Privacy Notice

• Account data — name, email address, company name, and login credentials, so we can create and secure your account.
• Subscription data — your plan, billing interval, renewal dates, and subscription status, so we can give you the access you paid for.
• Content you upload — property lists, addresses, call notes, and research results stored in your workspace.
• Usage and technical data — lookups run, timestamps, device and browser information, IP address, and error logs, used for security, billing limits, and improving the product.
• Support messages — what you send us when you ask for help.

Payment card details are collected and processed by Paddle, not by us. We never see or store your full card number.

We process account, subscription, and content data to perform our contract with you. We process usage, technical, and security data on the basis of our legitimate interests in keeping the service secure, preventing abuse, and improving it. We process data for marketing only where you consent, and we retain records where the law requires it.

• Service providers who host and run the platform (cloud hosting, database, analytics, error monitoring, and the licensed data providers who return owner and contact records).
• Paddle, our Merchant of Record, for the sale of subscriptions, payments, subscription management, tax compliance, and invoicing.
• Professional advisers such as legal and accounting providers.
• Authorities where we are legally required to disclose.

We do not sell your personal data.

TrueTrace surfaces information about property owners from public records and licensed data sources. That information is provided for lawful business use only and must not be used for credit, insurance, employment, or tenant screening decisions. If you are a property owner and want to know how your information appears in our sources, contact us and we will point you to the originating record holder.

We keep account and subscription data for as long as your account is active and for up to seven years afterwards where tax and accounting rules require it. Workspace content is deleted or anonymised within 30 days of account closure, unless you ask us to remove it sooner.

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, to object to processing, and to withdraw consent. Residents of the UK and EEA may also complain to their supervisory authority; we respond to requests within one month. Where data is transferred outside the UK/EEA, we rely on Standard Contractual Clauses or an adequacy decision.

We use encryption in transit and at rest, role-based access controls, and row-level database rules so that each account can only reach its own data. No system is perfectly secure, but we review our controls regularly.

We use essential cookies and local storage to keep you signed in and to keep the service secure. We do not use advertising cookies. You can clear or block cookies in your browser, though signing in will stop working if essential cookies are blocked.

Privacy questions or requests: support@gettruetrace.com.