Draft - this text still has to be reviewed by a lawyer before it applies.
Last updated: 24 September 2026
This agreement is part of the terms of use. It applies to the personal data you keep in Truva about the companies you prospect.
Who does what
For the prospects you keep - the companies you sorted, the contact details you revealed, the notes you wrote - your business is the controller: you decide why and how you use them. COMPANY_NAME processes them on your behalf, as your processor, only to provide the service.
The register's data as such, before you keep anything, is our own responsibility: see the privacy policy (https://www.truva.be/en/privacy).
What is processed
- people concerned: sole traders and contact persons of the companies you prospect;
- data: name, business address, activity, the e-mail address and phone number they published, and your notes;
- what we do with it: store it, show it to you, export it when you ask, and list new companies in your summary e-mails;
- for how long: as long as your account exists.
Our commitments
- we act only on your instructions, which are what you do in the app;
- everyone who works on the service is bound to confidentiality;
- we protect the data: encrypted connections, each business's data separated from the others' in the database itself, access limited to those who need it;
- we help you answer people who use their rights;
- we tell you without undue delay, and within 48 hours, about a breach that affects your data;
- when your account ends, you can export your data first; then we delete it, except what the law makes us keep.
Subprocessors
You allow us to rely on these subprocessors:
- Stripe (payments): only your own billing data, never your prospects;
- our e-mail provider: the e-mails we send you, including the names of new companies in your summaries;
- a language-model provider, through our LiteLLM gateway: your trade description and search sentences, never contact details;
- our hosting provider, in the European Union: all data, stored and processed there.
Changes and transfers
We tell you at least 30 days before adding or replacing a subprocessor; you may object and stop the service. When a subprocessor is outside the European Economic Area, the transfer relies on the European Commission's standard contractual clauses.
Checks
On request, we give you the information you need to check that we keep these commitments.