Privacy Policy

Controller: TrueCompanyOS, Sole proprietor / Individual business (Ατομική Επιχείρηση), Greece.

Contact for privacy and data-rights requests: info@truecompanyos.com.

Depending on how you use the Service, we may process:

• Account and profile data (such as name, email, and account preferences).
• Authentication data (credentials handled via our auth provider; we do not store raw payment card numbers).
• Workspace and company-content data you choose to upload or create (notes, documents, profiles, pitches, and related company knowledge).
• Usage and technical logs (such as IP address, device/browser metadata, timestamps, and product interaction events needed for security and reliability).
• Billing and subscription references (plan, status, customer/subscription identifiers, and related Stripe references — not full card PAN data).
• Support communications you send to us.
• Analytics and cookies where actually used on our website or application (for example deployment or product analytics tooling).

We process personal data to:

• Provide, operate, secure, and improve the Service.
• Create and manage accounts, workspaces, seats, and roles.
• Process AI-assisted organization and drafting requests you initiate.
• Handle subscriptions, invoices, and cancellations with Stripe/Link.
• Respond to support and data-rights requests.
• Comply with legal obligations and protect against abuse or fraud.

Where the GDPR applies, we rely on:

• Performance of a contract — to provide the Service you request.
• Legitimate interests — for securing the Service, preventing abuse, basic product improvement, and similar interests that do not override your rights.
• Legal obligations — where we must retain or disclose information to comply with law.
• Consent — only where we genuinely rely on consent (for example certain optional cookies or marketing, if offered). You may withdraw consent where it applies without affecting prior lawful processing.

We use processors and service providers to operate the Service, including:

• Supabase — authentication, database, and related backend infrastructure.
• Vercel — application hosting and delivery.
• OpenAI — where applicable to AI requests you initiate in the product.
• Stripe/Link — billing, checkout, Customer Portal, and Managed Payments (merchant of record for covered paid transactions).

Providers process data under our instructions or their own controller roles where applicable (for example Stripe as merchant of record for payment data).

Stripe/Link does not handle TrueCompanyOS product support, account access, feature problems, or data-rights requests about your company knowledge. Contact us for those.

Our providers may process data in countries outside your country of residence, including outside the European Economic Area.

Where international transfers occur, we rely on appropriate safeguards offered by providers (such as Standard Contractual Clauses or equivalent mechanisms) as applicable. We do not claim that no international transfers occur.

We retain personal data only as long as needed for the purposes above, including to operate workspaces you keep active, resolve disputes, enforce agreements, and meet legal obligations.

Exact retention periods are not listed here unless they are implemented and verified as fixed product rules. When you delete content or close an account, we delete or de-identify data according to our operational processes and legal requirements, subject to backup and security retention windows.

We apply technical and organizational measures appropriate to the risk, including access controls, encrypted transport, and provider security features.

No method of transmission or storage is completely secure. Please use strong authentication practices and limit workspace invitations to trusted people.

If you upload personal data about customers, employees, or other third parties into company knowledge, you act as a controller for that content and must have a lawful basis to process it.

TrueCompanyOS processes such workspace content to provide the Service to you.

Where applicable, you may have the right to:

• Access your personal data.
• Correct inaccurate personal data.
• Erase personal data.
• Restrict processing.
• Object to processing based on legitimate interests.
• Data portability for data you provided where processing is based on contract or consent and carried out by automated means.
• Withdraw consent where processing is based on consent.

Send data-rights requests to info@truecompanyos.com. We may need to verify your identity before fulfilling a request.

You also have the right to lodge a complaint with a supervisory authority. In Greece, this is typically the Hellenic Data Protection Authority (HDPA). You may also contact an authority in your habitual residence or place of work where applicable.

TrueCompanyOS is directed to business users and founders. It is not intended for children. We do not knowingly collect personal data from children for the Service.

AI features process content you submit to generate drafts and organization suggestions. These outputs are assistive. Important decisions about company messaging should involve human review.

We do not use AI outputs alone to make legal or similarly significant decisions about you without human involvement in the product workflow.

We may update this Privacy Policy from time to time. The “Last updated” date will change when we do. Material changes will be communicated through the Service or email where appropriate.

Privacy / data rights: info@truecompanyos.com. Support: support@truecompanyos.com. Address: Parmenidou 4, Greece.

Related pages: Terms of Service (Terms of Service), Privacy Policy (Privacy Policy), Refund and Cancellation Policy (Refund and Cancellation Policy), and Contact (Contact).