TRIWAZ

PRIVACY POLICY

Last Updated: June 4, 2026

Triwaz ("we," "us," "our") operates an artificial intelligence aggregation platform designed for AI collaboration and analysis (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you access or use the Service, and describes your privacy rights.

We are committed to protecting your privacy. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not access or use the Service.

1. ABOUT THIS POLICY AND CONTROLLER IDENTITY

1.1 Scope
This Privacy Policy applies where Triwaz acts as a data controller — meaning when you use our website and consumer-facing debate analysis services. If you are an end user of a commercial customer who has integrated Triwaz's API (where Triwaz acts as a data processor), the privacy policy of that commercial customer shall govern the processing of your data; this Policy does not apply in those circumstances.

1.2 Triwaz as Controller
For the purposes of this Privacy Policy, Triwaz is the data controller of your personal data. Our contact details are set out in Section 11 below.

2. PERSONAL DATA WE COLLECT

We collect the following categories of personal data:

2.1 Information You Provide Directly

  • Account & Contact Data: When you register, we collect identifiers including your name, email address, account credentials, and age verification representation (we do not independently verify age, consistent with our Terms of Service).
  • Payment Data: When you purchase TRI credits, our Merchant of Record Creem collects and processes your payment details (credit/debit card, billing address). Triwaz does not directly store full payment card information.
  • Inputs (Prompts) & Outputs: You interact with our Service by submitting debate topics, arguments, and positions ("Inputs"), which generate analysis and structured responses ("Outputs") based on your Inputs. Please do not include any personal, confidential, or sensitive information (e.g., ID numbers, financial data) in your Inputs. To optimize platform performance, we utilize semantic caching technology. Your non-personal debate topics and collaborative analysis results may be de-identified and stored as references to accelerate future identical or highly similar queries.
  • Voice Inputs: If you use the voice input feature, we collect the audio you record solely for the purpose of real-time transcription into text. The audio is transmitted to our transcription provider (Groq) for processing and is not retained by Triwaz after transcription is complete. Groq's processing of the audio is governed by its own privacy policy. We do not use voice audio for identification and do not create or store voiceprints.
  • Feedback: When you rate or provide feedback on outputs, we store the associated conversation and your feedback data (e.g., ratings, comments).
  • Communications: If you contact us (e.g., for support, legal notices, or data requests), we collect your name, email, and the content of your correspondence.

2.2 Information Collected Automatically

  • Usage & Technical Data: When you access the Service, we automatically collect information sent by your browser or device, including your IP address, browser type, language preference, device information, operating system, referring/exit pages, clickstream data, and the date/time of your visit.
  • Cookies, Advertising, and Similar Technologies: We use cookies and similar tracking technologies to maintain session state, remember preferences, analyze usage trends, and administer the Service. To provide the option of earning TRI credits by viewing advertisements, we integrate third-party advertising networks such as Google AdSense, which may use cookies and tracking technologies to serve personalized or non-personalized ads. You can control cookie settings through your browser.

2.3 Data from Third-Party Model Providers
When you submit Inputs, we transmit those Inputs to the third-party AI model providers you select or that we route to (e.g., OpenAI, xAI, Google, Groq). We receive the Outputs from those providers. Triwaz's underlying model providers do not use your Inputs or Outputs to train or improve their consumer models through Triwaz's API, unless otherwise disclosed. However, their own privacy policies apply to data they process as independent controllers.

3. HOW WE USE YOUR DATA

We process your data only for the purposes described below and in accordance with applicable law:

  • Service Provision: To operate, maintain, and provide the AI collaboration Service, including routing Inputs to model providers and returning Outputs. (Performance of contract; legitimate interest.)
  • TRI Processing: To manage your virtual credit balance and execute debate-related debits per our Terms. (Performance of contract.)
  • Account Administration: To register, authenticate, and secure your account, and to communicate important service updates. (Performance of contract.)
  • Platform Improvement: To analyze aggregated, de-identified usage patterns to improve platform performance, model routing, and output quality. De-identified usage data may be used to generate aggregate analytics and study platform behavior; this data is not associated with any individual account. Final conclusions are compiled directly from the structured outputs returned by the models through an automated program function; this function does not retain or cross-reference your personal data across sessions. (Legitimate interest; consent where required.)
  • Safety & Fraud Prevention: To detect, prevent, and investigate fraud, abuse, unauthorized scraping, and violations of our Acceptable Use Policy. (Legitimate interest; legal obligation.)
  • Marketing (with consent): To send you information about Triwaz services or promotions. We will obtain your consent where required by law. You may opt out at any time. (Consent.)
  • Legal Compliance: To comply with applicable laws, regulations, court orders, and government requests. (Legal obligation.)

We do not sell your personal data, and we do not use your Inputs or Outputs to train third-party advertising models.

4. HOW WE DISCLOSE YOUR DATA

We may disclose your data in the following limited circumstances:

  • To AI Model Providers (Sub-Processors): We transmit your Inputs to the selected third-party AI model providers (e.g., OpenAI, xAI, Google, Groq) to generate Outputs. These providers process data on our instructions and are bound by data processing agreements.
  • To Service Providers: We engage third-party vendors for hosting, database, analytics, rate limiting, payment processing (Creem), advertising (Google AdSense), and customer support. These providers process data only per our instructions and under contractual confidentiality obligations.
  • Legal & Safety Disclosures: We may disclose data if required by law (e.g., valid subpoena, court order, government request) or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Triwaz, our users, or the public.
  • Business Transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred, subject to the same protections as this Privacy Policy.
  • With Your Consent: We may disclose your data for any other purpose with your explicit consent.

5. THIRD-PARTY AI PROVIDERS AND EXTERNAL LINKS

This Privacy Policy does not govern the privacy practices of third-party model providers when they act as independent controllers. We recommend you review their privacy policies. Third-party model providers currently integrated into our platform include:

  • OpenAI (ChatGPT) — https://openai.com/policies/privacy-policy
  • Google (Gemini) — https://policies.google.com/privacy
  • xAI (Grok) — https://x.ai/legal/privacy-policy
  • Groq — https://groq.com/privacy-policy

6. AI-SPECIFIC DISCLOSURES

  • Automated Processing: Our Service uses AI models to analyze arguments and generate structured outputs. This constitutes automated processing. You have the right to access meaningful information about the logic involved in such automated processing.
  • Output Accuracy: As stated in our Terms of Service, AI models can make mistakes or produce hallucinations. Users assume full responsibility for verification prior to reliance.
  • Biometric Information: Triwaz does not collect, process, or store biometric data (e.g., voiceprints, facial geometry) for the purpose of identifying individuals. Voice audio submitted through the voice input feature is used solely for transcription, as described in Section 2.1.
  • Training on User Data: Triwaz does not use your Inputs or Outputs to train AI models unless you explicitly opt in. The final conclusions are compiled from the models' structured outputs by an automated program function, which does not log, learn from, or retain user inputs across different tasks.

7. AGE RESTRICTIONS AND CHILDREN'S PRIVACY

Consistent with our Terms of Service, you must be at least 13 years old (or the minimum age required in your country) to use the Service. If you are under 18, we require parental or legal guardian permission.

We do not knowingly collect personal data from children under 13. If we become aware that we have inadvertently collected data from a child under 13 without verifiable parental consent, we will promptly delete it. Parents or guardians should contact us immediately at hello@triwaz.com.

8. DATA SECURITY AND RETENTION

8.1 Security Measures
We implement appropriate technical and organizational measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include encryption in transit, access controls, and regular security assessments. However, no Internet transmission is completely secure.

8.2 Retention
We retain your personal data for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

  • Account Data: Retained for the life of your account plus a reasonable post-termination period for legal and audit purposes.
  • Inputs & Outputs: Retained for the duration necessary to provide the Service. You may request deletion via Section 10 below.
  • Voice Audio: Not retained by Triwaz after transcription is complete.
  • Payment Records: Retained as required by applicable financial regulations.
  • Usage Data & Logs: Retained for a reasonable period for security and analytics purposes, after which data is anonymized or deleted.

9. INTERNATIONAL DATA TRANSFERS

Triwaz operates in Taiwan and processes data globally through our network of third-party AI model providers and service providers. When your personal data is transferred from the EEA, United Kingdom, or other jurisdictions with data transfer restrictions, we will rely on appropriate safeguards where required by applicable law, such as:

  • Standard Contractual Clauses (SCCs) as approved by the European Commission
  • The UK International Data Transfer Addendum
  • Other legally recognized transfer mechanisms as required by applicable law

By using the Service, you acknowledge that your data may be transferred to, processed, and stored in Taiwan and other jurisdictions where our Sub-Processors operate.

10. YOUR PRIVACY RIGHTS AND CHOICES

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access & Portability: You may request a copy of the personal data we hold about you.
  • Rectification: You may request correction of inaccurate or incomplete personal data.
  • Deletion (Right to Erasure): You may request deletion of your personal data, subject to legal retention obligations. Upon receiving your deletion request, we will send a confirmation email. Once confirmed, deletion is irreversible and all associated TRI data will be permanently removed.
  • Restriction: You may request that we restrict processing of your data in certain circumstances.
  • Objection: You may object to processing based on legitimate interests or for direct marketing purposes.
  • Withdrawal of Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
  • Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your privacy rights.

For California Residents: We do not sell your personal data as defined under the CCPA/CPRA. You have the right to know, delete, correct, and limit use of sensitive personal data.
For EEA/UK Residents: Where GDPR or UK GDPR applies, you may lodge a complaint with your local data protection supervisory authority.
For Taiwan Residents: You have the rights provided under the Personal Data Protection Act (PDPA).

To exercise any of these rights, please contact us at hello@triwaz.com. We will respond within the timeframes required by applicable law.

11. CONTACT US

  • Email: hello@triwaz.com
  • Location: Taipei, Taiwan (R.O.C.)

12. REGIONAL SUPPLEMENTAL DISCLOSURES

12.1 United States — California (CCPA/CPRA)
Categories Collected: Identifiers, commercial information, Internet/electronic activity, geolocation data (IP-based), and inferences drawn from such data. We do not process sensitive personal data for inferring characteristics about you, and we do not sell your personal data. Where we use advertising cookies (e.g., Google AdSense), you can control these through your browser settings, and you may contact us to exercise your choices.

12.2 European Economic Area / United Kingdom (GDPR/UK GDPR)
Processing is based on contract performance, legitimate interests, consent, and legal obligations as relevant.

12.3 Taiwan (PDPA)
We comply with the Taiwan Personal Data Protection Act and provide the rights detailed in Section 10.

13. SUB-PROCESSORS AND THIRD-PARTY DEPENDENCY

Current list of key sub-processors and service providers:

  • OpenAI OpCo, LLC / OpenAI Ireland Ltd. (AI model inference) — United States / Ireland
  • Google LLC (AI model inference) — United States
  • xAI (AI model inference) — United States
  • Groq, Inc. (AI model inference & voice transcription) — United States
  • Serper (Web search data retrieval) — United States
  • Supabase (Database & authentication) — United States
  • Vercel (Hosting & infrastructure) — United States
  • Upstash (Rate limiting) — United States
  • Creem (Payment processing / Merchant of Record) — United States / Europe
  • Google AdSense (Advertising Network) — United States

Material changes to Sub-Processors will be notified at least 30 days before taking effect.

14. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. For material changes, we will provide at least 30 days' prior notice via email or through a prominent notice posted on the Service. Continued use after the effective date constitutes acceptance of the updated Privacy Policy.

15. SURVIVAL AND INCORPORATION BY REFERENCE

This Privacy Policy incorporates by reference relevant provisions of the Triwaz Terms of Service, including provisions regarding AI-generated content and disclaimers, the governing law (Taiwan, R.O.C.), and miscellaneous provisions such as force majeure and severability.

In the event of any inconsistency between this Privacy Policy and the Terms of Service regarding data protection, this Privacy Policy shall prevail.