Privacy Policy

1. Overview

Trurep ("we", "us") provides field-force tracking, sales capture, and reporting software to organizations ("Customers") and their field agents ("Users"). This policy explains what data we collect, why, and how it is used across our web dashboard and mobile application.

2. Data we collect

We collect the following categories of data:

• Account information: name, email, phone number, organization, and role.
• Location data: GPS coordinates captured at the moment of a check-in, used to verify field visits against registered vendor locations.
• Continuous delivery location data: for organizations with delivery driver/rider accounts, the mobile app collects a continuous stream of GPS coordinates while, and only while, that driver or rider has explicitly started an active delivery run. This tracking stops automatically when the delivery run ends, and is never collected in the background outside of an active run.
• Activity data: check-ins, sales records, work-day start/end times, and photos submitted as visit proof.
• Payment data: subscription and billing status, processed by our payment provider (Paystack). We do not store card details ourselves.
• Device and usage data: IP address, browser/device type, and basic analytics needed to operate and secure the service.

3. How we use data

• To operate core features: check-in verification, sales tracking, and reporting.
• To generate AI-assisted activity summaries for administrators.
• To detect and prevent fraud, including GPS spoofing and duplicate submissions.
• To process subscription payments and communicate billing status.
• To send transactional emails (account confirmation, password reset, team invitations).

4. Data sharing

We do not sell personal data. We share data with the following processors strictly to operate the service: Supabase (authentication and database hosting), Paystack (payment processing), Resend (transactional email delivery), and OpenRouter (AI-generated report summaries, given only aggregated activity data, never raw personal identifiers beyond a first name).

For organizations with delivery driver/rider accounts, live location data captured during an active delivery run is made visible in real time to that organization's administrators, for delivery and route-visibility purposes. It is not shared with any other organization or with third parties beyond the processors listed above.

5. Data retention

Activity data (check-ins, sales, reports) is retained for the lifetime of your organization's account to preserve historical reporting. You may request deletion of your account and associated personal data by contacting your organization administrator or us directly.

Continuous delivery location data collected during active delivery runs is retained in accordance with our data retention schedule. You may contact your organization administrator or us directly for details on how long this data is kept.

6. Your rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data, and to object to certain processing. Contact your organization administrator, or reach us directly, to exercise these rights.

7. Contact

Questions about this policy can be directed to your account administrator.