Privacy Policy

Controller: TrueCompanyOS, Sole proprietor / Individual business (Ατομική Επιχείρηση), Greece.

Contact for privacy and data-rights requests: info@truecompanyos.com.

Depending on how you use the Service, we may process:

• Account and profile data (such as name, email, and account preferences).
• Authentication data (credentials handled via our auth provider; we do not store raw payment card numbers).
• Workspace and company-content data you choose to upload or create (notes, documents, profiles, pitches, and related company knowledge).
• Usage and technical logs (such as IP address, device/browser metadata, timestamps, and product interaction events needed for security and reliability).
• Billing and subscription references (plan, status, customer/subscription identifiers, and related Stripe references — not full card PAN data).
• Support communications you send to us.
• Analytics and cookies where actually used on our website or application (for example deployment or product analytics tooling).
• Advertising measurement data when you opt in to Marketing cookies (for example LinkedIn Insight Tag identifiers and conversion events).

We process personal data to:

• Provide, operate, secure, and improve the Service.
• Create and manage accounts, workspaces, seats, and roles.
• Process AI-assisted organization and drafting requests you initiate.
• Handle subscriptions, invoices, and cancellations with Stripe/Link.
• Respond to support and data-rights requests.
• Comply with legal obligations and protect against abuse or fraud.
• Measure advertising performance and attribute conversions when Marketing cookie consent is granted.

Where the GDPR applies, we rely on:

• Performance of a contract — to provide the Service you request.
• Legitimate interests — for securing the Service, preventing abuse, basic product improvement, and similar interests that do not override your rights.
• Legal obligations — where we must retain or disclose information to comply with law.
• Consent — for optional Marketing cookies and related advertising measurement (including LinkedIn Insight Tag). You may withdraw Marketing consent at any time via Cookie Settings without affecting prior lawful processing.

We use a lightweight, first-party cookie preference control on truecompanyos.com. Categories:

• Necessary — always active. Includes the first-party preference cookie that stores your cookie choices (versioned so we can re-prompt if categories change materially).
• Marketing — optional and off by default. Used only after you accept Marketing cookies. Currently used for the LinkedIn Insight Tag (advertising measurement, conversion attribution, and audience/retargeting).

When Marketing consent is granted, we load LinkedIn’s Insight Tag from LinkedIn (snap.licdn.com) with partner identifier configured for TrueCompanyOS.

Purpose: advertising measurement, conversion attribution (including when a Company Truth Score assessment is successfully completed), and LinkedIn audience/retargeting features offered by LinkedIn.

Category: Marketing. The tag does not load, initialize, or fire conversion events before Marketing consent. Withdrawing Marketing consent stops future loading and events from this site.

Data typically involved at a high level may include browser and device technical data, page interaction signals, approximate location derived from IP as processed by LinkedIn, cookie/advertising identifiers, and conversion events we choose to send (such as a completed Company Truth Score submission identifier used only for deduplication on your device).

You can change or withdraw Marketing consent anytime via Cookie Settings (site footer) or by contacting us. On withdrawal we clear the allowlisted first-party LinkedIn cookies on our domain: li_fat_id and li_sugr. LinkedIn may also set cookies on LinkedIn-controlled domains (for example .linkedin.com and px.ads.linkedin.com); those cannot be deleted by truecompanyos.com.

Email marketing consent collected inside Company Truth Score (nurture emails) is separate from website Marketing cookie consent and does not enable the LinkedIn Insight Tag.

We use processors and service providers to operate the Service, including:

• Supabase — authentication, database, and related backend infrastructure.
• Vercel — application hosting and delivery (including Vercel Web Analytics where enabled).
• OpenAI — where applicable to AI requests you initiate in the product.
• Stripe/Link — billing, checkout, Customer Portal, and Managed Payments (merchant of record for covered paid transactions).
• LinkedIn — advertising measurement and conversion attribution via the Insight Tag, only when Marketing cookie consent is granted.

Providers process data under our instructions or their own controller roles where applicable (for example Stripe as merchant of record for payment data).

Stripe/Link does not handle TrueCompanyOS product support, account access, feature problems, or data-rights requests about your company knowledge. Contact us for those.

Our providers may process data in countries outside your country of residence, including outside the European Economic Area.

Where international transfers occur, we rely on appropriate safeguards offered by providers (such as Standard Contractual Clauses or equivalent mechanisms) as applicable. We do not claim that no international transfers occur.

We retain personal data only as long as needed for the purposes above, including to operate workspaces you keep active, resolve disputes, enforce agreements, and meet legal obligations.

Exact retention periods are not listed here unless they are implemented and verified as fixed product rules. When you delete content or close an account, we delete or de-identify data according to our operational processes and legal requirements, subject to backup and security retention windows.

We apply technical and organizational measures appropriate to the risk, including access controls, encrypted transport, and provider security features.

No method of transmission or storage is completely secure. Please use strong authentication practices and limit workspace invitations to trusted people.

If you upload personal data about customers, employees, or other third parties into company knowledge, you act as a controller for that content and must have a lawful basis to process it.

TrueCompanyOS processes such workspace content to provide the Service to you.

Where applicable, you may have the right to:

• Access your personal data.
• Correct inaccurate personal data.
• Erase personal data.
• Restrict processing.
• Object to processing based on legitimate interests.
• Data portability for data you provided where processing is based on contract or consent and carried out by automated means.
• Withdraw consent where processing is based on consent.

Send data-rights requests to info@truecompanyos.com. We may need to verify your identity before fulfilling a request.

You also have the right to lodge a complaint with a supervisory authority. In Greece, this is typically the Hellenic Data Protection Authority (HDPA). You may also contact an authority in your habitual residence or place of work where applicable.

TrueCompanyOS is directed to business users and founders. It is not intended for children. We do not knowingly collect personal data from children for the Service.

AI features process content you submit to generate drafts and organization suggestions. These outputs are assistive. Important decisions about company messaging should involve human review.

We do not use AI outputs alone to make legal or similarly significant decisions about you without human involvement in the product workflow.

We may update this Privacy Policy from time to time. The “Last updated” date will change when we do. Material changes will be communicated through the Service or email where appropriate.

Privacy / data rights: info@truecompanyos.com. Support: support@truecompanyos.com. Address: Parmenidou 4, Greece.

Related pages: Terms of Service (Terms of Service), Privacy Policy (Privacy Policy), Refund and Cancellation Policy (Refund and Cancellation Policy), and Contact (Contact).