Privacy Policy

Last updated: July 2026

Information We Collect

We collect information you provide directly to us, such as when you create an account, use our services, or contact us for support.

How We Use Your Information

We use the information we collect to provide, maintain, and improve our services, to process transactions, and to communicate with you.

Analytics and Access Moderation

We use a self-hosted Umami analytics service to understand use of Truleaf. For signed-in users, an analytics session may be linked to the internal Truleaf account identifier. For service security, misuse prevention, and access control, we may also collect the IP address observed by our trusted server ingress. Network addresses and account-link proofs are encrypted at rest and masked in operator tools.

Legal Basis

Where applicable, we rely on our legitimate interests in protecting Truleaf, preventing misuse, and controlling access to the service. We balance those interests against the rights and freedoms of users.

Retention and Enforcement

Encrypted network observations are retained for up to 30 days. Records needed to enforce or audit an active access restriction may be retained for the restriction and applicable accountability period. When an IP restriction is applied to our website, the exact blocked address is sent to Vercel solely to enforce that restriction at the network edge. You may contact us to exercise applicable access, objection, restriction, or deletion rights.

Information Sharing

We do not share your personal information with third parties except as described in this policy or with your consent.

Data Security

We take reasonable measures to help protect your personal information from loss, theft, misuse, and unauthorized access.

Contact

If you have any questions about this Privacy Policy, please contact us at hello@truleaf.org