Legal

Privacy Policy

Effective Date: December 30, 2025

T-REX AI OS ("T-REX," "we," "us," or "our") respects the privacy of its users and is committed to protecting personal and organizational data entrusted to the platform. This Privacy Policy explains how information is collected, used, stored, and protected when you access or use the T-REX AI OS platform.

1. Information We Collect

We collect only the information necessary to operate a secure, auditable, and compliant operational system.

1.1 Account & Identity Information

Name
Email address
Role and company affiliation
Authentication credentials (managed via secure identity providers)

1.2 Operational Data

Contacts, deals, estimates, work orders, and tasks entered by users
Uploaded documents (e.g., bid documents, PDFs, compliance records)
System-generated artifacts such as PDFs and audit logs

1.3 Technical & Usage Data

IP address
Browser and device metadata
Session identifiers
Audit and access logs

T-REX does not collect consumer behavioral tracking data, sell personal data, or perform advertising profiling.

2. How We Use Information

Information is used solely to:

Provide and operate the T-REX AI OS platform
Authenticate users and enforce role-based access
Generate estimates, work orders, and compliance artifacts
Maintain immutable audit and activity records
Deliver system emails and notifications
Comply with legal and regulatory obligations

We do not use customer data to train public AI models or for unrelated commercial purposes.

3. Data Storage & Security

All data is stored using industry-standard security controls, including:

Encrypted storage for documents and records
Server-side access enforcement
Company-level data isolation
Time-limited, signed URLs for file access
Immutable storage for audit-critical artifacts
No files exposed through public or guessable URLs

4. Data Retention

Audit logs are retained indefinitely for accountability
Approved estimates and work orders are retained as immutable records
Archived records preserve full historical context
Deleted users retain attribution in historical logs

Retention policies are designed to support regulatory, contractual, and audit requirements.

5. Data Sharing

T-REX does not sell or rent customer data. Data may be shared only:

With authorized users inside the same company
With service providers strictly necessary to operate the platform (e.g., email delivery, storage)
When required by law or legal process

6. User Rights

Depending on jurisdiction, users may have rights to:

Access their personal information
Request corrections
Request deletion where legally permissible

Requests may be limited where data must be retained for compliance or audit integrity.

7. Changes to This Policy

This Privacy Policy may be updated periodically. Material changes will be communicated through the platform.

8. Contact

For privacy inquiries, contact privacy@trexaios.com (or your designated legal contact).