Privacy Policy.
- We don't sell your personal information. Ever.
- We don't share it with anyone who doesn't have a contract with us — and the contract has teeth.
- Truss doesn't use your customer data to train AI models. AI features are powered by Google Gemini (listed as a sub-processor) — data is sent only when an AI feature is in use, governed by Google's enterprise terms.
- You can access, export, correct, or delete your data any time, and we'll help.
- If we ever need to change anything important about how we handle data, we'll email you before it takes effect.
The rest of this page is the legal version of those promises. Plain English where we can, formal where the law requires.
1.Who we are
"Truss," "we," "us," and "our" mean Truss Platform LLC, a New Hampshire limited liability company. We provide the Truss Platform — a suite of software products for small businesses, including Truss Desk and Truss Automation (the "Service"). If you have a question about this policy or how your data is handled, you can reach us at privacy@trussapp.co.
2.Scope of this policy
This Privacy Policy describes how we collect and handle personal information about visitors to our marketing website, prospective customers, and the individual users of accounts on our Service.
It does not cover the customer content you (or your customers) submit to the Service — for example, the support tickets, contact records, time entries, and workflow data stored in Truss Desk or Truss Automation. That data is processed on your behalf as your service provider, governed by our Data Processing Addendum, and is not used or disclosed except as you direct.
3.What we collect
Information you give us
- Account info: your name, work email, company name, role, and the password you set when you sign up.
- Billing info: payment-method details, billing address, and tax ID. Card numbers are tokenized by our payment processor (Stripe) — we never store them.
- Support & sales messages: the content of emails, demo requests, and chats you send us.
- Application info: if you apply for a job or join an early-access list, the information you provide on those forms.
Information we collect automatically
- Usage data: the pages you view, the features you use, timestamps, and (in the product) the actions you take.
- Device & log data: IP address, browser type, operating system, language, referring page, and crash data.
- Cookies and similar technologies: see section 6.
Information from third parties
- Single sign-on providers (Google, Microsoft, Okta, Azure AD, etc.) — if you sign in through one of them, we receive the basic profile info you've authorized them to share.
- Public sources — for example, LinkedIn or your company website, if we need to research a sales lead.
4.How we use it
We use the personal information described above to:
- Provide, maintain, secure, and improve the Service.
- Authenticate users and prevent abuse.
- Send service-related messages (security alerts, outage notices, billing receipts, policy changes).
- Provide customer support and respond to your requests.
- Conduct sales, marketing, and research — including sending product updates you've opted in to.
- Comply with legal obligations and enforce our Terms of Service.
We do not use the personal information of your end-users (e.g., the contacts who write into your help desk) for any of the above. That data is processed only as your service provider, under the DPA.
5.How we share it
We do not sell personal information. We share it only as described below.
- Sub-processors: third-party vendors who help us run the Service (cloud hosting, payment processing, email delivery, etc.). Each one is bound by a written contract that requires confidentiality and a level of protection at least as protective as ours. Our current list lives at trussapp.co/subprocessors.
- Your team: if you're an end-user on a Truss account, the account owner and administrators can see your account and usage information.
- Legal & safety: when required by law, court order, or to protect the rights, property, or safety of Truss, our users, or the public.
- Business transfers: if Truss is involved in a merger, acquisition, or asset sale, we may transfer personal information as part of that transaction. You'll be notified by email and on this page.
- With your consent: for anything not described above.
6.Cookies and similar technologies
We use cookies and similar technologies to keep you signed in, remember your preferences, secure the Service, understand how it's used, and (with your consent where required) measure marketing performance.
You can disable non-essential cookies in your browser settings or through our cookie banner where one is required. Disabling some cookies may break parts of the Service.
7.How long we keep your data
- Account data: kept while your account is active, plus 30 days after cancellation so you can come back or export your data. After day 31, it's deleted from production systems. Encrypted backups are rolled off within an additional 60 days.
- Billing records: kept for at least seven years to meet US tax and accounting obligations.
- Marketing and prospect data: kept for two years after the last meaningful interaction, then deleted.
- Logs and analytics: kept for thirteen months by default, in aggregated or pseudonymized form thereafter.
8.Your rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you.
- Correct inaccurate or incomplete information.
- Delete your personal information ("right to be forgotten").
- Export your data in a portable format.
- Restrict or object to certain processing.
- Withdraw consent where we relied on consent to process your data.
To exercise any of these rights, email privacy@trussapp.co. We don't charge a fee, we don't make you fill out a form, and we'll respond within 30 days — usually much faster. You may also lodge a complaint with your local data-protection authority.
Under California's CCPA / CPRA, you have specific rights including the right to know what we collect, the right to delete, the right to correct, and the right to opt out of "sales" or "sharing." For the record: we don't sell or share personal information for cross-context behavioral advertising.
9.International transfers
Truss is based in the United States, and our infrastructure is in the United States. If you're accessing the Service from outside the US, your information will be transferred to and processed in the US. We use Standard Contractual Clauses (SCCs) and additional safeguards for personal data subject to GDPR and similar laws.
10.Children's privacy
The Service is not directed to children under 16, and we do not knowingly collect personal information from anyone under that age. If you believe a child has provided us with personal information, contact us and we'll delete it.
11.Changes to this policy
If we make a material change to this policy, we'll email account holders and post a notice on the Service before the change takes effect. The "Last updated" line at the top of this page always reflects the current version.
12.How to contact us
Privacy questions, requests, or complaints — email privacy@trussapp.co.
Mail can be sent to:
Truss Platform LLC
500 N Commercial St, Suite 502
Manchester, NH 03101
United States