Privacy Policy

1. Introduction

Truessay ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered academic writing service at truessay.com (the "Service").

This policy complies with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable data protection laws.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, and Google account information when you sign up via Google OAuth
• Payment Information: Payment details processed securely through Stripe (we do not store credit card numbers)
• Research Queries: Essay topics, search queries, and preferences you input into the Service
• Generated Content: Essays, citations, and research papers generated through our AI service

2.2 Automatically Collected Information

• Usage Data: Pages viewed, features used, time spent on the Service
• Device Information: IP address, browser type, operating system, device identifiers
• Cookies and Tracking: Session cookies for authentication and analytics (see our Cookie Policy)

2.3 Third-Party Data

• Academic APIs: We access Semantic Scholar and OpenAlex to retrieve academic papers for citation purposes
• AI Services: Your queries are processed through Google Gemini AI to generate research content

3. How We Use Your Information

We use collected information for:

• Service Delivery: Generate AI-powered research essays with academic citations
• Account Management: Authenticate users, manage subscriptions, and process payments
• Quota Enforcement: Track daily essay generation limits based on subscription tier
• Service Improvement: Analyze usage patterns to improve AI models and features
• Communication: Send transactional emails (payment confirmations, subscription updates)
• Legal Compliance: Comply with applicable laws and regulations
• Security: Detect and prevent fraud, abuse, and security incidents

4. AI and Automated Decision-Making

Important Disclosure: Our Service uses artificial intelligence (Google Gemini) to generate research content. This involves:

• Automated processing of your research queries to generate essay content
• AI-driven analysis of academic papers to create citations and references
• No automated decisions affecting your legal rights or significant interests

In compliance with the EU AI Act (fully enforced August 2026), GDPR Article 22, and CCPA requirements, you have the right to:

• Understand how AI is used to process your data
• Request human review of AI-generated content (contact support)
• Opt-out of AI processing (note: this may limit Service functionality)

5. Data Sharing and Disclosure

5.1 Third-Party Service Providers

• Google (Authentication & AI): OAuth login and Gemini AI processing
• Stripe: Payment processing and subscription management
• Cloudflare: Hosting infrastructure and edge computing
• Semantic Scholar & OpenAlex: Academic paper retrieval

5.2 We Do NOT Sell Your Data

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

5.3 Legal Requirements

We may disclose your information if required by law, court order, or to protect our rights, safety, or the rights of others.

6. Data Storage and Security

• Storage Location: Data is stored on Cloudflare's global network (D1 database)
• Encryption: Data in transit is encrypted using TLS 1.3; data at rest is encrypted
• Access Controls: Strict access controls limit who can access your data
• Retention: We retain data as long as your account is active or as needed for legal compliance

While we implement industry-standard security measures, no method of transmission over the Internet is 100% secure. You use the Service at your own risk.

7. Your Rights (GDPR & CCPA)

7.1 GDPR Rights (EU Users)

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restriction: Limit how we process your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

7.2 CCPA Rights (California Users)

• Right to Know: Know what personal information we collect and how it's used
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the sale of personal information (we don't sell data)
• Right to Non-Discrimination: Equal service regardless of privacy choices

To exercise your rights: Email us at privacy@truessay.com or use the account settings page. We will respond within 30 days (GDPR) or 45 days (CCPA).

8. International Data Transfers

If you access the Service from outside the United States, your data may be transferred to and processed in the United States or other countries. We ensure appropriate safeguards are in place for international transfers, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions where applicable
• Compliance with GDPR Article 44-50 requirements

9. Children's Privacy

Our Service is not directed to individuals under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

For questions about this Privacy Policy or to exercise your rights, contact us at:

EU Representative: If you are located in the EU and have concerns about our data practices, you have the right to lodge a complaint with your local supervisory authority.