Privacy Policy

We use personal information to operate TrueWave, administer accounts and campaigns, communicate with users, arrange creator payments and maintain business records. Where we handle information on a client's behalf, we follow that client's instructions. Payment providers may handle information for their own verification and legal obligations under their own privacy notices.

Acknowledging this policy records which notice you received. It does not waive your rights or give consent to unrelated uses of your information.

Account and profile information includes your name, email address, phone number where supplied, country, city, locale, timezone, public social profile URLs and linked social accounts. We also hold account identifiers, roles, organization affiliations and agreement acknowledgments. We receive this information from you, your organization, invitations and authentication providers. Country and city are details you provide, rather than GPS location collected by the Creator app. The creator application does not ask for social account passwords.

Campaign and communication information includes messages, posted-content links and declarations, briefs, scripts, submitted content, review feedback, campaign activity and performance reports. This comes from creators, clients, staff, connected services and publicly available social-platform information. Message drafts and queued work can be stored locally on your device; submitted messages reach our backend and messaging services.

Payment and support information includes invoices, earnings, agreed rates, payment status and references, disputes, and tax information where needed. We store Glide connection identifiers and verification status to help coordinate payouts. Glide collects information through its authorization and verification flow under its own notice. Optional dispute evidence can include photos, camera images and PDFs you select, which may contain financial or identity information. Use the designated verification flow for identity documents and avoid sending unrelated sensitive information in messages or email.

Device and service information includes push tokens, platform, notification preferences and delivery receipts, authentication and session tokens, IP addresses, device and browser information, timestamps and security logs. The app stores its access credential in device secure storage and keeps account-scoped cached views, queued work and downloaded files so features can work offline. Camera access is requested when you choose to capture evidence; photo and document selection is initiated by you.

We use information to create and secure accounts; process creator applications; assign, review and report on campaign work; communicate about messages and tasks; calculate earnings and invoices; coordinate verification and payouts; resolve support questions and disputes; prevent misuse; and meet legal and recordkeeping obligations. Push notifications support app features and can be controlled in your device settings.

We do not sell personal information, use it for targeted advertising, or track you across other companies' apps and websites for advertising. The Creator app does not include advertising or advertising tracking. Public website measurement is described in section 8, including when a support or legal page is opened from the app.

Where applicable law requires a legal basis, we process information as needed to provide the services you request, meet legal obligations, pursue permitted interests in operating and securing TrueWave, or obtain consent where required. You can withdraw consent for a consent-based use by contacting us; this does not change processing that was lawful before withdrawal.

Authorized staff and contractors access information needed for their work. Clients receive campaign deliverables, participation information and reports needed for their campaigns. This does not give clients access to your authentication tokens, full payout credentials or unrelated private support information.

Service providers process information needed to provide their services: WorkOS for authentication; Expo and Apple's APNs or Google's FCM for push delivery; Google Cloud for hosting; and Glide for payout connection and verification. Google Analytics measures use of the public website as described in section 8. Providers receive the information needed for those functions, such as account details for sign-in or device push tokens and notification routing data for delivery. Payout providers may keep separate records to meet their own obligations.

We may disclose relevant information when required by law, to resolve a payment or dispute, to investigate misuse or protect legal rights, or as part of a business transfer subject to applicable privacy requirements.

TrueWave and its providers may store or process information outside your home country. Applicable privacy requirements govern these activities. Contact us if you need more information about how your information is handled.

We keep personal information for as long as needed for the purposes described here, considering account activity, campaign obligations, unpaid earnings, disputes and legal requirements. Payment, accounting and tax records are kept for the periods required by applicable law. Records needed for contractual obligations, unresolved claims or legal holds may also be retained. Retained records are used for the reasons that require us to keep them.

Creators can request deletion in the app by opening Settings, choosing Delete account and confirming, or by emailing hello@truewave.live from their registered email address. In-app confirmation closes creator access immediately, revokes push tokens and records a request for our support team. Our team reviews the request, removes personal profile, contact and other associated data no longer needed, coordinates relevant provider processing, and explains any records retained and why. Deletion does not automatically close an independently managed Glide account. See creator account deletion for the steps and what to expect.

Processing takes time for ownership checks, provider coordination and any required retention review. We handle requests as soon as reasonably practicable and within applicable legal requirements, and confirm the outcome. Account closure does not immediately erase every record or backup. Backup copies are handled through the backup lifecycle and remain subject to applicable retention requirements.

We restrict access to personal information and use safeguards appropriate to operating the service. No storage or transmission system can guarantee absolute security. Contact us if you suspect unauthorized access to your account or information.

Depending on the law that applies to you, you may have rights to access or receive a copy of your information, correct it, request deletion, receive it in a portable form, restrict or object to processing, withdraw consent, or complain to the appropriate authority. Contact hello@truewave.live with your request and your relationship to TrueWave. You can also update available profile fields in the app and control notifications through device settings.

We may need proportionate information to verify ownership before acting on a request. Do not send sensitive identity documents in ordinary email. If a client or an independent provider is responsible for the information you ask about, we will explain the appropriate route and assist where required. We explain any applicable exception or retention requirement when responding and handle requests within applicable legal requirements.

Authentication and session technology supports sign-in and account security. Browser controls can block or clear cookies, but doing so may affect sign-in.

Website analytics: the public TrueWave website at truewave.live uses Google Analytics 4, provided by Google LLC, to understand how visitors find and use it. It measures page views, scrolling, outbound link clicks, site search, file downloads, form interactions and embedded video engagement, together with the page address, referrer, approximate location derived from your IP address, and device and browser information. It can set the first-party cookies `_ga` and `_ga_<id>`, which Google sets to last up to two years. Google Analytics is not loaded in the signed-in TrueWave app, the creator portal or the client and staff consoles. Advertising storage, ad-user-data and ad-personalization signals are denied for every visitor. For visitors in the European Economic Area, the United Kingdom and Switzerland, analytics storage is denied, so no Google Analytics cookies are set there; Google receives only cookieless measurement signals, which it uses for aggregate modelling. You can block or delete these cookies in your browser, or install Google's opt-out add-on, without affecting the website. Google describes its processing in its privacy policy and explains how it uses information from sites that use its services.

TrueWave's contracting service is intended for adults aged 18 or older. If you believe a child has provided personal information to us, contact hello@truewave.live so we can review and address it.

We date and version changes to this policy and provide additional notice or seek consent where required. The version shown with an acknowledgment identifies the notice you received.