Draft - this text still has to be reviewed by a lawyer before it applies.
Last updated: 24 September 2026
This page explains, in plain words, what COMPANY_NAME does with personal data when you use Truva, and with the company data it shows.
Who is responsible
COMPANY_NAME, COMPANY_ADDRESS, company number COMPANY_KBO_NUMBER, is the controller of the data described here. For any question about your data, write to COMPANY_EMAIL.
For the contact details you keep in your own follow-up, you are the controller and we are your processor: see the data processing agreement (https://www.truva.be/en/data-processing).
What we process about you
When you use the app, we keep:
- your e-mail address, your language and your settings;
- the description of your trade, your searches, the companies you sorted and the notes you wrote;
- for the full plan: your invoice details (name, address, VAT number) and the state of your subscription; your card details stay with Stripe;
- technical records: your IP address for a short time to limit abuse, and anonymous counts of what is used (never the content).
Why, and on what basis
- to run your account and the service you asked for: the contract between us;
- to invoice and keep the accounts: our legal obligations;
- to protect the service against abuse and to know which features are used: our legitimate interest.
Company data from the register
The companies shown come from the KBO's open data (FPS Economy). We show only what the company published itself, and never the contact details of a sole trader's business.
To spread the calls, we count how many businesses approached a company over the last weeks, never which ones, and list a company many have approached further down.
A company can object at any time and never appear again: https://www.truva.be/en/opt-out.
The contact form and the opt-out
A message sent through the contact form is e-mailed to us, so we can answer you; we keep it as long as needed to deal with it. An opt-out request keeps the company number and your e-mail address for as long as the opt-out applies, as proof of the request.
Who helps us
A few providers process data for us, under contract and only for what they do for us:
- Stripe: payments and invoices of the full plan;
- our e-mail provider: sending sign-in codes, confirmations and summaries;
- a language-model provider, reached through our LiteLLM gateway: it reads the description of your trade and your search sentences to turn them into a search; it never receives contact details;
- our hosting provider, in the European Union: the servers and the database.
How long we keep data
- your account and its content: as long as the account exists; you can delete it at any time;
- an account never confirmed and never used: deleted after 30 days;
- the search sentences you type: 12 months, to improve the service, with no link to the companies found;
- invoices: 7 years, as Belgian accounting law requires;
- technical records: a few weeks.
Cookies
We use only what the site needs to work, so there is no cookie banner:
- a session cookie, which keeps you signed in (30 days at most);
- a security cookie (CSRF), which protects the forms;
- your language choice, kept in your browser.
No tracking
No analytics, no advertising, no social-network buttons, no tracking across sites.
Your rights
You can ask to see, correct or delete your data, to limit its use, to receive it in a file (the follow-up exports as CSV), and object to its use. Write to COMPANY_EMAIL; we answer within a month.
You can also complain to the Belgian Data Protection Authority (www.dataprotectionauthority.be).