Privacy Policy

Information We Collect

We collect information you provide directly to us when you create an account, use our services, or communicate with us. This includes your name, email address, company information, and any data you submit through the Platform.

We also automatically collect certain technical information when you access the Platform, including your IP address, browser type, device information, and usage patterns through cookies and similar technologies.

When you integrate third-party services with our Platform, we may receive additional information from those services as authorized by you.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Tru Platform and Services
• Process transactions and send related notifications
• Perform compliance risk analysis and generate reports
• Send you technical notices, updates, and administrative messages
• Respond to your comments, questions, and support requests
• Monitor and analyze trends, usage, and activities in connection with our Services

We will never sell your personal information to third parties. We only share your data with your express consent or as required by law.

Data Storage and Security

All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption. We maintain SOC 2 Type II compliance and conduct regular security audits and penetration testing.

Your data is stored in secure, geographically distributed data centers. We implement strict access controls and monitoring to prevent unauthorized access to your information.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Services. If you cancel your subscription, we will retain your data for a grace period as outlined in our Terms of Service.

After the retention period, your data will be securely deleted from our systems. Certain data may be retained longer if required by law or for legitimate business purposes such as resolving disputes or enforcing our agreements.

Blockchain Data

Certain data committed to a public blockchain through our Platform is permanent and cannot be modified or deleted. We will clearly notify you before any data is committed to the blockchain, and your explicit consent is required before any such commitment is made. Once committed, this data is considered public and irrevocable, and falls outside the scope of any data deletion requests.

Cookies and Tracking

We use essential cookies to operate the Platform and optional analytics cookies to improve our services. You can manage your cookie preferences through your browser settings or our cookie consent tool.

We do not use third-party advertising cookies or tracking pixels. Our analytics are used solely to improve the Platform experience.

Third-Party Services

Our Platform may integrate with third-party services at your request. These services have their own privacy policies, and we encourage you to review them. We are not responsible for the privacy practices of third-party services. We only share the minimum data necessary for these integrations to function.

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your personal data, subject to legal retention requirements
• Portability: Request your data in a structured, machine-readable format
• Objection: Object to certain types of data processing

To exercise any of these rights, please contact our privacy team at privacy@tru.identity.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that appropriate safeguards are in place for such transfers, including Standard Contractual Clauses approved by relevant regulatory authorities.

Children's Privacy

Our Platform is designed for business use and is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform and sending you an email notification at least 30 days before the changes take effect.

Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at privacy@tru.identity or through the Contact Us page on our website.