Last updated: April 2026
Truwo AI is an AI agent that helps you buy and sell used cars in India. This policy explains what personal data we collect, why we collect it, and the choices you have. We comply with the Digital Personal Data Protection Act, 2023 (DPDP Act) and treat your data as yours — not ours to resell.
When you use Truwo we collect your phone number, car details (make, model, variant, kilometres driven, city), your preferences as a buyer or seller, and the conversation history you have with our agent. If you list a car, we also collect photos and the RC (Registration Certificate) number so we can verify basic ownership and vehicle details against public vehicle databases.
If you are selling a car, we offer an optional step to connect your Gmail account so we can build a verified service and insurance history for your car — which helps you sell faster and at a better price. This step is off by default; you must explicitly grant access.
We request the gmail.readonly scope. With your permission, Truwo reads only the following categories of emails:
We do not read, index, or store the rest of your inbox. We do not send emails, modify labels, or delete anything. From the emails we do read, we extract structured facts — service date, odometer reading, dealer, items replaced, claim ID, claim amount, NCB percent, policy number — and store those facts against your seller profile. The original email bodies are not stored.
Truwo's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Gmail data for advertising, we do not sell it, and we do not allow humans to read it except when required for security investigations, to comply with law, or with your explicit consent.
On Android, we offer a similar optional step to read dealer-service and insurer SMS from your device. We filter for messages from recognised dealer and insurer sender IDs only. The same extraction and storage rules apply: we keep the structured facts, not the message bodies. You can revoke SMS permission any time in your phone's settings.
You may upload service booklets, invoices, or insurance policy PDFs directly. We run these through optical character recognition to extract the same structured facts described above. The original file is retained for the lifetime of your listing so that a buyer's agent can reference it during negotiation.
We retain your seller profile and the verified records attached to it for as long as your listing is active, plus 180 days after the car is sold or the listing is removed — so buyers who contacted you can still see what was shared with them. Gmail and SMS access tokens are deleted within 7 days of listing closure, or immediately when you revoke access.
Under the DPDP Act, you have the right to:
To exercise any of these rights, message us on WhatsApp or email hello@truwo.ai. We respond within 7 business days.
Data is stored on servers hosted in India. Gmail refresh tokens are stored encrypted at rest. Access to production systems is limited to a small set of engineers and logged. If we ever suffer a breach that affects your data, we will notify you and the Data Protection Board of India as required by law.
We use large-language-model providers (such as Anthropic and Google) to power the Truwo agent. When we process your messages, Gmail content, or uploaded documents through these providers, it is governed by their enterprise data-protection terms — inputs are not used to train their public models. We do not share your data with advertisers or marketing networks.
Truwo is for adults. We do not knowingly collect data from anyone under 18. If you believe a minor has shared data with us, contact us and we will delete it.
If we make material changes — especially to how we use Gmail or SMS data — we will notify active sellers on WhatsApp and update the date at the top of this page.
Questions, requests, or complaints? Email hello@truwo.ai or message us on WhatsApp. Our Data Protection contact is the same address.