Who we are
Titan Business OS (“Titan”) is operated by Titan Build System (“we”, “us”). We act as the data controller for personal data we collect from account holders and visitors to our marketing site. If you are an end user of a customer’s Titan workspace, that customer is the controller of your personal data and we act as their processor.
What personal data we collect
- Account data: name, email address, hashed password, profile photo (if provided).
- Business profile data: your business name, logo, branding, industry, contact details you choose to store.
- Content data: customers, estimates, invoices, projects, daily reports, and other business records you enter into Titan.
- Communications: support messages, feedback you submit, and email preferences.
- Usage and telemetry: pages visited, features used, device type, browser, IP address, approximate location derived from IP, and AI request metadata (tokens used, estimated cost).
- Authentication data: when you sign in with Google, we receive your Google account email and profile as permitted by that provider.
Why we use it
- To provide, secure, and improve the Titan service (contract performance).
- To authenticate users, prevent fraud and abuse, and detect unusual AI or billing activity (legitimate interests).
- To send transactional email such as receipts, invitations, password resets, and dunning notices (contract performance).
- To communicate product updates and educational content you can opt out of at any time (legitimate interests / consent where required).
- To comply with legal, tax, and accounting obligations (legal obligation).
Who we share it with
- Paddle — our Merchant of Record for payments, subscription management, tax compliance, and invoicing. Paddle receives your billing name, email, billing address, and payment method details. Paddle’s privacy notice: paddle.com/legal/privacy.
- Infrastructure and platform providers — hosting, database, authentication, email delivery, AI model inference, and analytics providers acting as our processors under written agreements.
- Professional advisers — legal, accounting, and tax advisers where necessary and in confidence.
- Authorities — where required by law, court order, or to protect our rights or the safety of users.
We do not sell personal data and we do not use your business content to train third-party AI foundation models.
International transfers
Titan is hosted in the United States and may be processed by service providers in the US and other countries. Where personal data is transferred outside the UK or EEA, we rely on appropriate safeguards including the European Commission’s Standard Contractual Clauses and the UK IDTA where applicable.
Retention
- Active account and business data: kept for as long as your account is active.
- Cancelled or refunded accounts: workspaces retained for 60 days to allow reactivation, then deleted or anonymised.
- Financial records (invoices, receipts): retained for the period required by tax and accounting law (typically 7 years).
- Backups: rolling backups are retained for up to 35 days.
Your rights
Depending on where you live, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate personal data.
- Delete your personal data (subject to legal exceptions).
- Restrict or object to certain processing.
- Port your data to another service.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, email privacy@titanbuildsystem.com. We respond within one month.
Security
We use appropriate technical and organisational measures to protect your personal data, including encryption in transit, encryption at rest for the database and backups, least-privilege access controls, row-level security on customer data, audit logging of privileged operations, and regular reviews.
Cookies
We use essential cookies to keep you signed in and to remember which workspace you have selected. We do not currently use third-party advertising cookies. We may use privacy-respecting analytics to understand aggregate usage of the service; if analytics cookies are introduced, we will update this notice and provide a way to opt out.
Changes
If we make material changes to this notice, we will notify you by email or in-app notice.