Privacy Policy

1 Introduction

Truvo Analytics ("we," "us," or "our") operates Truvo Pulse, a competitive intelligence platform available at console.truvo.org. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our services.

By creating an account and using Truvo Pulse, you agree to the collection and use of your information as described in this policy. If you do not agree, please do not use our services.

We take your privacy seriously. We do not sell your personal data. We do not run advertising. We use your information solely to provide and improve the Truvo Pulse service.

2 Information We Collect

Account information

• Full name and email address (provided at signup)
• Password (hashed — we never store it in readable form)

Business information

• Business name, address, and phone number (retrieved from your Google Business listing during setup). The phone number is stored with your business profile.
• Business category (restaurant, retail, etc.) — used to search for relevant competitors
• Your preferred competitive radius (miles)

Location data

• Geographic coordinates associated with your business (sourced from Google Places API)
• These coordinates are used to identify competitors within your chosen radius

Usage data

• Your last sign-in time
• Feedback responses submitted through the in-app feedback tool
• Star ratings and free-text comments you provide about our product

Market and competitor data

• Competitor names, addresses, ratings, review counts, and distances — sourced from the Google Places API
• This is publicly available data. We aggregate and score it to provide your market intelligence dashboard.
• We also store weekly market snapshots to detect changes over time

3 How We Use Your Information

• Provide the service: Populate your competitive intelligence dashboard with your business data and nearby competitor data
• Business verification: When you finish setting up your business, Truvo receives an email notification with your signup details, and a member of the Truvo team approves the account manually. Until it is approved, you see a "verification in progress" screen instead of the dashboard.
• AI-powered insights: Send your business name, rating and review counts, competitor names, ratings and distances, and short excerpts of public Google reviews to Anthropic's Claude API to generate recommendations displayed in your dashboard
• Weekly email digest: Send a weekly summary of market changes, competitor movements, and your business performance to your email address
• Transactional emails: Send welcome emails and service notifications via Resend
• Product improvement: Use aggregated, anonymized feedback and usage patterns to improve Truvo Pulse features and prioritize development
• Account management: Notify our admin team of new signups for support and quality assurance purposes

4 Third-Party Services

We use the following third-party services to operate Truvo Pulse. Each service has its own privacy policy. We only share the minimum data necessary for each service to function.

5 Data Storage and Security

• Database: All account and business data is stored in Supabase (PostgreSQL). Row Level Security ensures each user can only read and write their own records.
• API secrets: All third-party API keys and credentials are stored as encrypted environment secrets in Cloudflare Workers — never in source code or exposed to the browser.
• Transport security: All connections to console.truvo.org and our API are encrypted via HTTPS. We enforce TLS on every endpoint.
• No data sales: We do not sell, rent, or trade your personal information to any third party for any purpose.
• Access controls: Only authorized Truvo Analytics personnel have access to production data, and only through authenticated, audited channels.

6 Cookies and Local Storage

• Truvo Pulse uses localStorage (not cookies) to maintain your authentication session via Supabase. This keeps you logged in between visits without requiring you to sign in again.
• We do not use third-party tracking cookies.
• We do not use advertising cookies or participate in any ad network.
• The Truvo Pulse app (console.truvo.org) does not use analytics trackers (Google Analytics, Facebook Pixel, etc.). The truvo.org website is different; see Section 7.

You can clear your localStorage data at any time via your browser's developer tools or settings. This will sign you out of Truvo Pulse.

7 The truvo.org Website

The Truvo marketing website at truvo.org is separate from the Truvo Pulse app and works differently from the app. When you visit truvo.org:

• Google Analytics: We use Google Analytics, set up through the Site Kit by Google plugin, to measure how visitors use the site, such as which pages are viewed, along with browser and device information. It sets two cookies on your browser, _ga and _ga_KJ8DP6DC2T. The data is processed by Google under Google's Privacy Policy. You can block these cookies in your browser settings.
• Cloudflare Web Analytics: The site loads Cloudflare's analytics script to measure page visits and performance. It does not set cookies.
• Google Fonts: The site's fonts load from Google's servers, so Google receives your IP address and browser information when a page loads.
• Contact form: The form on truvo.org/contact is handled by FormSubmit (formsubmit.co), which forwards your submission to us by email. It includes your name, email address, business name, phone number (optional), your choice from the "What can we help with?" menu, and your message. We use it only to reply to you.

8 Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

All users

• Access: Request a copy of the personal data we hold about you
• Correction: Update your name via account settings, or email contact@truvo.org for other corrections
• Deletion: Email contact@truvo.org to delete your account — your data will be removed within 30 days
• Opt out of emails: Email contact@truvo.org to stop receiving weekly digests and alerts. Transactional emails (such as password resets) cannot be opted out of while your account is active.

California residents (CCPA)

• Right to know what personal information we collect and how it is used
• Right to delete your personal information
• Right to opt out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your rights

EU / EEA residents (GDPR)

• Right to access your personal data
• Right to rectify inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing based on legitimate interests
• Right to lodge a complaint with your local data protection authority

To exercise any of these rights, email us at contact@truvo.org. We will respond within 30 days.

9 Data Retention

• Account and business data: Retained for as long as your account is active
• Market snapshots: Retained for trend analysis and weekly digest generation while your account is active
• Feedback you submit is emailed to us and kept as long as it is useful for improving Truvo Pulse.
• Deleted accounts: All personal data associated with a deleted account is removed from our systems within 30 days of deletion

10 Children's Privacy

Truvo Pulse is a business intelligence platform intended for adult business owners and managers. We do not knowingly collect personal information from individuals under the age of 13. If you believe a child has provided us with personal information, please contact us at contact@truvo.org and we will delete it promptly.

11 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by email using the address associated with your account at least 14 days before the changes take effect.

Continued use of Truvo Pulse after the effective date of any changes constitutes your acceptance of the updated policy. If you do not agree to the changes, you may email us at contact@truvo.org to delete your account before they take effect.

12 Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or our data practices, please contact us:

• Email: contact@truvo.org
• Business: Truvo Analytics
• Location: Harrisburg, Pennsylvania

We typically respond within 2 business days.