Privacy Policy

1 Introduction

Truvo Analytics ("we," "us," or "our") operates Truvo Pulse, a competitive intelligence platform available at console.truvo.org. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our services.

By creating an account and using Truvo Pulse, you agree to the collection and use of your information as described in this policy. If you do not agree, please do not use our services.

We take your privacy seriously. We do not sell your personal data. We do not run advertising. We use your information solely to provide and improve the Truvo Pulse service.

2 Information We Collect

Account information

• Full name and email address (provided at signup)
• Password (hashed — we never store it in readable form)

Business information

• Business name, address, phone number (retrieved from your Google Business listing during verification)
• Business category (restaurant, retail, etc.) — used to search for relevant competitors
• Your preferred competitive radius (miles)

Location data

• Geographic coordinates associated with your business (sourced from Google Places API)
• These coordinates are used to identify competitors within your chosen radius

Usage data

• Dashboard pages you visit and features you use
• Feedback responses submitted through the in-app feedback tool
• Star ratings and free-text comments you provide about our product

Market and competitor data

• Competitor names, addresses, ratings, review counts, and distances — sourced from the Google Places API
• This is publicly available data. We aggregate and score it to provide your market intelligence dashboard.
• We also store weekly market snapshots to detect changes over time

3 How We Use Your Information

• Provide the service: Populate your competitive intelligence dashboard with your business data and nearby competitor data
• Business verification: Send a one-time SMS verification code to confirm your ownership of the business listed in your Google profile
• AI-powered insights: Pass anonymized market data (competitor scores, ratings, distances) to Anthropic's Claude API to generate actionable recommendations displayed in your dashboard
• Weekly email digest: Send a weekly summary of market changes, competitor movements, and your business performance to your email address
• Transactional emails: Send welcome emails, verification confirmations, and service notifications via Resend
• Product improvement: Use aggregated, anonymized feedback and usage patterns to improve Truvo Pulse features and prioritize development
• Account management: Notify our admin team of new signups for support and quality assurance purposes

4 Third-Party Services

We use the following third-party services to operate Truvo Pulse. Each service has its own privacy policy. We only share the minimum data necessary for each service to function.

5 Data Storage and Security

• Database: All account and business data is stored in Supabase (PostgreSQL). Row Level Security ensures each user can only read and write their own records.
• API secrets: All third-party API keys and credentials are stored as encrypted environment secrets in Cloudflare Workers — never in source code or exposed to the browser.
• Transport security: All connections to console.truvo.org and our API are encrypted via HTTPS. We enforce TLS on every endpoint.
• No data sales: We do not sell, rent, or trade your personal information to any third party for any purpose.
• Access controls: Only authorized Truvo Analytics personnel have access to production data, and only through authenticated, audited channels.

6 Cookies and Local Storage

• Truvo Pulse uses localStorage (not cookies) to maintain your authentication session via Supabase. This keeps you logged in between visits without requiring you to sign in again.
• We do not use third-party tracking cookies.
• We do not use advertising cookies or participate in any ad network.
• We do not use analytics trackers (Google Analytics, Facebook Pixel, etc.).

You can clear your localStorage data at any time via your browser's developer tools or settings. This will sign you out of Truvo Pulse.

7 Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

All users

• Access: Request a copy of the personal data we hold about you
• Correction: Update your name or email via account settings, or contact us for other corrections
• Deletion: Delete your account via account settings or by emailing us — your data will be removed within 30 days
• Opt out of emails: Reply to any Truvo Pulse email with "unsubscribe" to stop receiving weekly digests. Transactional emails (verification, account security) cannot be opted out of while your account is active.

California residents (CCPA)

• Right to know what personal information we collect and how it is used
• Right to delete your personal information
• Right to opt out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your rights

EU / EEA residents (GDPR)

• Right to access your personal data
• Right to rectify inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing based on legitimate interests
• Right to lodge a complaint with your local data protection authority

To exercise any of these rights, email us at contact@truvo.org. We will respond within 30 days.

8 Data Retention

• Account and business data: Retained for as long as your account is active
• Market snapshots: Retained for trend analysis and weekly digest generation while your account is active
• Feedback and usage data: Retained for up to 2 years for product improvement purposes
• OTP verification records: Deleted or expired within 24 hours of creation
• Deleted accounts: All personal data associated with a deleted account is removed from our systems within 30 days of deletion

9 Children's Privacy

Truvo Pulse is a business intelligence platform intended for adult business owners and managers. We do not knowingly collect personal information from individuals under the age of 13. If you believe a child has provided us with personal information, please contact us at contact@truvo.org and we will delete it promptly.

10 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by email using the address associated with your account at least 14 days before the changes take effect.

Continued use of Truvo Pulse after the effective date of any changes constitutes your acceptance of the updated policy. If you do not agree to the changes, you may delete your account before they take effect.

11 Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or our data practices, please contact us:

• Email: contact@truvo.org
• Business: Truvo Analytics
• Location: Harrisburg, Pennsylvania

We typically respond within 2 business days.