Privacy Policy

Last Updated: 18 March 2026

1. Introduction

Trueight Ltd (company number 17090683), trading as Tru8 ("we," "our," or "us") operates the Tru8 evidence research platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

2. Information We Collect

2.1 Account Information

Email address: For authentication and communication
Name: Display name for your account
Authentication data: Managed by Clerk (our authentication provider)

2.2 Usage Data

Research submissions: Text, URLs, images, or videos you submit
Check history: Your past research requests and results
Credits usage: Tracking your subscription usage

2.3 Payment Information

Billing details: Processed securely by Stripe (we don't store card numbers)
Subscription status: Plan type, renewal dates, payment history

2.4 Analytics & Error Tracking

PostHog: Anonymous usage analytics (optional, requires cookie consent)
Sentry: Error monitoring for bug fixes (anonymized)

3. Legal Basis for Processing (UK GDPR)

Data Type	Legal Basis
Account Information	Contract Performance (Art. 6(1)(b))
Payment Data	Contract Performance + Legal Obligation (Art. 6(1)(b)(c))
Usage Analytics	Consent (Art. 6(1)(a))
Service Improvement	Legitimate Interest (Art. 6(1)(f))

4. How We Use Your Information

Provide evidence research services
Manage your account and subscription
Process payments
Send service updates and notifications
Improve our evidence research service
Detect and prevent fraud

5. Third-Party Services

5.1 Authentication

Clerk: Manages user authentication and sessions

5.2 Payment Processing

Stripe: Handles all payment transactions

5.3 Analytics (Optional)

PostHog: Product analytics (requires cookie consent)

5.4 Error Monitoring

Sentry: Application error tracking

5.5 AI Processing

Google AI (Gemini): Processes submitted claims and evidence for classification, mapping, and analysis

When you submit content for research, it is sent to Google's Gemini API for processing. Google acts as a data processor under our instructions. Submitted content is used solely to generate your evidence research results and is not used by Google to train their models.

6. Data Retention

Account data: Retained while account is active + 2 years
Analysis history: Retained for 2 years
Payment records: Retained for 7 years (UK tax law requirement)
Error logs: Retained for 90 days

7. Your Rights (UK GDPR)

You have the following rights regarding your personal data:

7.1 Right to Access

Email hello@trueight.com to request a data export. We will respond within 30 days.

7.2 Right to Rectification

Update your name/email in Settings → Account → Update Profile

7.3 Right to Erasure ("Right to be Forgotten")

Delete your account in Settings → Account → Delete Account

Note: Payment records retained 7 years for legal compliance

7.4 Right to Object

Opt out of analytics via the Cookie Preferences button in the website footer

7.5 Right to Data Portability

Email hello@trueight.com to request a data export in JSON format

8. Data Security

Industry-standard encryption (TLS 1.3)
Secure authentication via Clerk
Regular security audits
Limited employee access to data

9. International Transfers

Our services use cloud infrastructure that may process data outside the UK. We ensure adequate safeguards through Standard Contractual Clauses (SCCs) approved by the UK ICO.

10. Cookies

We use cookies for authentication and analytics. See our Cookie Policy for details.

Manage your cookie preferences via our

11. Children's Privacy

Tru8 is not intended for users under 13. We do not knowingly collect data from children.

12. Changes to This Policy

We may update this policy periodically. Material changes will be communicated via email 30 days before taking effect.

13. Contact Us

Data Controller: Trueight Ltd (company number 17090683), trading as Tru8
Email: hello@trueight.com
Location: London, UK

To exercise your data rights or submit complaints:
Email: hello@trueight.com
Response time: Within 30 days

Complaints to ICO:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk

14. Cross-User Consensus Analysis

When multiple independent users research the same or similar claims, we may aggregate and anonymise evidence data to compute consensus metrics. This analysis uses only aggregated counts and classifications — no individual user's evidence set is shared with other users. Consensus data helps indicate the stability and convergence of the evidence landscape across independent research sessions.

Have questions about this policy?