Privacy Policy

1. Who we are

TrueSum ("we", "us") is a profitability analytics dashboard for e-commerce merchants, operated by Elie Roth (contact: hello@truesum.ai). This policy describes what data TrueSum processes and why.

2. What TrueSum does

TrueSum connects to a merchant's own business accounts (Shopify, PayPal, Meta Ads, and optionally Google Ads, TikTok Ads, and TikTok Shop) to compute profitability analytics for that merchant. The data processed belongs to the merchant and is only ever displayed back to that merchant.

3. Data we process

• Order financials: totals, taxes, fees, refunds, product costs, and shipping countries from the connected store.
• Pseudonymous customer IDs: numeric platform identifiers used solely to distinguish new from returning customers. TrueSum does not store customer names, email addresses, phone numbers, or street addresses.
• Advertising metrics: spend, impressions, clicks, and conversions from connected ad accounts.
• Payment records: payout, fee, dispute, and gift-card data from the connected payment providers.
• Access tokens: OAuth tokens for connected accounts, stored server-side, used exclusively to fetch the merchant's own data, and never exposed to the browser.

4. Google API Services

TrueSum's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google Ads data is used only to display the merchant's own advertising performance inside TrueSum, is never sold, never used for advertising targeting, and never read by humans except with explicit permission for support.

5. Where data lives

Data is stored on Convex (database and backend, hosted in the EU, eu-west-1) and served through Vercel (web hosting). We do not sell data or share it with any third party beyond these processors.

6. Cookies & tracking

TrueSum sets no advertising or analytics cookies. The dashboard stores a single session token in the browser's local storage to keep you signed in; it expires automatically.

7. Retention & deletion

Connected-account data is retained while the account connection is active. Disconnecting an integration stops synchronization; merchants can request full deletion of their data at any time via hello@truesum.ai, which we honor within 30 days.

8. Your rights

Under the GDPR you may request access, correction, export, or deletion of personal data, and you may lodge a complaint with a supervisory authority. Because TrueSum deliberately avoids storing directly identifying customer data, most requests concern account holders themselves.

9. Changes

We will post any changes to this policy on this page and update the date above.