Privacy Policy

The data controller responsible for your personal data is TRUE CREATIVE MANAGEMENT LIMITED, trading as Truvo, registered office at 8 Primrose Avenue, Newton Mearns, G77 6FS, Scotland, United Kingdom. You can reach us at support@trucreman.shop or +44 7219711579 for any privacy matter, including to exercise your rights.

• Account data — name, email address and login credentials.
• Subscription and billing data — plan, billing interval, billing address and the last four digits and card brand as returned by our payment processor. We do not store full card numbers.
• Creative inputs — the prompts, briefs, reference images and files you submit to generate copy, images and video.
• Generated outputs — the assets the service produces for you.
• Support and lead data — messages you send through our contact and studio-brief forms.
• Technical and usage data — IP address, device and browser type, pages viewed and feature usage.

We collect data: directly from you when you register, subscribe, submit a brief or contact us; automatically through cookies and similar technologies as you use the site; and from our payment processor, which confirms the outcome of a transaction.

• Provide the service (create and deliver your creative assets, manage your account) — performance of a contract.
• Take payment and manage subscriptions — performance of a contract.
• Respond to support and lead enquiries — legitimate interests and, where relevant, steps prior to entering a contract.
• Secure and improve the service, prevent abuse — legitimate interests.
• Analytics and non-essential cookies — your consent.
• Meet legal and tax obligations — compliance with a legal obligation.

Where we rely on consent (for example, US state privacy rights under the CCPA/CPRA and equivalent laws), you may withdraw it at any time.

Payments are processed by Stripe. Card details are entered on Stripe's secure, PCI-DSS compliant checkout and are transmitted directly to Stripe. Truvo never receives or stores your full card number, CVC or expiry. Stripe acts as an independent controller for the payment data it processes under its own privacy policy.

Account and subscription records are used to operate your plan, apply your usage allowance, issue receipts and provide support. Support and brief submissions are used only to reply to you and improve our service, and are not sold.

We use strictly necessary cookies to run the site and keep you signed in, and — with your consent — analytics cookies to understand aggregate usage. You can control cookies through your browser and our cookie controls. See our Cookie Policy for details.

We share personal data only with service providers who process it on our behalf under contract, including: our payment processor (Stripe), cloud hosting and deployment (Vercel), database, authentication and storage (Supabase), and the AI model providers that generate copy, images and video. Each is bound to appropriate confidentiality and security obligations.

Our providers may process data outside your country, including in the United States. Where data leaves the UK or EEA, we rely on appropriate safeguards such as UK International Data Transfer Agreements, the EU Standard Contractual Clauses or an adequacy decision.

We keep account and billing records for as long as your account is active and thereafter as required for legal, tax and accounting purposes. Uploaded reference material is cached only to fulfil your request and is cleared by default within 30 days. Support and lead messages are kept only as long as needed to handle your enquiry.

We use encryption in transit, access controls, secret management and least-privilege practices. Secret keys are held server-side only and are never exposed to the browser. No system is perfectly secure, but we work to protect your data and to notify you and regulators where required by law.

Subject to applicable law, you may request access to, correction of, deletion of, or a copy of your personal data; object to or restrict certain processing; and withdraw consent. US residents may opt out of sale or sharing (we do not sell personal data) and exercise non-discrimination rights. To exercise any right, email support@trucreman.shop.

The service is not for children under 13, who may not use it. Users aged 13–17 must have verifiable parental or guardian consent. We do not knowingly collect data from children under 13; if we learn we have, we will delete it. We enforce a zero-tolerance stance on any sexualised content involving minors, as set out in our Acceptable Use Policy.

For any privacy question or complaint, contact us at support@trucreman.shop or +44 7219711579. If you are in the UK you may also complain to the Information Commissioner's Office (ICO); EEA residents may contact their local supervisory authority. This policy is governed by the laws of England and Wales.