authorized by you. We do not store third-party financial account credentials.

3. How we use information

We use collected information to:

• Provide, operate, and maintain the Taqql platform.
• Process and fulfill field-capture transactions (timesheets, expenses, material requests, invoices).
• Deliver AI-assisted features (voice transcription, OCR, Q responses) via Amazon Bedrock.
• Send operational communications (approval notifications, sync alerts, account emails).
• Respond to support requests and Beta waitlist inquiries.
• Analyze usage to improve the product.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell personal information to third parties.

4. AI processing

Taqql uses Amazon Bedrock (Claude model family) for on-platform AI features including voice transcription, material intake OCR, invoice processing, and Q conversational responses. Your data is processed in-session for these purposes. Taqql has configured its Bedrock usage so that your data is not used to train Amazon foundation models. See our Subprocessors list for details.

5. Data sharing and disclosure

We share personal information only in the following circumstances:

• Within your organization: data is shared with other authorized members of your Taqql organization, subject to role-based access controls.
• Service providers (subprocessors): we share data with third-party vendors as necessary to operate the platform. See our Subprocessors list.
• Legal requirements: when required by applicable law, court order, or government authority.
• Business transfers: in connection with a merger, acquisition, or sale of assets, with appropriate confidentiality obligations.
• With your consent: in any other circumstances with your explicit consent.

6. Data retention

We retain personal information for as long as necessary to provide the services and fulfill the purposes described in this policy. Typical retention schedules:

• Transactional records (timesheets, expenses, POs, invoices): retained for the project life plus the organization’s configured retention period (default 7 years).
• Safety and exposure records: 30 years minimum, consistent with OSHA and state requirements.
• Marketing waitlist data: retained until you unsubscribe or request deletion.
• Audit logs: retained for a minimum of 7 years.

7. Data security

We implement technical and organizational measures to protect your data, including encryption at rest and in transit, role-based and row-level access controls, private network architecture (RDS in private subnets, no public endpoint), and regular security assessments. See our Security & Trust page for details.

No transmission over the internet is 100% secure. We cannot guarantee absolute security.

8. Your rights

Depending on your location and applicable law, you may have rights to:

• Access, correct, or delete personal data we hold about you.
• Object to or restrict certain processing.
• Data portability.
• Withdraw consent where processing is based on consent.

To exercise these rights, contact us at privacy@taqql.io.

9. Cookies

See our Cookie Policy for details.

10. Children’s privacy

The Taqql platform is not directed to individuals under the age of 16. We do not knowingly collect personal information from children.

11. Changes to this policy

We may update this policy from time to time. We will notify you of material changes by posting the updated policy on our website and, where appropriate, by email. Your continued use of the services after the effective date constitutes acceptance.

12. Contact

Taqql, Inc.
privacy@taqql.io
legal@taqql.io