Privacy Policy

Last updated: September 2026

Aletheia ("Aletheia," "we," "us," or "our"), a product of TBG Sourcing Inc., is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our platform, our website at getaletheia.ai, and our mobile apps (including Aletheia Trade Show Manager) — together, the "Services."

1. Information We Collect

Information you provide. We collect information you give us directly, including:

Content you create in the app. The app stores the content you capture so it syncs across your devices and, if you choose, your team. This content stays private to your account and team — we do not sell it, share it with other customers, or use it to train AI models. It includes:

The app requests camera, microphone, and photo-library access only to provide these features, and contacts access only when you tap “Add to phone contacts” on a card you captured — we write that one contact to your device and never read, upload or store your existing contacts. You can decline or revoke any of these permissions at any time in your device settings.

Public seller profiles. If you choose to publish a selling profile, the information in that profile — such as your company, product categories, and any catalog, deck, or booth photo you add — is displayed publicly to other users in our supplier directory. This is separate from the private content described above.

Booking a call. When you book an introductory call with us we collect the name, email address and company website you enter, and anything you choose to write in the optional message. We also record the IP address the request came from and, from it, your approximate location (city and country), the network or internet provider the address belongs to, and whether that network is a business, residential, datacenter or VPN connection. We keep a record of how you reached us — the page you booked from, the site or search that referred you, and the pages you viewed on our website. We use this to understand which organisation we are meeting and to prepare for the call, and to keep the booking system free of automated and abusive submissions. We use it to identify organisations, not to identify you personally beyond the details you give us.

Where the UK or EU General Data Protection Regulation applies, our lawful basis for this is our legitimate interest in assessing and preparing for business enquiries and in protecting the booking system from abuse. You can object to this processing at any time by contacting us at privacy@getaletheia.ai.

If you book a call we will send you a confirmation with a calendar invite, one reminder the day before, and anything we said we would send you. Those are service messages about a call you asked for and are not marketing. We will not add you to a mailing list unless you tick the optional box asking us to, and if you do you can unsubscribe from any message we send.

Information collected automatically. When you use the Services we also collect usage data, log files, device information, and cookies (see "Cookies & Analytics").

2. How We Use Your Information

We use the information we collect to:

Legal bases (EEA/UK). Where the GDPR applies, we process personal data to perform our contract with you, for our legitimate interests in operating and promoting the Services in a proportionate way (subject to opt-out), to comply with legal obligations, or with your consent where required.

3. AI Features

When you choose to transcribe a voice note, the recording is sent to a third-party speech-to-text provider that processes it on our behalf, under confidentiality obligations, solely to return the text to you. Transcription happens only when you initiate it; we do not otherwise listen to or analyze your recordings.

4. If an Aletheia User Saved Your Details

You may be reading this because you received an email from Aletheia, or because you met someone at a trade show who scanned your business card. This section explains what we hold about you and how to change or remove it. It is also the notice required by Article 14 of the UK and EU General Data Protection Regulation, which applies where we obtain personal data from someone other than you.

What we hold. The business contact details you handed over on a card or booth profile — typically your name, company, job title, email address, phone or messaging identifiers such as WhatsApp or WeChat, and company address — together with the context of the meeting: the event, the booth and the date. We hold it because a user of our Services met you in a business setting and chose to save it.

What we do with it. We store it so that user can find you again and follow up with you. Where they choose to send you their own card, or invite you to Aletheia, we deliver that message on their behalf. Every such message includes a way to decline further contact.

What we do not do. We do not sell, rent or trade your details, and we do not use them for our own marketing unless you ask us to. Any notes, ratings, photos or recordings a user makes about a meeting belong to that user’s account, are visible only to them and the teammates they invite, and are never shown to other customers or used to train AI models.

Legal basis. Where the GDPR applies, we process these business contact details on the basis of legitimate interests — our users’ interest, and ours, in keeping a reliable record of business contacts made at trade events — balanced against your own interests and rights. You can object to this at any time.

The supplier directory. Aletheia includes a directory that helps buyers find suppliers. It lists businesses that have published their own selling profile, and it may also list the identity details of suppliers captured at trade events — company, country, product categories, and a business contact. It never includes the notes, ratings, photos or recordings that any user made about a meeting.

We do not disclose who works with whom. Which buyer has visited, saved or does business with which supplier is commercially sensitive, and we treat it that way. That relationship is never shown in the directory, never visible to other buyers or other suppliers, and never sold, licensed or published in any form that identifies the parties involved. A supplier listing shows the supplier. It does not show, and cannot be used to work out, who met them, at which booth, or on what date.

Aggregated market insights. We may produce, publish and sell statistics and market reports drawn from activity across Aletheia — for example, how buyer interest in a product category shifts between regions or between events. These are aggregated and de-identified: they never name a buyer or a supplier, never describe a group small enough that a single company could be picked out of it, and cannot be used to work out who met whom. Where the GDPR applies, our lawful basis is our legitimate interest in understanding and reporting on the markets we serve; you can object at any time by contacting us.

The one exception is the two parties who already met each other. Where a buyer saved a supplier’s details at an event, we may let those two reconnect through Aletheia — that is the point of exchanging details at a booth. Even then, the buyer’s private notes, ratings, tasks, photos and recordings are never revealed, and either side can decline further contact at any time.

Your rights. Email privacy@getaletheia.ai and we will tell you what we hold about you, correct it, delete it, or remove you from any future invitations. You do not need an Aletheia account to make a request, and we will not ask you to create one.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We share information only in the following circumstances:

Your private notebook content — the notes, ratings, tasks, photos and recordings you make — is never shared with other Aletheia customers or used to train shared models. Where a supplier’s identity details appear in our directory, as described in section 4, they appear on their own: with no link to you, and no indication of the meeting at which you saved them.

6. Marketing and Your Choices

Every marketing email we send includes an unsubscribe link, and you can opt out at any time using that link, through your in-app communication preferences, or by emailing privacy@getaletheia.ai. If you receive an invitation from Aletheia because someone shared or saved your business details, you can decline further contact using the link in the message, and we will honor removal requests.

7. Data Security

We implement industry-standard security measures, including encryption in transit and at rest, access controls, and regular review of our practices. However, no method of transmission over the internet or electronic storage is 100% secure.

8. Data Retention and Deletion

We retain your information for as long as your account is active or as needed to provide the Services. You can delete your content or your entire account — including associated data — directly in the app (Account → Delete account), or request deletion by contacting us at privacy@getaletheia.ai. Certain records may be retained where required to comply with legal obligations.

Booking requests, and the technical details recorded with them, are kept for 24 months after the call and then deleted. You can ask us to delete a booking record sooner at any time by contacting us at privacy@getaletheia.ai.

WhatsApp Business messaging. Where a business uses Aletheia to communicate with its customers over the WhatsApp Business Platform (operated by Meta), Aletheia acts as that business’s processor for the data involved — WhatsApp phone numbers, message content and media, message metadata, display names, and opt-in and opt-out records. We retain this data only as long as it is needed to provide the service and no longer than necessary, consistent with Meta’s Platform Terms and the WhatsApp Business Solution Terms, and we delete it on request or when the business closes its account. For full details, and how anyone can request deletion of WhatsApp data, see our Data Deletion page.

9. Your Rights

Depending on your location, you may have the right to access, correct, delete, port, restrict, or object to the processing of your personal information, and to withdraw consent. California residents have the right to know, delete, and opt out of the "sale" of personal information — we do not sell personal information. To exercise any of these rights, contact us at privacy@getaletheia.ai. We will not discriminate against you for exercising your rights.

10. International Transfers

Your information may be transferred to and processed in countries other than your own. Where required, we put appropriate safeguards in place for such transfers in compliance with applicable data protection laws.

11. Children's Privacy

The Services are intended for business users and are not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us at privacy@getaletheia.ai and we will delete it.

12. Cookies & Analytics

We use cookies and similar technologies on our website to understand how it is used and to improve it. Specifically, we use:

Our own storage. When you visit our site we keep a single small record in your browser’s local storage noting the date of your first visit and how many times you have been back. If you later book a call, that record is sent with the booking so we know which article or search brought you to us. It contains no name, no email address and no identifier we can trace to you before you choose to give us one, it is never shared with anyone, and clearing your browser data removes it. You can browse with it blocked and everything still works.

These tools set cookies and process usage data — such as IP address, device and browser information, and on-site behavior — which is shared with the respective providers acting as our processors. We do not sell your personal information. You can opt out at any time using the cookie notice on our site, or by disabling cookies in your browser. Disabling cookies may affect some functionality. These analytics run on our website, not inside the mobile apps.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Services after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at: