Data Processing and Sub-processors

Part one — the customer controls the data

The customer is the business. The data you connect to Truence is your data, and you decide what is connected and for how long. Truence acts as a service provider under the California Consumer Privacy Act as amended by the CPRA, and in the equivalent role under comparable US state privacy laws.

Processing on documented instructions only

Truence processes customer data only to perform the service described in the Terms of Use and in your order, and only on your documented instructions. Connections are read-only: Truence cannot move, hold, transfer, or disburse funds, and does not write changes back into your connected systems.

Restrictions Truence accepts

Truence does not retain, use, or disclose customer data for any purpose other than performing the service.

• No sale of customer data, and no sharing of it for cross-context behavioural advertising.
• No use of customer data for advertising, remarketing, or audience building of any kind.
• No combining of your data with data from other sources except as needed to perform the service for you, or where permitted by law.
• No use of identifiable customer data to market to your customers.
• Personnel access is limited to those who need it to operate and support the service, and is subject to confidentiality obligations.

Sub-processor obligations

Each sub-processor listed below is engaged under a written agreement imposing data-protection obligations at least as protective as those Truence accepts here. Truence remains responsible to you for the performance of its sub-processors.

Return and deletion

You can disconnect any data source at any time, which stops future collection from that source. On termination, customer data is deleted or de-identified in line with the retention terms in the Privacy Policy, except where retention is legally required. Deletion requests go to Support@truence.com.

Part two — current sub-processors

Provider · Purpose · Data handled · Location. This list contains only providers verifiably in use today. Any provider that could not be verified has been left off rather than guessed.

• Plaid Inc. · Read-only bank and financial-institution connectivity · Bank account and transaction data, and the credentials you enter into Plaid's own interface, which Truence never sees · United States
• Resend · Transactional email delivery for contact-form and service notifications · Name, work email, and the message content you submit · United States
• Cloudflare, Inc. · Application hosting, edge delivery, and network security for truence.com and the application · Request metadata including IP address, and application traffic in transit · Global edge network, United States entity
• Supabase · Managed application database, authentication, and file storage behind the Truence application · Account records, workspace settings, and the connected business data the product operates on · United States
• Google LLC (Google Fonts) · Serving the typefaces used on the marketing site · IP address and browser user-agent of the visiting browser at the moment a font file is requested · United States

Deliberate omissions

No analytics, advertising, tag-management, session-recording, or customer-data-platform provider appears above because none is installed. No payment processor is listed because none processes customer payment data through this site today. If you have been told about a provider not on this list, ask us and we will confirm in writing.

Changes to this list

Truence will update this page when a sub-processor is added, replaced, or removed. To be notified in advance of changes, email Support@truence.com with the subject line "Sub-processor notifications" and we will add you to the notification list for your workspace.

Contact

Truence, Inc., 5700 Tennyson Pkwy, Plano, TX 75024. Data processing questions: Support@truence.com.