Privacy Policy

1. Introduction

TrueWorth (“we”, “us”, “our”) provides an AI-powered exit readiness assessment platform for UK SME owners. This Privacy Policy explains how we collect, use, and protect your personal data when you use our website and services at trueworth.io.

2. What Data We Collect

We collect the following information:

• Assessment answers — your responses to our exit readiness questionnaire
• Email address — to deliver your results and create your account
• Password (optional) — if you choose to set one for account access
• Business sector — to contextualise your assessment

We do not collect financial documents, bank details, sensitive personal data, or any information beyond what you directly provide through our platform.

3. How We Use Your Data

Your data is used to:

• Generate your exit readiness assessment and scores
• Produce AI-powered commentary on your results
• Manage your account and authentication
• Send you your results via email
• Improve the platform and assessment quality over time

4. Legal Basis for Processing

We process your data under the following legal bases:

• Legitimate interest — to provide and deliver the assessment service you have requested
• Consent — for email communications beyond essential service delivery

5. AI Processing Disclosure

Your assessment answers are sent to OpenAI's API (GPT-4o) to generate personalised commentary on your results. This processing occurs under OpenAI's API data usage policy, which means your data is not used to train their models.

The AI-generated commentary is informational only and does not constitute professional advice. It is designed to help you understand your exit readiness position, not to replace qualified advisory services.

6. Data Storage & Security

Your data is stored securely using Supabase, hosted in the EU (eu-west-1 region). All data is encrypted at rest and in transit using industry-standard encryption protocols.

7. Third-Party Processors

We share limited data with the following third-party processors, solely for the purposes described:

• OpenAI — assessment answers are sent to generate AI commentary on your results
• Resend — your email address is used to deliver results and account-related emails
• Supabase — provides our database and authentication infrastructure

8. Data Retention

We retain your data for as long as your account exists. You may request deletion of your data at any time by contacting us at hello@trueworth.io.

9. Your Rights Under UK GDPR

You have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your personal data
• Restriction — request that we limit how we use your data
• Portability — request your data in a portable format
• Objection — object to our processing of your data

To exercise any of these rights, contact us at hello@trueworth.io.

10. Cookies

We use only essential cookies required for authentication (Supabase session cookies). We do not use tracking cookies, analytics cookies, or any third-party advertising cookies.

11. Children

TrueWorth is not intended for use by individuals under the age of 18. We do not knowingly collect data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated “Last updated” date.

13. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us at hello@trueworth.io.