privacy policy

Last revised on September 9, 2026

This privacy policy describes how Truss ("we", "us", "our") collects, uses, and discloses information about you when you use the website heytruss.com (the "website"), the Truss personal assistant, and any related applications and services (together, the "services"). "You" means you as a user of the services.

the short version

• We never use your data to train AI models. Not ours, not anyone else's. There is no setting to find, because there is nothing to turn off.
• We never sell your data. We never give it to data brokers, advertisers, or ad networks. We do not show you ads.
• We use your data for one purpose: to do what you asked.
• You can see and delete everything we hold about you at any time, by texting the assistant or emailing contact@heytruss.com.

The rest of this policy is the detail behind those four sentences. If the detail ever appears to contradict them, the four sentences win.

what we collect

information you give us

• Contact details: your phone number, and your name and email address if you provide them. We use them to create your account, to reach you about the services, and so the assistant can text you back.
• Messages you send to the assistant, and anything you attach to them.
• Payment information, if you buy a paid plan. It is collected and stored by our payment processor, not by us. We see the last four digits of the card and the billing status.
• Anything else you choose to tell us, for example in an email to support.

information from accounts you connect

If you connect an account (for example an email or calendar account) so the assistant can act on it, the assistant reads what it needs to carry out your requests. That may include the content of messages, events, documents, and other private material you make available. It reads them to act for you. We do not use them for anything else.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to train AI models, to serve ads, or for any purpose other than providing the features you use. You can revoke our access at any time in your Google account settings or by asking the assistant, and we delete the data we received on request.

information we collect automatically

• A log of what the assistant did for you: the actions it took and when. It exists so you can check its work and so we can fix it when it goes wrong.
• Technical information: IP address, the device and carrier information that arrives with a text message, and timestamps.
• The website sets no cookies and runs no analytics or tracking scripts. Our hosting provider, Cloudflare, processes the IP address of each request to serve the site and block abuse.

We do not buy information about you from anyone.

how we use your information

We use your information to:

• do what you asked: understand your requests, plan and carry them out (including by dealing with third parties on your behalf when a task requires it), and reply to you;
• run your account, bill you if you are on a paid plan, and support you;
• keep the services secure, detect abuse, and debug failures;
• comply with the law and defend our legal rights.

That is the whole list. In particular:

We do not train AI models on your data. We do not use your messages, your connected-account content, the assistant's actions, or your usage data to train, fine-tune, or evaluate any AI model, ours or a third party's. This is not a default you can change. It is a rule.

We do not use your data for advertising. We do not build a profile of you for marketing, we do not target you, and we do not show you ads. We will contact you about Truss itself: a new feature, a change to this policy, a billing problem. You can tell us to stop and we will, except for messages we are legally required to send.

We do not sell your data. We do not "share" it for cross-context behavioral advertising, as California law defines those terms, and we have never done so.

We do not get paid to recommend things. If the assistant suggests a product, a restaurant, or a service, it is because it thinks that is what you want. Nobody paid for the placement, and we take no commission on what it buys for you.

who we share your information with

We share your information only when needed to do what you asked or to run the services:

• AI model providers. The assistant is built on third-party AI models. To answer you, we send the relevant parts of your request to those providers. They process it on our behalf under terms that prohibit them from training on it or using it for any other purpose.
• Service providers who help us run Truss: hosting, message delivery, payment processing, and email. They may use your information only to provide their service to us.
• Third parties you direct the assistant to deal with. If you ask it to book a table, it has to give the restaurant your name. It shares the minimum the task needs.
• Legal reasons. We may disclose information if the law requires it, to protect someone's safety, or to defend our legal rights. Where we are legally allowed to, we will tell you first.
• A successor. If Truss is acquired or merges with another company, your information may transfer to the new owner, who must honor this policy or give you notice and a chance to delete your data before anything changes.

We do not share your information with advertisers, ad networks, data brokers, or "business partners" for their own purposes. Not in identified form, not pseudonymized, not hashed.

how long we keep it

• Your messages and connected-account content: for as long as you have an account, so the assistant remembers context. You can delete any of it at any time.
• The log of the assistant's actions: 12 months, then deleted.
• Technical logs: 90 days, then deleted.
• Account details: for the life of your account and 30 days after you close it, then deleted, except billing records we must keep for tax and accounting purposes (up to 7 years).
• Support emails: 2 years.

Deleting your data. Text the assistant "delete my data" or email contact@heytruss.com. We delete everything within 30 days, and we confirm when it is done.

your rights

Wherever you live, you can ask us what we hold about you, ask us to correct it, ask us to delete it, and take a copy with you. Email contact@heytruss.com. We respond within 30 days, and we never treat you differently for asking. We verify requests by confirming the phone number or email address on the account. You may have someone you authorize make a request for you.

If you are a California resident, the California Consumer Privacy Act gives you the right to know what personal information we collect, use, and disclose; to delete it; to correct it; to opt out of its sale or sharing (we do neither); to limit the use of your sensitive personal information (we use it only to do what you asked); and to non-discrimination for exercising these rights.

If you live somewhere that gives you additional rights, for example the European Union, the United Kingdom, or Canada, you have those too, and the contact is the same.

Do Not Track and Global Privacy Control. We do not track you across websites, so there is nothing for these browser signals to switch off. We treat a Global Privacy Control signal as an opt-out request anyway.

children

Truss is for adults. We do not knowingly collect information from anyone under 18. If we learn that we have, we delete it. If you believe a child has given us information, email contact@heytruss.com.

security

We protect your data with encryption in transit and at rest, strict access controls, and logging of who accessed what. No system is perfectly secure, and an assistant that acts on your behalf carries its own risks: it can misread a request, take an action you did not intend, or be fed misleading instructions by a third party it interacts with. We put confirmation steps around consequential actions and keep the action log so you can check its work. Review what it does.

changes to this policy

We may update this policy, and when we do we change the date at the top. If a change is material, we will text or email you before it takes effect.

The commitments in "the short version" are the reason Truss exists. If we ever intended to weaken any of them, we would tell you plainly, at least 30 days in advance, and you would be able to delete your data before anything changed.

contact

Truss
San Francisco, California
contact@heytruss.com