Privacy Policy

This Privacy Policy explains what Truthline Inc. ("we," "Truthline") collects, how we use it, and the choices you have. We aim to handle as little data as possible to deliver the Service.

What we collect

Account data: name, email, and password hash for authentication. SSO sign-ins use the identity provider's user identifier; we do not store passwords for SSO accounts.

Workspace data: source code, commit metadata, pull-request metadata, build / deploy logs, and incident records you connect. This is the analytical input for every signal Truthline surfaces.

Usage data: anonymized product analytics (page views, feature usage). We do not sell this data and we honor Do-Not-Track headers.

What we don't collect

We do not read your production database contents, your customers' personal data, or anything outside the sources you explicitly connect. We do not train external models on your code.

How we use it

To compute drift, ownership, risk, and other signals shown in your dashboards. To send transactional emails (verifications, invites, alerts). To provide support when you contact us. That's it.

Where data lives

Workspace data is stored encrypted at rest in the region matching your workspace's choice (US, EU, or APAC). All traffic between you and Truthline is encrypted in transit (TLS 1.3).

Sharing

We don't sell or share workspace data with third parties for advertising. Sub-processors used to run the Service (cloud hosting, email delivery) are listed in our DPA and bound by data-processing agreements.

Your rights

Export, correct, or delete your data anytime from Settings → Account. Workspace owners can purge an entire workspace from Settings → Organization → Delete. We respect GDPR and CCPA rights including access, portability, and erasure requests; contact [email protected].

Retention

Active workspaces: data retained while the workspace exists. Deleted workspaces: purged within 30 days. Backups retained up to 90 days for disaster recovery, then irretrievably destroyed.

Children

The Service is not directed to children under 16 and we don't knowingly collect data from them.

Changes

We post material changes 30 days before they take effect, via email and an in-app banner.

This is a demo Privacy Policy drafted for the Truthline prototype. The production version, vetted by counsel and aligned with the actual data-processing flows, ships before paid signups open.