Legal
This policy explains what personal information we collect, how we use and share it, and the choices and rights you have. It applies to this website, to information you give us in the course of an inquiry or engagement, and to the hosted operations platform we run for clients (the “Platform”), including the Google account connections described in Section 5 and the usage records described in Section 6.
TrueFix Advisory LLC (“TrueFix,” “we,” “us,” or “our”) is a South Dakota limited liability company that provides technology and AI readiness advisory services to businesses. For purposes of this policy, we are the controller of the personal information we collect through our website (the “Site”) and in connection with our services.
This policy does not apply to the businesses we serve in their own handling of data, or to third-party sites or services we link to.
If you choose the optional text-message checkbox on our application form at apply.truefixadvisory.com or our website signup form at truefixadvisory.com/get-started, we collect your mobile number and a record of your consent to send automated marketing texts about your application and scheduling an intro call. Message frequency varies. Message and data rates may apply. Reply STOP to unsubscribe or HELP for help. Consent is not a condition of purchase.
We do not sell or share your mobile number, text-message opt-in data or consent with third parties or affiliates for their own marketing or promotional purposes. We use service providers, including Twilio, to deliver and manage the messages on our behalf. Those providers may receive the information needed to provide that service. This SMS-specific restriction applies to the sharing described elsewhere in this policy.
For details, see the SMS program section of our Terms. For help, contact hello@truefixadvisory.com.
If you use the Platform as a member of a client’s team, the Platform counts your successful sign-ins and your approval decisions, and it counts how often each automated worker runs. How these counts are kept, and what TrueFix receives, is described in Section 6.
When you visit the Site, we and our service providers may automatically collect certain technical information, such as your IP address, device and browser type, pages viewed, links clicked, referring pages, and the dates and times of your visits. We collect this through cookies and similar technologies, as described in Section 9.
Please don’t send us sensitive data we don’t need. Do not submit through the Site any health information, payment-card numbers, government identifiers, account passwords, or other sensitive personal information, and do not send confidential business information before a signed agreement is in place. If you send such information anyway, you do so at your own risk.
We use the information we collect to:
Where required by law, we rely on your consent, our legitimate business interests, the performance of a contract with you, or compliance with a legal obligation as the basis for these uses.
We use third-party technology providers — which may include AI tools — to host the Site, manage our records, and help us prepare our analysis and deliverables. Where a provider processes information you give us, it acts on our behalf and only to provide services to us.
We do not permit any provider, including any AI tool, to use your information to train its models, and we do not sell your information. Any provider that processes information you give us is bound by confidentiality and data-handling obligations, and our work product is reviewed by a person before it is delivered.
Clients who use our Platform can connect Google accounts to it. This section explains exactly what we access, why, where it is kept, and how to disconnect. It applies in addition to the rest of this policy. Each Google permission is requested separately, on its own Google consent screen, and you can grant one without granting another.
When you sign in to the Platform with Google, we receive your name, email address, profile picture, and Google account identifier. We use them only to confirm who you are, to record which person approved a given action, and to count your successful sign-ins. For that count, the Platform uses your sign-in email address to compute a coded reference, as described in Section 6.
If you choose to connect your Gmail for sending, we request one permission: to send email as you (Google’s gmail.send scope). With it, the Platform can send messages from your address, such as a payment reminder or a follow-up after a job is finished, after an authorized person at your company has approved the message. When a message is sent, Google returns a message identifier and a conversation identifier, which we keep as a delivery record. This permission does not let the Platform read, search, change, or delete anything in your connected mailbox.
We plan to offer reply tracking: matching your customers’ replies to the right customer or job, so that reminders stop when a customer has answered and the answer reaches the right person. When it is available and your company turns it on, we will ask for a separate permission to read messages in your connected mailbox. We will use that permission for that one purpose. We will not use messages in your connected mailbox to build profiles, for advertising, or to train AI models, and our staff will not read them except as described under “Where it is kept, and who can see it” below. Granting the send permission does not grant this one, and you can grant or remove each separately.
We use Google user data only to provide the features described above, which you can see and control in the Platform. We do not use it for advertising, we do not sell it, and we do not use it to build profiles of you or your customers. Of your Google sign-in data, a usage summary under Section 6 contains only that coded reference. It contains no name, email address, profile picture, Google account identifier, Google access credentials, or mailbox content, and usage summaries are not used for advertising, sold, or used to train AI models.
The Platform uses AI models to help draft messages from your business records, such as a job and its invoice from the business systems your company already uses. We do not send your Google sign-in data or your Google access credentials to any AI provider, and we do not use Google user data to develop, improve, or train AI or machine-learning models.
Your business records, and any messages in your connected mailbox, contain information about your customers. For that information we act as a service provider to your company: your company decides how it is used, we use it only to provide the Platform to your company, and your customers should direct privacy requests to your company. We help your company respond to them.
We do not share Google user data with third parties, except with service providers that host the Platform for us under confidentiality and data-protection obligations, where required by law, or as part of a merger or acquisition, with notice to you and on the condition that the successor is bound by this policy for that data.
If your Google account is managed by another organization, for example a franchisor, that organization’s administrator controls whether you can connect it, and may remove the connection.
Limited Use. Our use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
This section explains how the Platform counts its own use, and what TrueFix receives about that use. It applies to the people a client company authorizes to use the Platform.
The Platform keeps a record of each successful sign-in to the Cockpit and the Approval Desk, and of each approval decision. It also records each time an automated worker runs, separately from people’s activity. These records are kept on the server dedicated to your company and are counted per calendar day (UTC). Failed sign-in attempts are not counted.
When central usage reporting is turned on for a client company, the Platform sends TrueFix one usage summary per day, for the day before. A summary contains only:
We use these summaries to help client teams adopt and learn the Platform, to provide support, and to operate the service. We do not sell them, use them for advertising, or share them with anyone else, except the providers that host the Platform for us and where required by law.
Each person is identified in a summary by a coded reference instead of a name or email address. The Platform computes the code from the email address the person signs in with. A coded reference is a pseudonym, not anonymous data: authorized TrueFix support staff can match a code to a person by using your company’s own user list on your company’s server, when providing support. Codes are different for each client company.
Usage summaries do not include names, email addresses, IP addresses, device or browser details, or the exact time of any event. They do not include the content of any customer or business record, question, answer, or message. These limits describe the usage summaries only; the rest of this policy describes the Platform’s other processing.
TrueFix keeps central usage summaries for 90 days. We delete them when your company’s service ends, and we remove one person’s entries on your company’s written request. The 90-day period applies to central usage summaries only. It does not change how long records are kept on your company’s server, including the audit records described elsewhere in this policy.
The client company decides who may use the Platform and is responsible for telling those people that their sign-ins and approval decisions are counted as described here. We are planning a Usage page in the Cockpit that only your company’s Cockpit owner can open, showing your own team’s usage from the records on your company’s server. That page is not available yet.
For questions or requests about Platform usage records, contact your company or us, as described in Section 13.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising or targeted advertising, as those terms are used under U.S. state privacy laws. We do not use or disclose sensitive personal information for purposes that would require us to offer a right to limit such use.
We and our service providers use cookies and similar technologies to operate the Site, remember your preferences, measure performance, and understand usage. Some cookies are necessary for the Site to function; others are optional analytics cookies. Our own first-party cookie, tfa_ft, stores the campaign tags (utm values) from your first visit for 30 days, so that if you later sign up we can record where you came from; we do not use it for advertising.
You can control cookies through your browser settings, including by blocking or deleting them, though some features may not work properly as a result. Where required, we honor recognized browser-based opt-out preference signals, such as the Global Privacy Control (GPC), as a request to opt out of any sale or sharing of personal information for the browser on which the signal is received.
We keep personal information for as long as needed for the purposes described in this policy — for example, to respond to your inquiry, perform and document an engagement, send communications you have requested, comply with our legal and recordkeeping obligations, and resolve disputes. When information is no longer needed, we delete or de-identify it. Information handled during a client engagement is retained as set out in the applicable engagement agreement. Central Platform usage summaries are kept for 90 days, as described in Section 6.
We maintain commercially reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, and disclosure. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
Depending on where you live, U.S. state privacy laws may give you rights with respect to your personal information. We extend the following rights to individuals in the United States regardless of state of residence, to the extent they apply:
To make a request, email us at hello@truefixadvisory.com with “Privacy Request” in the subject line, and tell us which right you wish to exercise. We will take reasonable steps to verify your identity before responding, and we may need to ask for additional information for that purpose. You may use an authorized agent to submit a request on your behalf, subject to verification. We will respond within the timeframe required by applicable law.
If you use the Platform as a member of a client’s team, you can also ask that company to make a request about your Platform usage records. We remove one person’s entries from central usage summaries on the client company’s written request, as described in Section 6.
If you are a California resident, the California Consumer Privacy Act (as amended) gives you the rights described in Section 12, including the right to know the categories of personal information we collect, the purposes for which we use it, and the categories of third parties to whom we disclose it. In the past twelve months, we have collected the categories of personal information described in Section 2 (such as identifiers, contact and professional information, internet activity, and the contents of your communications), used them for the purposes in Section 3, and disclosed them to the categories of recipients in Section 7 for business purposes.
We do not sell personal information and do not share it for cross-context behavioral advertising. California residents also have the right not to receive discriminatory treatment for exercising their rights, and may designate an authorized agent to make a request.
The Site and our services are intended for businesses and the professionals who run them. They are not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us personal information, please contact us and we will take appropriate steps to delete it.
We operate in the United States, and the information we collect is processed and stored in the United States. The Site and our services are directed to users in the United States and are not intended for individuals in the European Union, the United Kingdom, or other jurisdictions with extraterritorial data-protection regimes. If you access the Site from outside the United States, you do so on your own initiative and are responsible for compliance with local law.
We may update this policy from time to time. When we do, we will revise the “Last updated” date above, and material changes will take effect when posted. We encourage you to review this policy periodically.
If you have questions about this policy or how we handle your information, contact us at:
TrueFix Advisory LLC
Attn: Privacy
101 S. Reid Street, Sioux Falls, SD 57103
hello@truefixadvisory.com