Skip to content

LEGAL

Privacy Policy

Last updated: September 23, 2026

1. Data controller

The data controller for personal data processed through the Truvidex service is [LEGAL ENTITY NAME], registered at [REGISTERED ADDRESS] (company number [COMPANY NUMBER]). For any privacy request, contact support@truvidex.app.

2. Data we collect

  • Account data: email address, authentication identifiers, organization and seat information, language preferences.
  • User content: documents, manuscripts, and scripts you upload, plus derived artifacts (extracted claims, sources, dossiers) generated for you.
  • Usage data: job events, claim accounting, LLM usage accounting, security logs.
  • Payment data: processed by Paddle as Merchant of Record. We do not store card numbers or full payment credentials.
  • Anti-abuse signals: a salted, hashed device fingerprint (raw visitor identifiers are never stored) used to prevent free-trial abuse.

3. Purposes and legal bases

  • Providing the Service (contract performance): processing uploads, generating dossiers, managing claims and seats.
  • Security and anti-abuse (legitimate interests): rate limiting, fraud prevention, multi-account detection.
  • Legal compliance (legal obligation): tax, accounting, and lawful requests.
  • Analytics (consent where required): cookieless aggregate web analytics on our public website.

4. No AI model training

Your uploaded files, scripts, and drafts are never used to train public machine learning models. Processing is conducted in isolated sandboxes. Model providers used for claim extraction, retrieval, and verification are bound by contractual confidentiality and data-protection terms.

5. Storage and security

Data is stored with AES-256 encryption at rest and transmitted over TLS. Access is restricted to authorized personnel on a least-privilege basis. Public dossier links are opt-in, use unguessable tokens, and can be revoked at any time.

6. Retention

  • Account and content data: while your account is active, plus a limited period for backup and legal compliance.
  • Device anti-abuse signals: deleted after the configured retention window.
  • On request, we delete your data as described in Section 8, subject to legal obligations.

7. Recipients and international transfers

We share data with processors that help us operate the Service, including Paddle (payments), Cloudflare (CDN, DNS and network security), our hosting provider, email delivery providers, and LLM/embedding providers used for processing. Where personal data is transferred outside the EEA/UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

8. Your rights

Under the GDPR/UK GDPR you have the right to access, rectify, erase, restrict, or object to processing of your personal data, as well as the right to data portability and the right to withdraw consent at any time. You also have the right to lodge a complaint with your local supervisory authority. To exercise your rights, contact support@truvidex.app.

9. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal data.

10. Changes

We may update this Privacy Policy from time to time. Material changes will be announced on this page with an updated “Last updated” date.