Skip to main content
Triage AI

Legal

Privacy Policy

Last updated: June 2025 · [TODO: legal review before launch]

1. Who we are

Triage AI ("we", "us", "our") is a full-service technology company registered in Islamabad, Pakistan. We build software products and AI systems for clients globally.

This Privacy Policy explains what personal data we collect through our website (triageai.com), how we use it, and your rights in relation to it.

Data controller contact: contact us via our website for all data-related enquiries.

2. What data we collect and why

Contact form submissions. When you submit our contact form, we collect your name, email address, company name (optional), and the content of your message. We use this to respond to your enquiry. Legal basis: legitimate interests (responding to a business enquiry you initiated).

Website analytics. We use Vercel Analytics, a cookieless analytics service. Vercel Analytics does not use cookies, does not track individual users across sessions, and does not collect personally identifiable information. It records aggregate page view data including page URL, referrer, device type, and approximate country. No consent is required for this collection under GDPR as it does not involve personal data processing.

Theme preference.If you change the colour theme of the website, your preference is stored in your browser's local storage. This data never leaves your device and is not transmitted to us.

Error monitoring.We use Vercel's built-in error tracking to detect application errors. Error reports may include browser type, device type, and the URL where an error occurred, but do not include personally identifiable information.

3. How we use your data

We use contact form data exclusively to respond to your enquiry. We do not sell, rent, or share your personal data with third parties for marketing purposes.

If we engage in a client project with you, a separate data processing agreement will govern how we handle data within that project scope.

4. Data retention

Contact form submissions are retained for as long as necessary to fulfil the enquiry and any resulting commercial relationship, and for a period of up to 3 years thereafter for legitimate business record-keeping purposes.

Analytics data is aggregate and not personally identifiable; it is retained indefinitely in aggregate form.

5. Your rights

If you are in the European Economic Area or United Kingdom, you have the following rights under GDPR: the right to access your personal data, the right to rectification, the right to erasure, the right to restriction of processing, the right to data portability, and the right to object.

To exercise any of these rights, contact us via our contact page. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority.

6. Third-party services

We use the following third-party services. Each has its own privacy policy:

  • Vercel: Hosting, analytics, error monitoring

7. Cookies

Our website does not use tracking cookies. The only browser storage we use is local storage for your theme preference, which is strictly necessary for site functionality and is not transmitted to us.

8. International transfers

Our website is hosted on Vercel's global infrastructure. When you submit a contact form, data may be processed on servers outside your country of residence. Vercel maintains appropriate safeguards for international data transfers.

9. Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page indicates when it was most recently revised. Material changes will be communicated via the website.

10. Contact

For any privacy-related questions or to exercise your rights, contact us here.