Privacy Policy

1. Introduction

Tru8 Ltd ("we," "our," or "us") operates the Tru8 fact-checking platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

2. Information We Collect

2.1 Account Information

Email address: For authentication and communication
Name: Display name for your account
Authentication data: Managed by Clerk (our authentication provider)

2.2 Usage Data

Fact-check submissions: Text, URLs, images, or videos you submit
Check history: Your past fact-checking requests and results
Credits usage: Tracking your subscription usage

2.3 Payment Information

Billing details: Processed securely by Stripe (we don't store card numbers)
Subscription status: Plan type, renewal dates, payment history

2.4 Analytics & Error Tracking

PostHog: Anonymous usage analytics (optional, requires cookie consent)
Sentry: Error monitoring for bug fixes (anonymized)

3. Legal Basis for Processing (UK GDPR)

Data Type	Legal Basis
Account Information	Contract Performance (Art. 6(1)(b))
Payment Data	Contract Performance + Legal Obligation (Art. 6(1)(b)(c))
Usage Analytics	Consent (Art. 6(1)(a))
Service Improvement	Legitimate Interest (Art. 6(1)(f))

4. How We Use Your Information

Provide fact-checking services
Manage your account and subscription
Process payments
Send service updates and notifications
Improve our AI models and service quality
Detect and prevent fraud

5. Third-Party Services

5.1 Authentication

Clerk: Manages user authentication and sessions

5.2 Payment Processing

Stripe: Handles all payment transactions

5.3 Analytics (Optional)

PostHog: Product analytics (requires cookie consent)

5.4 Error Monitoring

Sentry: Application error tracking

6. Data Retention

Account data: Retained while account is active + 2 years
Fact-check history: Retained for 2 years
Payment records: Retained for 7 years (UK tax law requirement)
Error logs: Retained for 90 days

7. Your Rights (UK GDPR)

You have the following rights regarding your personal data:

7.1 Right to Access

Download all your data from Settings → Privacy → Download My Data

7.2 Right to Rectification

Update your name/email in Settings → Account → Update Profile

7.3 Right to Erasure ("Right to be Forgotten")

Delete your account in Settings → Account → Delete Account

Note: Payment records retained 7 years for legal compliance

7.4 Right to Object

Opt out of analytics in Settings → Privacy → Cookie Preferences

7.5 Right to Data Portability

Export your data in JSON format via Settings → Privacy

8. Data Security

Industry-standard encryption (TLS 1.3)
Secure authentication via Clerk
Regular security audits
Limited employee access to data

9. International Transfers

Our services use cloud infrastructure that may process data outside the UK. We ensure adequate safeguards through Standard Contractual Clauses (SCCs) approved by the UK ICO.

10. Cookies

We use cookies for authentication and analytics. See our Cookie Policy for details.

Manage your cookie preferences via our

11. Children's Privacy

Tru8 is not intended for users under 13. We do not knowingly collect data from children.

12. Changes to This Policy

We may update this policy periodically. Material changes will be communicated via email 30 days before taking effect.

13. Contact Us

Data Controller: Tru8 Ltd
Email: hello@trueight.com
Location: London, UK

To exercise your data rights or submit complaints:
Email: hello@trueight.com
Response time: Within 30 days

Complaints to ICO:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk