Privacy
Last updated 20 October 2026
TruvAIn is held and maintained by Three Rivers AI LLC, Pittsburgh, Pennsylvania. TruvAIn is an invite-only beta. Some beta accounts pay a discounted monthly price, set with each customer and invoiced separately, and no card is taken in the app. This page covers four things: this site, the waitlist form, the beta application, and the account you use in the app. It says what each one collects, who else receives any of it and exactly what they receive, and how to get a copy of it or have it removed.
What the waitlist form collects
When you submit the waitlist form, we store the work email you typed, and the company and what-you-sell fields if you filled them in. Both of those are optional and the form works without them. Alongside those we store which of the two forms you used, the referring page your browser reported, your browser's user agent string, and the time you signed up.
What the beta application collects
The beta application asks for more, because it is an application. When you submit it, we store the invite code you entered, your first and last name, your work email, your company, the industry you picked, and your three written answers: what you sell, how you research accounts today, and what would make this worth paying for. Alongside those we store the referring page your browser reported, your browser's user agent string, and the time you applied. Submitting requires accepting the Terms and this policy, and the submission itself is the record of that.
Signing in to the app
You sign in with your email and a password, or with Google, or with Microsoft. The sign-in record holds your email address, the way you signed in, and the name described below. If you turn on the second sign-in step, it also holds the setup of your authenticator app. We use the sign-in record to sign you in, to show you which account you are signed in as, and to check the address you type when you ask to delete your account. The people at Three Rivers AI who run TruvAIn also see your name, your email address and the day you last signed in beside your account, so they know whose account it is.
The name on your account
You have to give a name to use the app. You type it when you sign up with your email, or confirm it the first time you sign in with Google or Microsoft, and you can change it in Settings. Until you give one, the app asks for it before you can use it. We ask for it to greet you and personalise the app.
What your account holds: your company and how you sell
Your company's name, the role you gave, your home city and state, your time zone, and the number of seats. Your seller profile: what you sell, your products, your proof, the angles you use, your territories, the signals you look for, what to avoid, the voice you write in, and your standing objective. While you set the profile up, the questions and your answers are kept with it.
What your account holds: your book and your research
The companies you save, with their city, state, website and how often they are refreshed. If your company gives us a list of its clients, the people at Three Rivers AI who run TruvAIn can add it to your account's Book. Only each company's name, city, state and website are kept, as companies saved there. Every other column is left out, and the list itself is not kept. Each research run: the company, its depth, its status and timing, the brief it produced, and a record of each public page and record the research read. The notices that a run finished. For each company, the outcome you set, your next step and its date, and your objective. Your debriefs: what you typed or dictated after a meeting, and what was drawn from it. Your markets: their names, the search words and counties you chose, the place id of each business a search found, and how you sorted them.
What your account holds: usage, plan and team
One row for each step of the research that costs us something: which step, which model, how much text went in and out, how many pages were fetched, and what it cost. Your plan, its allowances and how much of them you have used. Any Pro access you were given, how it was given and when it ends. For a team, each seat's role and when it joined, and a seat's invite code until it is used. A receipt for each deletion, saying what was deleted and when.
What your account holds: people
A brief can name people at the company you researched, with the business details their own company or a public record published. Named people come off a brief after ninety days, and anyone who asks to be left out comes off every brief. Your account also keeps the names you chose to hide on Who to call, and your reports of wrong information about a person. Anyone can ask to be left out of every brief at the remove-me page, signed in or not, and we keep only a scrambled form of that request.
What is kept in your browser
The public pages set no cookies. Signing in to the app sets the cookies that keep you signed in. The app also keeps two small things in your browser's own storage: whether you chose dark mode, and the time of your last visit, so the greeting can say what changed. While you set up your profile, your answers so far are kept in that browser tab and go when you close it.
What this site does not collect
We do not store your IP address on your signup, your application, or anywhere your account's records are kept. There is no advertising pixel, no Meta or Facebook tracking, no ad network of any kind, and no fingerprinting on this site or in the app. Both forms have a hidden field that only automated submissions fill in, and when it is filled the submission is discarded without being written anywhere.
The one thing that measures traffic
We use Vercel Web Analytics and Vercel Speed Insights, on this site and in the app, to see how many people visit, which pages they read, where they arrived from, and how quickly pages load on real devices. Neither one sets a cookie, writes to your browser's storage, or fingerprints your device. Neither one can identify you, and neither is connected to any advertising network.
Do Not Track
Your browser can send a Do Not Track signal. This site and the app do not respond to it and do nothing differently when it arrives. We do not track you across other sites over time, and the traffic measurement above is the same for every visitor and identifies no one. One part of the app loads from another company: the map on a brief comes from Google in your browser, and Google may collect information through it under its own policy, described below.
Rate limiting, and the hashed values
To stop a single source flooding the forms, the remove-me page or the app's question box, we count requests per address over a ten minute window. We do this without keeping the address: it is salted and hashed first, and only the hash is stored. Rows older than the window are deleted when a later request is let through, and by a check that runs once a day. The hash is used for counting and for nothing else.
The emails
Signing up for the waitlist sends a single confirmation email. There is no sequence behind it. A beta application sends you no automatic email. It sends one notice to us with your name, company and email, and a person reads your application and replies. Redeeming a beta code sends you no email either. It sends one notice to us with your name and which of our codes you used, never the code itself, and our daily summary of the service names the newest people to redeem one. The sign-in service sends the messages signing in needs, such as a link to reset your password.
Who else handles it: the language model
Anthropic runs the language model and its web search. It receives the text the research reads from public pages and records, the facts and quotes drawn from them, and searches built from the company's name and place. When you use these parts of the app, it also receives your seller profile, the questions you ask the assistant, what you type or dictate in a debrief, and the answers you give while setting up your profile. It does not receive your email address, your password or your account ids.
Who else handles it: the research screen
TypeSafe screens research before the language model reads it. It receives our own research questions, and from public pages and records the page address, title and up to a few thousand characters of text, and the facts and quotes drawn from them, with the company's name. Pages whose address marks them as about a company's people are held back, and so are facts about its people and leadership changes that name someone. A name that appears in passing on another page or in another fact can still be sent. Email addresses, ids and keys are replaced in everything sent. Phone numbers and other long numbers are replaced only in a page's title and text, so a fact or its quote is sent with any such number in it. It never receives your name, your email, your notes or your account ids.
Who else handles it: maps and listings
Google's maps services receive the company name you typed with its city and state, to find the company's listing. To estimate a drive, they receive the home city and state you set and the company's address. For a deeper brief, they receive the kind of business and its town, to find others nearby. The map on a brief loads from Google in your browser, with the company's address, and your home city only when the drive was already estimated. If you press Route from my location, your browser finds where you are, and the map sends that position to Google to draw the route. TruvAIn does not store it. The buttons that open the address or the route in Google Maps or Apple Maps send the company's address, and where the route starts when there is one, to Google or Apple only when you press one. None of these carries your name, your email or your account ids. Google uses what it receives under its own privacy policy, at https://policies.google.com/privacy, and Apple under its own.
Maps in the app
TruvAIn includes Google Maps features and content. Your use of them is subject to the Google Maps/Google Earth Additional Terms of Service at https://maps.google.com/help/terms_maps/ and the Google Privacy Policy at https://policies.google.com/privacy.
Looking for companies in a market
When you look for companies in a market, Google's business listings service receives your search words and the county, with its state. Of each business it finds, TruvAIn keeps only its place id, together with your own choices and notes and our own label for how well it fits your profile. Names and addresses are read from the listings service each time the list is shown, and are never saved. A saved search is deleted after 30 days. A market is seen by the rep who made it and by the team's owner and admins.
Who else handles it: signing in with Google
If you sign in with Google, Google tells us your email address and the name on your Google account. We use them only to sign you in, to show which account you are signed in as, to greet you by your first name, and to show the people at Three Rivers AI who run TruvAIn whose account is whose. We do not ask Google for your mail, your calendar, your contacts or your files. TruvAIn's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Who else handles it: signing in with Microsoft
If you sign in with Microsoft, we ask Microsoft only for the sign-in, your basic profile and your email address. We use your email address and your name only to sign you in, to show which account you are signed in as, to greet you by your first name, and to show the people at Three Rivers AI who run TruvAIn whose account is whose. We do not ask Microsoft for your mail, your calendar, your contacts or your files.
Who else handles it: the infrastructure
Supabase stores the list, the applications, the sign-in records and everything your account holds. Resend sends the waitlist confirmation and the notice to us about a beta application, and the notices to us that name who redeemed a beta code. Vercel hosts the site and the app, runs the code that reads and writes the records, and provides the cookieless traffic and speed measurement described above.
Who else handles it: public sites and your browser
The research reads public websites and public records about the company you asked about. Those sites see a request from us that names the company or its address, and never you. If you dictate a debrief, your browser does the listening, and its own speech service may process the audio. We receive only the text.
Who receives it
The companies that receive any of it are the ones named above: Anthropic, TypeSafe, Google, for its Places and Routes services, its maps and Google sign-in, Microsoft, for its sign-in, Supabase, Resend and Vercel, and Apple, only when you open one of its map links. We do not sell your information, we do not share it for advertising, and no one outside those companies and Three Rivers AI receives it.
How long we keep it
We hold your signup or application until access opens or until you ask us to remove it, whichever comes first. We keep what your account holds while the account is open. Named people come off a brief after ninety days, and a saved market search is deleted after 30 days. Apart from those and the rate limit rows, there is no automatic deletion schedule, and we would rather say that plainly than name a period the system does not enforce.
Seeing and correcting it
You can change your name, your profile, your home city and your saved companies in the app. Anyone signed in can download a file from Settings with their own email address and name. The owner or an admin of an account can also download every table the account holds, one file each. Invite codes and the hashed values are left out of the download. A brief in it names only the people the app would show on that brief. For anything else, email us.
Deleting your account
Deleting is in Settings, and you confirm it by typing your email. If you own the account, it deletes everything the account holds, listed above, and gives you a receipt of what was deleted and when. If you are a rep or an admin, it removes your own seat and leaves the company's account as it is. Either way it also clears your name from your sign-in record, and the receipt says whether that worked. Two things are not removed by the button. Your sign-in record, with your email address, stays with the sign-in service, so you can no longer reach the deleted account, but the record exists until you email us and we remove it. And the receipt stays, because it is the proof the deletion happened.
Getting your information removed
Email hello@truvain.com and ask. We will delete your waitlist row, your application or your sign-in record, and confirm when it is done. You do not need an account, a form, or a reason.
Changes
If what we collect or who receives it changes, this page changes with it and the date at the top changes too. We will not quietly widen it. Questions about this page go to hello@truvain.com.