01Who we are and what this covers
truffleroot, inc. ("truffleroot", "we", "us") runs the website at truffleroot.ai. This policy explains how we handle personal information collected through the website and through messages you send us.
It does not cover data that customers share with the truffleroot product, such as incidents, telemetry, runbooks or configuration. That data is handled under the customer's written agreement with us, including any data processing terms, and those terms take precedence.
02What we collect
Information you give us. When you use the contact form we collect your name, work email, company, role and the message you write. If you email us directly, we receive whatever you include in that email.
Information collected automatically. Like most websites, our hosting infrastructure records basic technical details when you load a page: your IP address, browser and device type, the page requested, the referring page and the time of the request. We use these logs to keep the site running and secure.
What we do not collect. The website does not use analytics tools, advertising cookies, tracking pixels or social media plugins. Our fonts are served from our own domain, so loading the site does not send your information to a font provider.
03How we use it
We use the information described above to:
- reply to your enquiry and arrange any conversation or walkthrough you ask for
- understand whether truffleroot is a fit for your environment
- keep the website available, diagnose problems and protect it against abuse
- comply with our legal obligations and enforce our terms
We do not sell your personal information, we do not use it for advertising, and we do not use it to train machine learning models.
04Legal bases for processing
If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases: our legitimate interest in responding to enquiries, developing customer relationships and securing the website; taking steps at your request before entering into a contract; and complying with legal obligations. Where we rely on legitimate interests, you can object at any time, as described below.
06How long we keep it
Enquiries and the correspondence that follows are kept for as long as we need them to respond, to continue the conversation and to meet our legal obligations. After that, we delete them.
Website logs are kept for 30 days and then deleted automatically.
07Security
We protect the information we hold with measures appropriate to its sensitivity, including encryption in transit, access controls and managed cloud infrastructure. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and will notify you where the law requires it.
08International transfers
truffleroot is based in the United States, and our service providers may process information in the United States and other countries. Where we transfer personal information out of the European Economic Area or the United Kingdom, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
09Your rights and choices
Depending on where you live, you may have the right to:
- access the personal information we hold about you and receive a copy of it
- correct information that is inaccurate or incomplete
- delete your information
- object to or restrict how we use it
- receive your information in a portable format
- withdraw consent, where we rely on consent
To make a request, email info@truffleroot.ai. We will respond within the time the law requires, and may need to verify your identity first. You can also ask someone to make a request on your behalf, and we will ask them for proof of authorisation. We will not treat you differently for exercising any of these rights.
If you are in the European Economic Area or the United Kingdom, you also have the right to complain to your local data protection authority.
10Children
The website is intended for business audiences and is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has sent us information, contact us and we will delete it.
11Changes to this policy
We may update this policy from time to time. When we do, we will change the "Last updated" date at the top of this page, and where a change is significant we will take reasonable steps to let you know.
12Contact
Questions about this policy or about your information can be sent to info@truffleroot.ai. truffleroot, inc. is the controller of the personal information described here.