Privacy policy

Last updated 29 October 2026

This explains what Truce collects, why, who helps us process it, and the choices you have. We collect only what we need to answer your disputes, and we never sell it.

  1. 1. What we collect

    • Your account: your name, email and a securely hashed password, or your Google profile if you sign in with Google.
    • Your shops: the shop details, policies and notification settings you enter.
    • Your PayPal connection: your REST app client ID and secret. The secret is encrypted before it’s stored.
    • Dispute records: disputes, the payments, orders and tracking behind them, buyer messages and photos, and the drafts and decisions made in Truce.
    • Basic logs: sign-in and request records used to keep the service secure. Keys and passwords are removed from logs.

  2. 2. How we use it

    • To sync your disputes and draft recommendations and replies.
    • To send the steps you approve to PayPal.
    • To keep your account secure and prevent abuse.

  3. 3. Who helps us run Truce

    We share data only with the providers needed to run the service:

    • Google Cloud and Firebase, for hosting, storage and sign-in.
    • Nebius Token Factory, which runs the NVIDIA Nemotron models that read cases and write drafts.
    • Tavily, for public web searches about a case, such as a carrier’s notice.
    • PayPal, to read your disputes and send the steps you approve.

    We don’t sell your data or use it for advertising.

  4. 4. Buyers' information

    Disputes include details about your buyers, such as names, addresses and messages. We process them only on your behalf to respond to the dispute, and they’re only visible to members of the shop.

  5. 5. Security

    Data is encrypted in transit and at rest, PayPal secrets get an extra layer of encryption, and sessions use secure, http-only cookies. Only members of a shop can see its records.

  6. 6. Keeping and deleting data

    We keep your data while your account is active. You can disconnect PayPal at any time, which stops new syncing. To have your account and its data deleted, ask us and we’ll remove it, except where the law requires us to keep a record.

  7. 7. Your choices

    You can see and update your account and shop details in the app, sign out of every device, and ask for a copy or deletion of your data.

  8. 8. Changes

    If we change this policy, we’ll update the date above and tell you in the app when the change matters.