Privacy Policy

1. Who we are

Techo (“Techo”, “we”, “us”) is a personal AI manager available at techo.ai and app.techo.ai and through the Techo bots in Telegram and WhatsApp. The service is operated by Techo ai, LLC, 131 Continental Dr, Suite 305, Newark, DE 19713, United States, which is the controller of the personal data described in this policy.

Privacy questions and requests: services@techo.ai.

2. The short version

• To do a task, Techo has to read it, remember what matters, and talk to the outside world for you — by searching, opening websites, messaging, emailing and calling. Most of what is described below follows from that.
• Your chats are processed by AI model providers (mainly OpenAI) and by the search, browser, telephony and messaging services the agent uses. They are listed in Service providers.
• Anything that leaves the app on your behalf needs your approval. You can choose to always allow non-financial kinds of actions; payments are approved one at a time, every time.
• We do not sell your personal data and do not use it for advertising. We use product analytics, including session recordings of the web app — see Analytics and cookies.
• You can delete chats, memory, documents and connected accounts at any time, and delete your whole account in Settings → Delete account.

3. Data we collect about you

Account and sign-in

• When you sign in with Google, Apple or GitHub (through Google Firebase Authentication), or with a one-time link sent to your email, we receive your email address, your name as the provider shares it, and the provider’s account identifier. We store a hashed version of your session token, never the token itself.
• When you use Techo through our Telegram bot or Telegram Mini App, we receive your Telegram user ID, name and language. Through our WhatsApp bot, we receive your WhatsApp phone number, profile name and language. Starting a conversation with either bot creates a Techo account.
• Profile details you choose to add: display name, contact phone, contact email, full name, address and date of birth — used when the agent books or fills in forms for you.

Your chats and tasks

• Messages you send, the agent’s replies, the results it produces (places, prices, bookings, call summaries, reports), and the step-by-step activity of each task, including the text of your unsent draft.
• Files and photos you attach. They are kept in private storage and served only to your account. When a task needs an outside service to see an image (for example a reverse image search), we create an unguessable link that lets that service fetch it. If you share a chat by link, anyone with the link can view it.
• Voice: dictation and voice messages are sent to OpenAI to be transcribed. We keep the transcript, not the audio.
• A record of each request to an AI model — the full prompt, including the parts of your conversation it contains, and the model’s answer — for quality, debugging, abuse prevention and billing. These records are kept with your account even after you delete the chat they came from, and are removed when you delete your account.
• Usage and cost records: which searches, calls, model requests and other paid operations a task made and what each cost. Your balance is charged from them.

Location

• If you allow location access (only while the app is in use), the coordinates of your device are saved with the messages you send, together with the country, city and time zone we derive from them, and the latest location is kept on the chat. We use them to find what is near you and to work in your local time. We do not track your location in the background.
• We may estimate your country or city from your IP address (using a local MaxMind database); the IP address itself is not stored for this purpose.

Memory and preferences

• Facts the agent learns and you can read and edit in Memory: preferences about food, hotels, places, travel and similar. They may include health-related details you choose to share, such as allergies, dietary needs or accessibility needs; we use them only to carry out your tasks.
• Rules you set for how the assistant behaves, notification preferences, kinds of actions you have chosen to always allow, and the voice you choose for calls.
• People you ask Techo to contact, saved as contacts with a name, phone number and relationship.

Documents and travel details

• Identity and travel documents you add (passport, ID card, driver’s licence, visa, insurance and others): the fields on them (such as name, number, date of birth, nationality and expiry) and, if you upload one, the scan. A scan you upload is sent to our AI model provider to read the fields from it.
• Passenger details for bookings — yours and those of travel companions you enter — including names, date of birth, gender, nationality and document number.
• Documents are stored in private storage, available only to your account and to the tasks that need them, and can be deleted by you at any time.

Payment cards and payments

• Your Techo subscription is paid on Stripe’s own checkout page. Stripe collects and stores your card; we receive and keep your Stripe customer and subscription identifiers, payment status and the history of credits and charges on your balance. Stripe receives your email address and account ID.
• Cards the agent pays with (where available in the Techo mobile app) are stored only on your device, in its secure keychain behind biometric protection. Our servers keep only a label, the card brand, the last four digits, the expiry date and the name of the device. When you approve a payment, your device sends the full card details (and any one-time bank code) to our servers, where they are held in memory for no more than a few minutes, read once, and entered into the merchant’s checkout page in a browser we operate, with session recording turned off. We never write full card numbers or security codes to our database.

Your contacts

• If you allow the mobile app to access your phone’s contacts, then when you ask Techo to reach a person, the names and phone numbers in your address book are sent to our servers and to our AI model provider so the agent can find the right person. This happens only for that request, but the request is included in the AI request records described above.
• If you connect a messenger account, its address book is used the same way. For WhatsApp, the address book is stored by our messaging service, encrypted (AES-256-GCM).

Messenger accounts you connect

• You can connect your own WhatsApp, Telegram, Instagram, MAX or Airbnb account so the agent can message people from it. We store the session that keeps the account signed in (keys, cookies and device identifiers), encrypted with AES-256-GCM.
• To connect Instagram you enter your username and password. The password is used once to sign in and is not stored or logged. Instagram sign-in and traffic go through a residential proxy provider. Verification codes for Telegram, Airbnb and others are handled the same way.
• We keep only the conversations the agent itself started or was asked to handle: incoming messages from anyone else are discarded by our messaging service without being stored. For the conversations we keep, we store the other person’s handle (phone number or username), name, the full text of messages in both directions, voice messages as transcripts, and photos as attachments.
• Disconnecting an account signs it out and deletes its session; the conversations the agent already had stay in your chats until you delete them.

Browser sessions

• When the agent signs in to websites for you, the browser profile with its cookies and site logins is saved so it does not have to sign in again. Profiles are stored encrypted (AES-256-GCM) in our own storage, or with our browser provider Browserbase.

Email

• Every account gets its own Techo email addresses: one for writing to Techo, and one the agent uses to write to businesses. We store the emails sent and received through them (addresses, subject, text and attachments), and the senders you trust to write to Techo for you.
• Techo does not connect to your Gmail, Outlook or calendar accounts. If you subscribe to the Techo calendar feed, anyone who has its private link can read the events in it.

Notifications

• Push notifications are delivered by OneSignal, which receives your account ID and the text of the notification. Notifications can also reach you by email or in Telegram, as you choose.

4. Data about other people

Doing tasks for you means dealing with other people — businesses, hosts, drivers, and people you know — on your behalf. We process their data as part of providing the service to you.

• Phone calls. The agent calls the numbers you ask it to, or that it finds for your task, and speaks on your behalf, giving the name you confirmed. If asked whether it is an AI, it says so. Calls are recorded: we store the audio of both sides of the call, a transcript of what each side said, and a summary, and show the transcript in your chat. If someone the agent called calls back within seven days, the agent answers and that call is recorded too.
• Messages and email. When the agent writes to someone, we store their name, handle or address and the conversation, and show their replies in your chat.
• Data you give us about others — contacts, travel companions, people mentioned in your requests. Please share only what you are entitled to share and what the task needs.

If you are not a Techo user and want to know what we hold about you, or want it deleted, write to services@techo.ai.

5. How Techo acts on your behalf

• Actions that reach the outside world — sending a message, placing a call, making or changing a booking, acting on a website, paying — are shown to you first with what the agent intends to do and a risk label, and wait for your approval. An approval request expires after 24 hours.
• For non-financial actions you may choose Always allow for that kind of action (for example, sending messages or placing calls). From then on, actions of that kind go ahead without asking each time, until you revoke the choice in Settings → Permissions. Payments, purchases and cancellations of paid bookings cannot be always allowed: each one needs its own approval, for one payment of at most the amount you approved.
• When you connect your own messenger account, the agent writes from it in your name. When you have not connected one, the agent may write from a Techo-operated account; it then introduces itself as your personal assistant, using the name you gave it.

See the Terms of Service for your responsibilities when the agent acts for you.

6. Why we use your data, and our legal bases

• To provide the service you asked for — running tasks, contacting people, bookings, payments, memory, notifications, billing. Legal basis: performance of our contract with you.
• To keep Techo secure and working — preventing abuse and fraud, diagnosing errors, measuring costs. Legal basis: our legitimate interests in running a safe, reliable service.
• To improve Techo — product analytics and reviewing how tasks went. Legal basis: our legitimate interests, or your consent where the law requires it.
• Sensitive data you choose to give us, such as health-related preferences or identity documents. Legal basis: your explicit consent, which you can withdraw by deleting it.
• Data about the people the agent contacts. Legal basis: our and your legitimate interests in carrying out the tasks you set.
• To meet legal obligations — tax, accounting and responding to lawful requests.

We do not sell personal data, share it for cross-context behavioural advertising, or use it to make decisions that have legal or similarly significant effects on you without human involvement.

7. Service providers we share data with

We share data with the providers below only as far as each needs it to do its part of the service. Which provider handles a given task depends on what the task needs and where you are.

Businesses and people the agent contacts, merchants you pay, and the platforms where you hold accounts receive what the task requires and process it under their own privacy policies. We may also disclose data when required by law, to protect the rights and safety of users or others, or to a successor in a merger or acquisition, which would remain bound by this policy.

8. Analytics and cookies

• We use PostHog (hosted in the United States) for product analytics on techo.ai and in the app. It records pages viewed and automatically captures clicks and interactions. In the web app it also records sessions so we can replay how the interface was used; text you type into fields is masked in those recordings. When you sign in, your analytics profile is linked to your account ID, email address and name.
• PostHog stores an identifier in a cookie on the techo.ai domain, shared by the website and the app, so a visit to the website and a later sign-up are linked. Analytics requests go through our own address (techo.ai/relay) and are forwarded to PostHog with your IP address, which PostHog uses to estimate your location.
• We use Sentry (EU) to report errors. Error reports carry your account ID, not your email or name, and no session replays.
• Your theme choice and similar settings are kept in your browser’s local storage. Sign-in uses storage that is strictly necessary for the service.

How to opt out. You can block or delete cookies for techo.ai in your browser settings, which stops visits from being linked to you. You can also ask us at services@techo.ai to stop analytics for your account and delete the analytics data linked to it. We do not use advertising cookies or share data with ad networks.

9. How long we keep data

We keep your data for as long as your account exists, unless you delete it sooner. We do not currently delete content automatically after a fixed period. In particular:

• Chats are kept until you delete them. Deleting a chat removes its messages, attachments, and the plans, reminders, schedules and bookings made in it.
• Kept after a chat is deleted, until you delete your account: call recordings and transcripts, AI request records, usage and cost records, and documents you saved from a chat.
• Short-lived data: card details for a payment are held for a few minutes and read once; payment browser sessions last up to 45 minutes; voice messages waiting to be processed by our messaging service are kept up to 24 hours, and copies of sent messages up to 48 hours; files produced in code sandboxes are deleted after 7 days.
• Billing records (payments, credits, charges and refunds) may be kept after your account is deleted for as long as tax and accounting law requires.
• After you delete your account we keep only a one-way fingerprint (a hash) of each email address you signed in with, not the address itself, so that a new account on the same address does not get the free trial again.

10. Your controls and rights

In the app

• Delete any chat.
• Read, edit and delete what Techo remembers about you, your contacts and your behaviour rules.
• Delete documents, saved cards and trusted email senders; turn off the calendar feed.
• Disconnect any messenger account you connected.
• Edit your profile details.
• Delete your account in Settings → Delete account. This deletes your account and the data linked to it, including your sign-in record at Firebase Authentication, except billing records we must keep by law and a one-way fingerprint of your email address that stops the free trial being given twice.

Your rights

Depending on where you live — including under the EU and UK GDPR and California law (CCPA/CPRA) — you have the right to access the personal data we hold about you, to correct it, to delete it, to receive it in a portable format, to restrict or object to its processing (including processing based on legitimate interests and analytics), and to withdraw consent at any time. California residents also have the right to know what categories of personal information we collect and disclose and not to be discriminated against for exercising their rights; we do not sell or share personal information as those terms are defined there.

To exercise any right, including a copy of your data, write to services@techo.ai from the email linked to your account. We will answer within one month (45 days for California requests) and may need to confirm your identity first. You can also complain to your local data protection authority.

11. International transfers

Our servers and file storage are in the European Union (Amsterdam). Several providers listed above — including OpenAI, PostHog, Twilio, Stripe, Browser Use, Browserbase, OneSignal and Google — process data in the United States or other countries outside the European Economic Area, and calls to Russia and Kazakhstan are routed through carriers in those countries. Where data leaves the EEA or UK, we rely on adequacy decisions or the European Commission’s Standard Contractual Clauses (and the UK addendum), together with the providers’ own safeguards. You can ask us for a copy of the relevant safeguards at services@techo.ai.

12. Security

We protect your data with measures that include:

• encryption in transit (HTTPS/TLS) for all traffic to and from Techo;
• AES-256-GCM encryption for messenger sessions, messenger address books and saved browser profiles;
• session tokens and sign-in links stored only as hashes;
• full card numbers never stored on our servers;
• private file storage served only through access-checked requests;
• access to production systems limited to the people who need it.

No system is perfectly secure. If a breach affects your personal data, we will notify you and the authorities as the law requires.

13. Children

Techo is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us personal data, contact services@techo.ai and we will delete it.

14. Changes to this policy

We update this policy when the product changes what it collects, who processes it or how long it is kept. The date at the top shows the latest version. If a change is significant, we will tell you in the app or by email before it takes effect.

15. Contact

Techo ai, LLC, 131 Continental Dr, Suite 305, Newark, DE 19713, United States. Privacy requests and general support: services@techo.ai.