Privacy Policy

1. Introduction

This Privacy Policy explains how TruIntel (“Company,” “we,” “us,” or “our”), operating TruIntel (“Platform”), collects, uses, stores, and protects your personal data. The Platform is accessible at app.truintel.ai and cms.truintel.ai.

By creating an account or using the Platform, you consent to the data practices described in this policy.

2. Data We Collect

2A. From You (Account Holders)

Registration and Account Data:

• Name, email address, and company name provided during registration
• Password (stored only in hashed form — we never store or have access to your plaintext password)
• Google account email and profile information if you sign in through Google

Billing Data:

• Your subscription plan, billing cycle, and payment history
• Payment processing is handled entirely by our payment processor. We do not store, process, or have access to your credit card numbers, bank account details, or other financial instrument data.

Platform Usage Data:

• Brands you create and queries you configure
• Visibility check results and AI platform monitoring data
• SEO analytics data (keyword rankings, backlink profiles, site audit results)
• Content generated, edited, and published through the CMS
• Page optimizations applied through the CMS
• Traffic classification and lead verification results
• Insights and recommendations generated for your account

Google Search Console Data:

• If you connect your Google Search Console account, we access keyword performance data (impressions, clicks, click-through rate, average position) through OAuth authorization. You may revoke this access at any time through your Google account settings.

2B. From Your Website Visitors (via Tracking Script)

When you embed our JavaScript tracking script on your website, the script collects the following data from visitors to your website:

• Behavioral signals (mouse movement patterns, scroll depth, click patterns)
• Device fingerprint data (screen resolution, browser type and version, operating system, timezone, language preferences)
• User agent string
• IP address
• Session identifiers and visit duration

This data is collected solely for the purpose of traffic classification (distinguishing human visitors from AI agents, bots, and synthetic traffic) and lead verification scoring. We do not use this data for advertising, profiling, or any purpose other than delivering the traffic classification and lead verification services to you.

Important: You are the data controller for your website visitors. We act as a data processor on your behalf. You are responsible for disclosing the presence of this tracking script to your website visitors, providing appropriate privacy notices, and obtaining any required consents under applicable laws (including cookie consent, GDPR, CCPA, or other privacy regulations applicable in the jurisdictions where your website operates).

2C. Via CMS Domain Proxying

When you connect your domain to cms.truintel.ai:

• HTTP traffic to your domain is routed through our edge delivery infrastructure. This is necessary to serve published content and apply page optimizations.
• We cache published content and page modification configurations on our edge network.
• We do not log, store, or analyze the personal data of visitors to your proxied domain beyond what is technically necessary for edge delivery. Visitor requests are processed in transit and not retained.

3. How We Use Your Data

We use the data we collect for the following purposes:

Service Delivery: Processing AI visibility checks, generating SEO analytics, classifying website traffic, scoring leads, generating content, publishing content to your domain, and providing insights and recommendations.

Account Management: Authenticating your identity, managing your subscription, processing payments, and communicating with you about your account.

Platform Improvement: Understanding how the Platform is used, identifying bugs and performance issues, and improving our features and user experience. We use aggregated and anonymized data for this purpose wherever possible.

Communications: Sending transactional emails related to your account (welcome emails, billing confirmations, visibility reports, alerts). We may also send marketing and promotional emails — see Section 8 for details.

Legal Compliance: Complying with applicable laws, regulations, and legal obligations.

4. Third-Party Data Sharing

We share your data with third-party service providers solely to operate and deliver the Platform. These providers process data on our behalf and are contractually obligated to protect your data. We use third-party services for:

• Payment processing
• AI and machine learning processing (for visibility monitoring, content generation, and insights)
• Search engine data and competitive intelligence
• Edge content delivery and DNS infrastructure
• Email delivery (transactional and marketing emails)
• Search engine indexing (when publishing content through the CMS, we ping search engine indexing APIs on your behalf)

When we perform AI visibility checks, your brand name and the queries you configure are sent to AI platforms as part of the monitoring process. This is necessary to determine how AI platforms reference your brand.

We do not sell, rent, or trade your personal data to any third party for advertising, marketing, or any other purpose.

5. Data Retention

While Your Account is Active: All data associated with your account is retained for as long as your account remains active and your subscription is in effect.

Traffic Classification Logs: Retained according to your plan — 30 days (Lite), 90 days (Pro), or 12 months (Business). Older logs are permanently deleted.

Lead Verification Data: Retained while your account is active.

CMS Content: Published content and page modifications are retained while your account is active. Upon account termination, all content is removed from our edge network within 48 hours.

After Account Deletion: When you delete your account or your account is terminated, all personal data associated with your account — including brands, queries, visibility data, SEO data, traffic logs, lead data, CMS content, and account information — will be permanently deleted within 7 days. Backup copies may persist for up to an additional 7 days before being purged. Data required to be retained by law (such as billing records) will be retained for the minimum period required.

6. Data Security

We implement appropriate technical and organizational measures to protect your data:

• All data transmitted between your browser and our servers is encrypted using HTTPS/TLS.
• Passwords are hashed using bcrypt and never stored in plaintext.
• API keys and secrets are stored as environment variables, not in source code.
• Payment card data is handled entirely by our PCI-DSS compliant payment processor — we never access or store card details.
• Access to production systems is restricted to authorized team members.
• Database backups are encrypted and stored securely.

While we take reasonable measures to protect your data, no system is completely secure. We cannot guarantee absolute security and are not liable for unauthorized access resulting from circumstances beyond our reasonable control.

7. Your Rights

You have the following rights regarding your personal data:

Access: You may request a copy of the personal data we hold about you by contacting us at [email protected].

Deletion: You may request deletion of your account and all associated data. Deletion will be completed within 7 days of your request, subject to any legal retention requirements.

Data Export: You may export your lead verification data (CSV export), CMS content, and other data through the Platform's built-in export features.

Google Authorization: You may revoke TruIntel's access to your Google Search Console data at any time through your Google account settings.

Correction: You may update your account information at any time through the Platform.

Withdrawal of Consent: Where processing is based on your consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

8. Marketing Communications

By creating an account on the Platform, you consent to receiving marketing and promotional emails from us, including product updates, feature announcements, tips, and promotional offers. You may opt out of marketing emails at any time by replying to any marketing email with a request to unsubscribe, or by contacting us at [email protected]. We will process your opt-out request within 7 business days. Opting out of marketing emails does not affect transactional emails related to your account, billing, security, or service notifications — these will continue to be sent as necessary.

9. Compliance with Indian Data Protection Law

As an entity registered in India, we comply with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian data protection regulations. By creating an account, you provide your consent to the collection and processing of your personal data as described in this policy. You have the right to withdraw your consent at any time, subject to the consequences of such withdrawal (which may include the inability to use certain features of the Platform). You have the rights of a Data Principal under the DPDP Act, including the right to access, correct, and erase your personal data.

10. International Data Transfers

Your data may be processed on servers located in various jurisdictions, including but not limited to India, the United States, and regions where our infrastructure and service providers operate. Our edge delivery network operates globally. By using the Platform, you consent to the transfer and processing of your data in these jurisdictions. We ensure that appropriate safeguards are in place to protect your data regardless of where it is processed.

11. Cookies

The Platform (app.truintel.ai and cms.truintel.ai) uses cookies and similar technologies for authentication (session tokens, access tokens), user preferences, and platform functionality. These are essential for the operation of the Platform and cannot be disabled while using the service.

This is separate from the tracking script you may deploy on your own website. The tracking script's data collection is described in Section 2B, and you are responsible for managing cookie consent for your own website visitors.

12. Children

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that a user is under 18, we will take steps to delete their account and associated data.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the Platform. Continued use of the Platform after changes take effect constitutes your acceptance of the revised policy. If you do not agree with the updated policy, you may delete your account and stop using the Platform.

14. Contact

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us at:

Email: [email protected]
Entity: TruIntel
Address: 10, Basappa Road, Shanthinagar, Bangalore – 560027, India

By creating an account or using the Platform, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.