Privacy Policy
Last updated: 02/05/2025
TruePuff ("TruePuff," "we," "our," or "us") is committed to protecting privacy and designing systems that minimize the collection of personal data. This Privacy Policy explains how we collect, use, and protect information when you use our websites, services, and product authentication platform (collectively, the "Services").
1. Information We Collect
1.1 Information We Do Not Collect
TruePuff is designed to operate without collecting personal data from consumers.
We do not require or collect:
- Consumer accounts
- Names
- Email addresses
- Phone numbers
- Government IDs
- Payment information from consumers
Consumers can verify products without providing personal information.
1.2 Information Collected From Brand Customers
If you are a brand, partner, or business customer, we may collect:
- Business name
- Contact name and business email
- Billing information (processed by third-party payment providers)
- Account configuration data
- Usage and system metadata related to your account
1.3 Verification & Scan Data
When a product QR code is scanned, we may collect:
- Timestamp of the scan
- Approximate geographic location (city/region level)
- Device and browser metadata (non-identifying)
- Token and verification status
This data is used solely for authentication, fraud detection, analytics, and system security.
We do not attempt to identify individual consumers.
2. How We Use Information
We use collected information to:
- Provide and operate the Services
- Verify product authenticity
- Detect and prevent fraud or abuse
- Maintain system security and integrity
- Provide analytics and insights to brand customers
- Communicate with business customers
- Comply with legal obligations
3. Data Sharing
We do not sell personal data.
We may share limited information:
- With service providers (hosting, analytics, payment processing)
- To comply with legal obligations or lawful requests
- To protect the rights, safety, and security of TruePuff or others
All service providers are required to protect data consistent with this policy.
4. Data Retention
We retain data only as long as necessary to:
- Provide the Services
- Meet contractual obligations
- Maintain security and auditability
- Comply with legal requirements
Brand customers may configure retention periods depending on their plan.
5. Security
We implement reasonable technical and organizational measures to protect data, including encryption, access controls, and logging. No system is 100% secure, but we design our platform to minimize risk and exposure.
6. International Use
TruePuff may process data in multiple jurisdictions. By using the Services, you consent to the transfer and processing of information in accordance with this policy.
7. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be posted on our website with an updated effective date.
8. Contact
For privacy questions or requests, contact: