Legal
Privacy policy
Last updated
This policy explains what personal information Truwright collects through this website, why we collect it, where it goes, and how you can get it back or have it deleted. It covers truwright.com only.
Who we are
This website is operated by Emerson Bosco, operating as Truwright ("Truwright", "we", "us"). We are responsible for the personal information described in this policy.
The person accountable for our privacy practices is our Privacy Officer, who can be reached at:
Privacy Officer, Truwright
[TODO: mailing address — a P.O. box or general delivery is fine]
emersonboscoj@gmail.com
What we collect
We only collect what you type into the early-access form on this site. That is:
- your name;
- your company;
- your work email address;
- your role (owner or principal, project manager, office or operations, or other); and
- which product or module you were looking at when you submitted the form.
Our form provider, Formspree, also records technical information we do not ask you for, including your IP address, browser type, domain names, access times and the site you arrived from.
We set no cookies on this website. We run no advertising trackers, we do not profile visitors, and we do not build a picture of you across other sites. That is why you are not being asked to dismiss a cookie banner.
Why we collect it
Two purposes, and they are separate:
- To reply to you. If you ask for early access or a demo, we need your details to get back to you. This is the reason the form exists.
- To send you product news — updates, early-access invitations and launch announcements — but only if you ticked the consent box.
Ticking that box is optional and is not a condition of joining the early-access list. We never sell, rent or trade your information.
Where your information goes
When you submit the form, it is transmitted to Formspree, our form-processing provider, which runs on infrastructure in the United States. Formspree processes submissions on our behalf under contract and is not permitted to use them for its own purposes. Formspree then emails the submission to us, and it is stored in our email account.
Because your information is processed in the United States, it is subject to United States law while it is there, and may be accessible to US courts, law enforcement and national security authorities. We remain accountable for your information the whole time it is being processed on our behalf.
Consent, and how to withdraw it
We rely on the consent box you tick on the form to send you marketing email. You can withdraw that consent whenever you like — click the unsubscribe link in any email we send, or email our Privacy Officer at the address above. We will action any unsubscribe request within 10 business days, and usually much sooner.
After you unsubscribe we keep your email address on a suppression list. We do this for one reason only: so that we never accidentally contact you again.
How long we keep it
We delete lead records 24 months after we last heard from you, or sooner if you ask us to. Suppression-list entries are kept indefinitely, because their only purpose is to honour your opt-out.
Your rights
You can ask us to:
- tell you what personal information we hold about you;
- correct anything that is wrong;
- delete your information; or
- stop contacting you.
Email our Privacy Officer and we will respond within 30 days. We offer these rights to everyone who asks, wherever you live.
If you are not happy with how we have handled your information, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca (opens in a new tab).
How we protect it
Being specific about this website rather than making general claims: submissions travel over HTTPS; the site sends strict transport-security and content-security headers, and the browser is only permitted to send data to our form provider; and this website has no database, no user accounts and no payment processing.
If a breach of security safeguards ever creates a real risk of significant harm to you, we will report it to the Privacy Commissioner of Canada and notify you as soon as feasible, as PIPEDA requires. We keep a record of every breach for 24 months, whether or not it meets that threshold.
Note that the security features described elsewhere on this site relate to the Construct Pro and LedgerLink products, which are in development — not to this website. See our terms of use for what those descriptions do and do not commit us to.
Changes to this policy
If we change this policy we will post the new version here and update the date at the top. We will not apply a materially broader use to information we already hold without asking you first.