Truvee
Truvee is identity verification, not a background or credit check. For decisions covered by the FCRA (employment, tenancy, credit, insurance), pair Truvee with a licensed CRA.
01Legal

Privacy Policy

Last updated: September 20, 2026
Effective date: April 30, 2026

1. Introduction

Truvee LLC ("Truvee," "we," "us," or "our") provides identity verification services through truvee.net (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information.

By using the Service, you agree to this Privacy Policy. If you do not agree, do not use the Service.

2. Who We Are

Truvee LLC
210 Executive Drive, Suite 300
Cranberry Township, PA 16066
Contact: sales@truvee.net

3. Information We Collect

A. Information You Provide as a Sender

  • Name, email address, password
  • Display name (shown to recipients)
  • Recipient name and email address
  • Purpose of verification (free-text field)
  • Optional document attachments
  • Payment information (processed by Stripe; we do not store card numbers)

B. Information We Collect About Recipients

Our identity provider processes document and live-face verification under its own privacy policies. With the recipient's consent before signing, Truvee includes government-ID front and back where applicable in the retained private PDF. These copies may contain sensitive personal details. The authorized requester and recipient can download and retain the PDF. Verification metadata includes:

  • Verified legal name
  • Date of birth (returned by our verification provider)
  • Country and document type
  • Verification status and timestamp
  • Government-ID copies retained within the private PDF; live selfies are processed by the identity provider and are not added to the standard PDF

We DO NOT receive or store:

  • Raw biometric template data
  • Liveness detection scores
  • Detailed face geometry

C. Information We Collect Automatically

  • IP address
  • Browser type and version
  • Device identifiers
  • Pages viewed and actions taken on the Service
  • Referrer URLs
  • Session cookies (for authentication and CSRF protection)

D. Information from Third Parties

  • Stripe (payment confirmations, verification results)
  • Cloudflare Turnstile (bot detection scores)
  • SendGrid (email delivery status)

4. How We Use Your Information

We use information to:

  • Provide and improve the Service
  • Process payments and prevent fraud
  • Generate sealed verification PDFs
  • Send transactional emails (verification invites, sealed PDF delivery, account notifications, refund confirmations)
  • Comply with legal obligations
  • Detect and prevent abuse, fraud, and security incidents
  • Respond to support inquiries

We do NOT:

  • Sell your personal information
  • Use your data for advertising
  • Share verification data with marketers
  • Train AI models on your verification data

5. Legal Basis for Processing (GDPR)

If you are in the European Economic Area, United Kingdom, or Switzerland, we process your data under the following legal bases:

  • Performance of a contract (delivering the Service)
  • Legitimate interests (fraud prevention, security)
  • Consent (biometric verification, marketing emails)
  • Legal obligations (tax, audit, compliance)

6. Sharing Your Information

We share information with:

A. Service Providers (Sub-processors)

  • Stripe (payments and identity verification)
  • AWS (sealed PDF storage in S3)
  • SendGrid (transactional email delivery)
  • Twilio and participating telecommunications networks/carriers: SMS phone numbers, message content and routing/delivery-status processing for transactional messages, confirmation codes, enrollment acknowledgements and keyword responses; not ID photographs, selfies, verification documents or the full website consent ledger.
  • Cloudflare (anti-bot protection)
  • Replit (application hosting)
  • Neon (database hosting)

B. Verification Counterparties

When you create or receive a Truvee, the verification result and sealed PDF are shared with the other party (sender and recipient).

C. Legal Compliance

We may disclose information if required by law, subpoena, court order, or to protect our rights or the safety of others.

D. Business Transfers

If Truvee is acquired or merged, your information may be transferred to the acquiring entity. We will notify you of any such change.

7. Data Retention

  • Sealed verification PDFs: 7 years (for legal record-keeping)
  • Account data: Until you delete your account
  • Audit logs: 7 years
  • Email delivery logs: 90 days
  • Session cookies: 30 days
  • Verification metadata: 7 years
  • Payment records: 7 years (for tax and accounting compliance)

You may request deletion of your account and associated data at any time (see Section 9).

8. Data Security

We implement industry-standard security measures:

  • TLS 1.2+ encryption in transit
  • AES-256 encryption at rest (S3, database)
  • Bcrypt password hashing (cost factor 12)
  • CSRF protection on all state-changing requests
  • Rate limiting on authentication endpoints
  • Email verification for sensitive actions
  • Cloudflare Turnstile bot protection
  • Webhook signature verification

No system is 100% secure. We cannot guarantee absolute security of your information.

9. Your Rights

A. All Users

  • Access your personal information
  • Correct inaccurate information
  • Delete your account and data
  • Export your data in a portable format
  • Withdraw consent for biometric verification

B. California Residents (CCPA / CPRA)

  • Right to know what personal information we collect
  • Right to delete personal information
  • Right to correct inaccurate information
  • Right to opt out of "sale" or "sharing" (we do not sell or share for cross-context behavioral advertising)
  • Right to limit use of sensitive personal information
  • Right to non-discrimination for exercising rights

C. EU/UK/Swiss Residents (GDPR)

  • All rights above
  • Right to data portability
  • Right to object to processing
  • Right to lodge a complaint with a supervisory authority

D. Illinois Residents (BIPA)

See our Biometric Consent Disclosure for specific BIPA disclosures and rights.

E. Texas Residents (CUBI)

See our Biometric Consent Disclosure for specific CUBI disclosures.

F. Washington Residents (My Health My Data Act)

See our Biometric Consent Disclosure for specific disclosures.

To exercise any right, email sales@truvee.net or use the data deletion request form at truvee.net/data-deletion.

10. Children

The Service is not intended for users under 18. We do not knowingly collect data from anyone under 18. If we learn we have collected data from a minor, we will delete it promptly. If you believe a minor has used the Service, contact sales@truvee.net.

11. International Transfers

Truvee operates from the United States. If you access the Service from outside the US, your data will be transferred to and processed in the US. By using the Service, you consent to this transfer. For EU/UK/Swiss data subjects, we rely on Standard Contractual Clauses with our sub-processors where applicable.

12. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites. Review their privacy policies before providing information.

13. Cookies and Tracking

We use essential cookies for authentication and security. We do not use advertising cookies, third-party trackers, or behavioral profiling. See our Cookie Policy for details.

14. Not a Consumer Reporting Agency

Truvee is NOT a consumer reporting agency under the Fair Credit Reporting Act ("FCRA"). Truvee output is NOT a "consumer report" and may not be used for:

  • Employment decisions
  • Tenancy or housing decisions
  • Credit decisions
  • Insurance underwriting
  • Government licensing decisions
  • Any other "permissible purpose" under the FCRA

You may not use the Service for any FCRA-regulated purpose.

15. Text Messaging

We use mobile numbers and SMS consent information to provide optional Truvee Verification Alerts. Account-holder and recipient phone-confirmation evidence establishes possession before lifecycle alerts, not legal identity. Request IP information also enforces shared network abuse limits.

We process the subscribed phone, account or verification context, consent timestamp, source page, request IP and revocation evidence; confirmation evidence, expiry and attempts; enrollment acknowledgement intent, attempts and retry status; message content, provider identifiers and delivery/status information; and STOP/suppression evidence. Codes are stored as digests, not plaintext; the confirmation code is necessarily included in the text processed for delivery.

We do not sell mobile numbers or share mobile information, SMS opt-in data or consent with third parties or affiliates for their marketing or promotional purposes.

Twilio and participating telecommunications networks/carriers process phone numbers, message content and routing/delivery information needed to provide SMS and service responses. Necessary delivery processing is distinct from third-party marketing sharing. This program does not send Twilio ID photographs, selfies, verification documents or the full website consent ledger.

Consent, confirmation, delivery and suppression information is retained for program operation, abuse prevention, honoring opt-outs and applicable compliance obligations. No automatic deletion schedule is promised. Contact support for questions about access or deletion; suppression information may be needed to continue honoring an opt-out.

SMS is optional. See SMS Terms for frequency, STOP, HELP and rejoining. Support: sales@truvee.net or 724-612-0716.

16. Changes to This Policy

We may update this Privacy Policy. Material changes will be posted on this page with a revised "Last updated" date and, where required by law, communicated via email. Continued use of the Service after changes constitutes acceptance.

17. Contact

For privacy questions, complaints, or to exercise your rights:

Truvee LLC
Attn: Privacy
210 Executive Drive, Suite 300
Cranberry Township, PA 16066
sales@truvee.net