← Back

Privacy Policy

Last updated: 29 May 2026

1. Who we are

Dartala is an AI-powered document intelligence and RFI management platform for construction companies. We are committed to protecting the privacy and confidentiality of your project data.

2. What data we collect

  • Account data: Your email address and a hashed (non-reversible) password when you create an account.
  • Project documents: PDF files you upload. These are processed to extract text and generate AI embeddings. Original files are not stored permanently — only extracted text and embeddings are retained.
  • RFI records: Questions, AI-generated draft responses, and final responses you create within the platform.
  • Usage data: Basic server logs including request timestamps and error information. We do not use third-party analytics on the application.

3. How we use your data

  • To provide the Dartala service, including document analysis and RFI management.
  • To generate AI summaries and draft responses using the OpenAI API. Document content is sent to OpenAI to generate responses. OpenAI's data usage policies apply to this processing.
  • To authenticate your account and protect your data from unauthorised access.
  • To send transactional emails such as password reset links.

We do not sell your data to third parties. We do not use your project documents to train AI models.

4. Data storage and security

Your data is stored in a database hosted in the European Union. We use encryption in transit (HTTPS) and at rest. Authentication tokens are signed with a strong secret key and expire after 7 days.

Access to your data is restricted to your account. No other user can access your projects or RFI records.

5. Third-party services

  • OpenAI:Document text and questions are sent to the OpenAI API to generate summaries and responses. See OpenAI's privacy policy at openai.com/privacy.
  • Resend: Transactional emails (password resets) are sent via Resend. Only your email address is shared for this purpose.

6. Your rights (GDPR)

If you are located in the European Economic Area, you have the following rights:

  • Access: Request a copy of your data.
  • Rectification: Correct inaccurate data.
  • Erasure: Request deletion of your account and all associated data.
  • Portability: Request your data in a machine-readable format.

To exercise any of these rights, contact us at the email address below.

7. Data retention

We retain your account data and project records for as long as your account is active. When you delete a project or your account, all associated data (documents, embeddings, RFIs) is permanently deleted within 30 days.

8. Contact

For privacy enquiries, data requests, or to delete your account, contact us at: privacy@dartala.com