Privacy Policy

TDGDC (“TDGDC”, “we”, “us”) runs the website at www.tdgdc.com and the services offered through it, including the Home Compliance Center. We decide how and why the personal information described in this policy is used, which makes us responsible for it.

You can reach us about anything in this policy at enquiries@tdgdc.com. Our office addresses are listed on the contact page.

This policy should be read with our Terms of Service.

• We collect only what we need to answer enquiries and to run the Home Compliance Center for you.
• Signing in with Google gives us your name, email address and profile photo. We never get access to your Google Drive, Gmail, calendar or contacts.
• Your records and documents are private to your household, stored encrypted with Supabase.
• Documents are sent to OpenAI only to read the details off them and file them in your household's records, which you can review and change. OpenAI does not train its models on that data.
• We do not sell personal information, show advertising or use tracking cookies.
• You can delete records at any time, and we delete your whole account on request within 30 days.

Enquiries

When you use an enquiry form, we ask for your first and last name, email address, company (optional) and your message, along with the service you are asking about. The form does not send these details to our servers. It opens a pre-written email in your own mail app, addressed to enquiries@tdgdc.com. We receive what you choose to send, and we keep that email so we can reply and follow up. The same applies if you email us directly.

Bookings

When you book a workspace or a course place, the details you enter (name, email address, phone number, company, notes, date and time slots, and a booking reference) are stored in your own browser's local storage on the device you used. They are not sent to our servers by the booking form. You can remove them at any time by clearing this site's data in your browser. If you then email or call us about the booking, we receive what you share with us.

Technical information

Like any website, our hosting provider processes the technical information needed to deliver pages to you, such as your IP address, browser type, the page requested and the time of the request. This is used to keep the site running, secure and free of abuse. We do not use it to build a profile of you.

The Home Compliance Center uses Google sign-in. When you continue with Google, you choose which Google account to use, and Google shares the following with us:

• your name
• your email address
• your profile photo

We use these only to create your account, recognise you when you sign in again, show you who is signed in, and reply if you contact us about your account. Our authentication provider also records the technical details needed to keep you signed in, such as your account identifier and when you last signed in.

We do not request access to your Google Drive, Gmail, Google Calendar, Google Contacts or any other Google data, and we never see your Google password. You can remove the Home Compliance Center's access at any time from your Google Account's third-party connections. Removing access there does not delete the data already in your account; see retention and deletion for how to do that.

The Home Compliance Center exists to hold the information you give it. Depending on what you choose to track, that can include:

• your household's name and reminder settings
• properties: names, addresses, type, occupancy, year built, size, purchase date and notes
• vehicles: name, year, make, model, licence plate, VIN, mileage and service dates
• family members: names, relationships, dates of birth, email addresses and notes
• compliance records such as insurance policies, licences, registrations, passports and warranties, with providers, reference numbers, dates and amounts
• maintenance tasks, service providers and their contact details, and household inventory with purchase prices, values and serial numbers
• documents you upload (PDFs and photos), such as policies, certificates and receipts
• a log of changes made in your account, so you can see what changed and when

We use this information only to provide the Home Compliance Center to you: to store and show your records, work out what is valid, expiring or missing, calculate your compliance score, and show deadlines, notifications and reports.

If you add details about other people, such as family members or service providers, please make sure you have the right to share them with us for this purpose.

Your records are kept in a database, and your documents in private file storage, both run by our provider Supabase. Data is encrypted in transit and at rest.

Access is limited to your account's household. Every record and every file belongs to a household, and database access rules check that the signed-in person is a member of that household before any row or file can be read, changed or deleted. Documents are never public: when you open or download one, the app creates a signed link that expires after a short time.

TDGDC staff do not look at your records or documents, except with your permission (for example, when you ask us for help with a specific problem), where it is necessary for security, such as investigating abuse, or where the law requires it.

When you upload a document to be read, the Home Compliance Center sends the file to OpenAI's API. It is sent solely so the details on it, such as the provider, reference number, dates and amount, can be extracted and the document filed under the right record in your household. Everything it read and where it was filed is shown to you; anything it is not sure about is held for your review instead of being filed, and you can correct or delete any record at any time.

• OpenAI does not use data sent through its API to train its models.
• We send these requests with storage disabled, so the request and its result are not saved in OpenAI's systems for later retrieval.
• OpenAI may retain API data for up to 30 days to monitor for abuse and misuse, after which it is deleted unless the law requires otherwise.
• Along with the document and its file name, we send the names and addresses of your properties, the names and plates of your vehicles and the names of your family members, so the details can be matched to the right one. Nothing else from your account is sent, including the information we receive from Google sign-in.

You can read more about how OpenAI handles API data on OpenAI's website. If you prefer not to use AI reading, you can enter record details by hand instead.

We use a small number of providers to run our services. Each one processes personal information only on our instructions and only for the purpose listed:

• Supabase — authentication, database and document storage for the Home Compliance Center.
• Vercel — hosting and delivery of the website and the Home Compliance Center.
• OpenAI — reading uploaded documents and filing them in your records.
• Google — sign-in to the Home Compliance Center.

We do not sell personal information, share it with advertisers or data brokers, or use it for advertising. We may disclose information if the law requires it, to protect the rights, safety or security of our users, the public or TDGDC, or as part of a merger or acquisition, in which case this policy would continue to apply to it.

We use essential cookies only. When you sign in to the Home Compliance Center, session cookies keep you signed in and protect your account, and they are removed when you sign out. One more cookie is set while a Google sign-in is in progress and removed when sign-in finishes; if you abandon a sign-in part-way, it stays in your browser until your next sign-in or until you clear this site's cookies. We do not set cookies for visitors who are not signing in.

We do not use advertising, analytics or tracking cookies, and we do not track you across other websites. Booking details are kept in your browser's local storage, as described above. Google sets its own cookies on its sign-in pages under Google's privacy policy.

TDGDC's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, for information we receive from Google:

• we use it only to provide and improve the user-facing sign-in and account features described in this policy;
• we transfer it to others only as needed to provide those features, to comply with the law, or as part of a merger or acquisition with your information protected under this policy;
• we do not sell it, and we do not use or transfer it for advertising, including personalised or retargeted advertising, or to determine creditworthiness or for lending;
• we do not use it to develop, improve or train artificial intelligence or machine learning models;
• we do not allow humans to read it unless you have given us permission for specific information, it is necessary for security purposes such as investigating abuse, or it is necessary to comply with applicable law.

We keep Home Compliance Center data for as long as your account is active, so your records are there when you need them.

• You can edit or delete individual properties, vehicles, family members, records, tasks, inventory items and documents in the app at any time. Deleting a document removes the file from storage.
• To delete your account and all of its data, email enquiries@tdgdc.com from the email address you sign in with. We will delete your account, your household, every record and every uploaded document within 30 days, and confirm when it is done. Copies in our providers' routine encrypted backups expire within the same period.
• Enquiry emails are kept for as long as we need them to respond and for ordinary business records. You can ask us to delete them.
• Booking details stay in your browser until you clear them.

We may keep a limited amount of information for longer where the law requires it, or to resolve a dispute or prevent abuse.

We protect your information with measures that include:

• encryption in transit (HTTPS) and at rest;
• database rules that keep each household's records and documents separate from every other household's;
• private document storage with no public addresses: a document opens only for a signed-in member of its household, through a one-minute link tied to that person's session;
• sign-in through Google, so we never store a password for you;
• access to production systems limited to the people who need it.

No system can be guaranteed completely secure. If we become aware of a breach that affects your personal information, we will notify you and the relevant authorities where the law requires it. If you find a security problem, please tell us at enquiries@tdgdc.com.

Our services are not directed to children under 16, and we do not knowingly collect personal information from them. Home Compliance Center accounts are for people aged 16 and over. If you believe a child under 16 has given us personal information, contact us and we will delete it.

Parents and guardians may add details about their children, such as a passport expiry date, as part of their own household's records. That information is controlled by the account holder and protected under this policy.

TDGDC has offices in more than one country, and our service providers may process data in the United States and other countries. That can mean your information is processed outside the country where you live, where data protection laws may differ. When we transfer personal information internationally, we rely on safeguards required by applicable law, such as our providers' data processing agreements and standard contractual clauses.

Where data protection laws ask us to name a legal basis, we rely on:

• providing the service you asked for, for your account, records, documents and document reading;
• our legitimate interests, for replying to enquiries and keeping our services secure;
• your consent, where we ask for it, which you can withdraw at any time;
• legal obligations, where the law requires us to keep or disclose information.

Depending on where you live, you may have the right to:

• access the personal information we hold about you;
• correct it, which you can do directly in the app for anything you have entered;
• delete it, in the app or by asking us to delete your account;
• export it, by downloading your records as CSV files from the Reports screen in the Home Compliance Center, or by asking us for a copy;
• object to or ask us to restrict certain uses, and withdraw consent you have given;
• complain to your local data protection authority.

To use any of these rights, email enquiries@tdgdc.com. We may need to confirm your identity, usually by asking you to write from the email address on your account. We will respond within 30 days and will not treat you differently for exercising your rights.

We will update this policy when our services or the law change. The date at the top of this page shows when it last changed. If we make a material change to how we use your information, we will tell signed-in users in the Home Compliance Center or by email before the change takes effect.

Questions, requests or concerns about privacy can be sent to enquiries@tdgdc.com. You can also write to us at any of the offices listed on our contact page. We reply within one working day.