Legal

Privacy Policy

Last updated: July 8, 2026

Who we are

Truven Labs, a sole proprietorship registered in Ontario, Canada ("Truven", "we", "us"), operates the Truven trust-center product available at truvenlabs.com and the trust pages served under /t/. This policy explains what personal data we process and why.

What we collect

Account data: email, name, workspace, password hash, authentication provider identifiers.
Customer content: documents, Q&A entries, questionnaire uploads, and trust-page settings you upload to Truven.
Access logs: IP address, user agent, request timestamps, and NDA acceptance events for documents downloaded through a trust page.
Billing data: handled by Stripe; we store a Stripe customer ID and subscription status, never card numbers.
Product analytics: aggregated pageviews and events (signup, checkout success) via a privacy-friendly analytics provider. No cross-site tracking, no ad networks.

How we use it

Provide the trust-center product you signed up for.
Send transactional email (auth, invites, document-access notifications).
Prevent abuse and produce audit logs for our customers.
Measure product usage in aggregate to improve the service.

We do not sell personal data and we do not use customer content to train third-party models.

Subprocessors

We rely on a small set of vendors to operate Truven: Supabase (database, auth, storage), Cloudflare (edge hosting), Stripe (billing), and a transactional email provider. A current list is maintained on our trust page.

Data retention

Customer content is retained while your workspace is active. When you delete a workspace, we remove documents and Q&A within 30 days. Audit-log records are retained for 12 months. Billing records are retained as required by tax law.

Your rights

You can access, export, correct, or delete your data at any time from your dashboard or by emailing privacy@truvenlabs.com. EU/UK residents have rights under GDPR; California residents have rights under CCPA.

Children

Truven is a business product and is not directed to children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us data, contact us and we will delete it.

Changes to this policy

We may update this policy as the product evolves. Material changes will be reflected in the "Last updated" date above and, where appropriate, communicated by email.

Governing law

Truven Labs is established in Ontario, Canada, and this policy is governed by the laws of the Province of Ontario and the applicable federal laws of Canada.

Contact

Questions? Email privacy@truvenlabs.com.