Privacy Policy

1. Introduction

This Privacy Policy applies to Mytruffl, a service operated by Truffl, a company incorporated under the laws of France (mytruffl.com, “we,” “us,” or “our”). This policy explains how we collect, use, and share your personal information when you use our services.

2. Information We Collect

We collect information you provide directly to us when you:

• Create an account (via Google OAuth or email/password)
• Subscribe to a paid plan
• Use our lead generation or enrichment features
• Communicate with us

This may include your name, email address, Google profile information (when signing in via Google), payment information (processed by Stripe), and any other information you choose to provide. We also collect technical data such as IP address, browser type, and usage logs to operate and improve the service.

3. Use of Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process payments and manage subscriptions
• Communicate with you about your account and our services
• Respond to your comments, questions, and requests
• Monitor and analyze usage to improve the service
• Detect and prevent fraudulent or illegal activity
• Comply with legal obligations

4. Information Sharing and Disclosure

We may share personal information as follows:

• With your consent.
• Service providers: Stripe (payment processing), Anthropic (AI features), Google (authentication and data APIs), Resend (transactional email), PostHog (analytics), Sentry (error monitoring), and Render (hosting). Each provider processes data under their own privacy policies and data processing agreements.
• Legal requirements: If required by applicable law, regulation, or legal process.
• Protection of rights: To protect the rights, property, and safety of Mytruffl, our users, or others.

4.1 Legal Bases for Processing (GDPR)

We process your personal data under the following legal bases:

• Contract fulfillment (Art. 6(1)(b) GDPR): To provide the service you signed up for.
• Legitimate interests (Art. 6(1)(f) GDPR): For analytics, fraud prevention, and service improvement.
• Legal obligation (Art. 6(1)(c) GDPR): To comply with applicable laws.
• Consent (Art. 6(1)(a) GDPR): Where specifically required, such as marketing communications.

4.2 International Data Transfers

Some of our service providers (including AI and analytics providers) may process data outside the European Union. These transfers are conducted under Standard Contractual Clauses (SCCs) as approved by the European Commission under GDPR Article 46, or under an applicable adequacy decision. You may request more information about our transfer mechanisms by contacting us at contact@mytruffl.com.

5. Cookies and Tracking

We use cookies and similar technologies to operate and improve our service. These include:

• Essential cookies: Required for authentication and session management. These cannot be disabled.
• Analytics cookies: Used to understand how users interact with our service (PostHog). You may opt out by contacting us.
• Font and asset loading: We load fonts from Google Fonts. This involves a request to Google servers which may log your IP address.

By using our service, you consent to the use of essential cookies. For analytics cookies, you may withdraw consent at any time by contacting us at contact@mytruffl.com.

6. Data Retention

We retain your personal data for as long as necessary to provide our service and comply with our legal obligations. Specific retention periods:

• Account data: Retained for the duration of your account. Deleted within 30 days of account closure upon request.
• Payment records: Retained for 7 years to comply with French tax and accounting law.
• Server logs: Retained for up to 12 months.
• Subscription and billing history: Retained for 7 years after the end of the subscription.

7. Your Rights

Under GDPR, if you are located in the European Union, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (“right to be forgotten”)
• Object to or restrict our processing of your data
• Request portability of your data in a machine-readable format
• Withdraw consent at any time (where processing is based on consent)

Under the California Consumer Privacy Act (CCPA), if you are a California resident, you also have the right to know what personal information we collect, to request deletion, and to opt out of the “sale” or “sharing” of your personal information. We do not sell or share your personal information with third parties for advertising or marketing purposes.

To exercise any of these rights, please contact us at contact@mytruffl.com. We will respond within 30 days.

8. Supervisory Authority

If you are located in the European Union and believe we are unlawfully processing your personal information, you have the right to lodge a complaint with your local data protection authority. In France, this is the CNIL (Commission Nationale de l’Informatique et des Libertés), reachable at www.cnil.fr.

9. Data Usage & Your Responsibility as Data Controller

Mytruffl is a B2B data discovery tool. We aggregate publicly available business information. When you use our platform to search for, export, or act on lead data, you are the data controller for that data under GDPR. You are solely responsible for ensuring your use of lead data complies with applicable laws and regulations, including GDPR, CCPA, CAN-SPAM, and CASL.

Mytruffl makes no warranties regarding the accuracy, completeness, or legal fitness of scraped data for your specific use case. You agree not to use exported data for spam, harassment, or any unlawful purpose.

To the extent that you process personal data of EU individuals using our outputs, you act as a data controller and we act as a data processor under GDPR Article 28 solely for the infrastructure that processes your searches. Our Data Processing Agreement (DPA) is available upon request at contact@mytruffl.com.

10. Affiliate Program

When you participate in our affiliate program, we collect and process your referral code, the identifiers of users who sign up through your link, reward amounts, and payment information (PayPal email). This data is used solely to calculate and pay referral rewards, and is not sold or shared with third parties except as required to process your payout via PayPal.

11. Contact Us

If you have any questions about this privacy policy or wish to exercise your rights, please contact us at contact@mytruffl.com.