Privacy Policy

Last updated: March 2026 · Effective immediately

TrueMerit ("we", "our", or the "Company") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

1. Information We Collect

We collect information you provide directly to us, including:

Account information: Name, email address, password (hashed), organization, role.
Usage data: Feature interactions, roadmap items created, status updates, and session timestamps.
Communication data: Messages submitted through our contact and callback forms.
Device & technical data: Browser type, IP address, OS, and session tokens stored in your browser's localStorage.

2. Cookies and Local Storage

We use browser localStorage to maintain your authentication session and application preferences. We do not use third-party advertising cookies. You can clear localStorage at any time via your browser settings.

3. How We Use Your Information

To provide and operate the TrueMerit platform and all its features.
To authenticate your identity and maintain secure session management.
To send product updates, newsletters (only if explicitly subscribed), and account notifications.
To improve our AI models and product features using anonymized aggregate usage data.
To respond to your support requests and callback submissions.

4. Data Storage and Security

Your data is stored on Supabase-managed PostgreSQL databases hosted on cloud infrastructure within India (where applicable). We enforce Row Level Security (RLS) policies — unauthenticated access is strictly blocked. Data at rest is encrypted (AES-256). Data in transit is protected by TLS 1.3.

5. Data Sharing

We do not sell, rent, or trade your personal information. We may share data with:

Infrastructure providers: Supabase (database, auth), cloud hosting providers.
Legal authorities: Only when required by applicable law, court order, or regulatory obligation.

6. Your Rights (DPDP Act 2023)

Under India's Digital Personal Data Protection Act 2023, you have the right to:

Access the personal data we hold about you.
Correct inaccurate or incomplete information.
Request erasure of your data (right to be forgotten).
Withdraw consent at any time by contacting us at privacy@truemerit.online.

7. Data Retention

We retain your account and roadmap data for as long as your account is active. If you request deletion, we will remove your personal data within 30 business days, except where retention is required by law.

8. Children's Privacy

TrueMerit is not directed at individuals under 18. We do not knowingly collect data from minors. If you believe a minor has provided us with data, contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or a prominent notice in the product. Continued use after notice constitutes acceptance.

10. Contact

Data Protection Officer
TrueMerit Technologies
Email: privacy@truemerit.online