How Truvara handles your data.

Truvara is the entity responsible for this website and for the limited data described here. This policy covers: (a) our marketing website; (b) account creation, licensing, and payments; and (c) the Compass desktop application. It does not govern how third-party AI providers handle content you send them using your own API key — see Section 5.

When you visit our website or contact us, we may collect:

• Contact and inquiry details you submit through forms — such as your name, work email, company, and message — when you request a demo, sign up for updates, or contact support.
• Usage and device data collected automatically, such as IP address, browser type, pages viewed, and referring source, via cookies and similar technologies.
• Marketing and CRM data we maintain about prospects and customers to manage outreach and relationships.

We use this to respond to inquiries, operate and improve the site, measure marketing, and communicate with you. You can control cookies through your browser and opt out of marketing emails at any time.

Your workspace content stays local. Documents, collections, evidence, attachments, and agent run history are stored on your device (in a local database) and are not transmitted to or stored by Truvara.

Telemetry we do collect. To operate, secure, and improve Compass, we collect the following diagnostic and usage data:

• Agent harness telemetry — full operational telemetry from the agent runtime, such as which tools ran, execution steps, timing, and errors, so we can diagnose failures and improve agent reliability.
• Product usage and behaviour — click trails and interaction data describing how features are used within the app.
• Performance and security data — including crash reports, error logs, and stability metrics.

What telemetry never includes. This telemetry does not include the content of files or artifacts you provide to a prompt, and does not include your API keys or other sensitive credentials. Your workspace content and keys stay on your device.

If you create an account or purchase a license, we (and our payment and subscription providers) collect the information needed to provide and bill for the service — such as your name, email, organization, and license/subscription status. Payment card details are processed by our payment provider and are not stored by Truvara.

Compass lets you connect your own API key to an AI provider of your choice (for example, Anthropic, OpenAI, Google, or a local model you run yourself). When you use AI features, the content you choose to process is sent directly from your device to that provider and is governed by that provider's terms and privacy policy. Truvara does not act as an intermediary for this content and does not receive or store it. We encourage you to review your chosen provider's data-handling and training policies. If you run a local model, no content leaves your device.

We use the information we collect to provide, secure, and improve our website and services; to process accounts, licenses, and payments; to respond to inquiries and provide support; to send service and, where permitted, marketing communications; and to comply with legal obligations. We do not sell your personal information, and we do not use your compliance data to train AI models.

We share personal data only with service providers who help us operate (such as hosting, analytics, CRM, payment, and email providers), and only as needed to perform those services; when required by law or to protect our rights; and in connection with a business transfer such as a merger or acquisition. We do not sell personal information.

We retain website and account data only as long as needed for the purposes described here or as required by law, then delete or anonymize it. Because your Compass workspace content lives on your device, you control its retention and deletion directly.

We use reasonable technical and organizational measures to protect the information we hold. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. For workspace content stored locally, security also depends on the protections on your own device.

Depending on where you live, you may have rights to access, correct, delete, or port your personal data, to object to or restrict certain processing, and to withdraw consent. You can also opt out of marketing communications at any time. To exercise any of these rights, contact us using the details below. We will respond in line with applicable law, and we do not discriminate against you for exercising your rights.

We may process and store information in countries other than where you are located. Where required, we use appropriate safeguards for such transfers. Note that BYOK content is sent by you directly to your chosen AI provider and may be processed wherever that provider operates.

Our website and Compass are intended for business and professional use and are not directed to children. We do not knowingly collect personal information from children.

We may update this policy from time to time. We will post the revised version here and update the “Last updated” date. Material changes will be communicated as required by law.

Questions or requests about privacy? Contact us at care@truvara.ai.