Privacy Policy

Early access — last updated October 25, 2026

Who we are. Trued is operated by Forge Dreams AI, LLC, an Arizona limited liability company ("Trued", "we"). Questions about privacy: logan.abele@usetrued.com. Mailing address: not yet available.

Where things stand. Trued is in early access. It runs only on preview environments with synthetic data, and nothing is live yet. This policy describes how we handle information on this website and how the product is designed to handle customer data. Controls that are not finished are labeled "in progress."

Our commitments, in plain terms

1. Your data is never sold, rented, shared for marketing, or used to train AI models.
2. Connections are read-only. Nothing posts to your books without your approval.
3. Each company's data is isolated. Every action is recorded in an append-only audit log. Tamper-evident protection (hash chaining and a separate owner role) is in progress.
4. You can ask us to export or delete all of your data at any time. Deletion is by request, confirmed in writing.
5. We never use your data to train AI models. We use our AI provider's commercial API, which by default does not use API data to train models. We are confirming that against our signed terms.
6. Trued supports accountants. It doesn't give tax, legal, or audit opinions, and a person always signs off.

1. What this policy covers

• Website and waitlist information about people who visit this site or join the early-access waitlist. For this, we decide why and how it is used.
• Customer data: the financial records, contracts and instructions a company connects or uploads to Trued. For this, we act on the company's behalf, as its service provider. The company decides what it gives us, and we use it only to provide Trued to that company.

2. What we collect

When you visit the site or join the waitlist

• What you type into the early-access form: your work email, and optionally which tools you use today (from a list on the form) and a short note ("Anything else?"). Earlier versions of the form also asked what you are and which ledger you use; those answers are kept with sign-ups made then.
• We store sign-ups (your work email and any tools you tell us you use) with Supabase, our database provider, which processes them on our behalf only to run the waitlist.
• What you type into the suggest-a-connector form: your work email and the name of the system you'd like Trued to work with.
• What you type into the accounting-firm form: work email, firm name, how many clients you close each month and what most of them use (QuickBooks Online, NetSuite or other).
• Which version of the page you saw and, if the link had one, a short source tag (?src=), saved with your sign-up.
• Your IP address: we don't save it. We don't save your IP address with your signup or in our database. Our hosting provider processes it to deliver the site, under its own privacy terms (Vercel privacy notice). To slow down spam, the server counts recent sign-up attempts in memory only, keyed by a one-way code that changes every ten minutes; the count is never written down and expires after ten minutes.
• An anonymous count of page visits per day and page version.
• Standard server and security logs kept by our hosting provider.
• We don't set cookies on this site. We don't use advertising cookies, ad networks, analytics tools or cross-site tracking.

When a company uses Trued (customer data)

• Records read, read-only, from connected systems: invoices, bills, payments, customers, vendors, bank and card transactions, ledger entries.
• Contracts and documents the company uploads, and the plain-English terms we write from them.
• Payroll totals only. We do not read employee names, Social Security numbers or bank account numbers.
• Account details for the company's users: name, work email, role.
• Questions typed to the assistant, rules and explanations the company saves, approvals, and the audit log of actions.
• Customer data can include personal information about the company's own customers, vendors and employees. The company is responsible for having the right to provide it.

3. How we use it

• Waitlist information: to contact you about early access, decide who to invite, and prevent abuse.
• Customer data: only to provide Trued to that company: to read, check, cross-reference and research its books, prepare its close, answer its questions, and keep the service secure and running.
• We do not sell it, rent it, share it for marketing, use it to train AI models (ours or anyone's), or use it to build profiles, ads or benchmarks.

4. How AI is used

Trued uses an AI model to read documents, check records against contracts, and answer questions. For each task we send only what the task needs. Before any AI call, names, IDs and amounts are replaced with tokens. Payroll register files and bank statement files are never sent to any AI. Code computes all numbers, and the AI's own numbers are stripped.

Our AI provider is Anthropic, used through its commercial API, which by default does not use API data to train models. We are confirming that against our signed terms. Zero-retention terms are not in place yet, and the provider may keep what we send for a limited time. AI output is a draft for a person to review. Trued doesn't make decisions with legal or similar effect on anyone, and a person always signs off.

5. Who we share it with

The systems a company connects (QuickBooks, NetSuite, Ramp, Stripe) are its own sources. We read from them and don't send them anything.

• Legal requests. We disclose information only when the law requires it.
• We never share personal information with advertisers or data brokers.

6. How long we keep it

• Waitlist information: until you ask us to delete it.
• Customer data: while the company uses Trued. A company can ask us to delete all of its data at any time. Full cryptographic deletion, including backups, is in progress. Copies may also exist in backups, if backups are enabled, until they age out.
• Security and server logs: kept by our hosting provider under its own terms.

7. Your choices: export, delete, access

• A company can ask us to export or delete all of its data at any time. During early access, email us at logan.abele@usetrued.com.
• Anyone can ask us what we hold about them, to correct it, delete it, or give them a copy, at the same address. We'll confirm your identity first.
• If your information is in a company's Trued account (for example you are one of its customers or vendors), ask that company first. We act on its instructions and will refer you to it.
• We don't sell or share personal information for advertising.

8. Security

We use technical and organizational safeguards: read-only connections; isolation between companies (every row of data carries its company ID, and database row-level security on every table enforces it, checked by automated tests); an append-only audit log of actions; encryption in transit (HTTPS only, enforced in code for every connector) and at rest (our database provider states its data is encrypted at rest with AES-256); connection tokens encrypted with a separate key for each company; and access limited to people who need it. Per-company encryption of the books data itself is in progress. No system is perfectly secure. If we learn of unauthorized access to your data, we'll tell you without undue delay.

We plan to pursue SOC 2. No audit has started yet. We are not SOC 2 certified. See our Security page for the status of each control.

9. Children

Trued is a business tool and isn't meant for anyone under 18. We don't knowingly collect information from children.

10. Changes and contact

We'll post changes on this page and update the date at the top. For material changes we'll email people who have given us an email address. Contact: logan.abele@usetrued.com.