Trueside Privacy Policy

Last Updated: October 16, 2026

The short version. We don’t sell your personal information. Beyond the service providers who help us run Trueside and disclosures the law requires, we share your information with a vendor or your realtor only when you choose to. Information from Gmail, if you connect it, is never used for advertising or included in aggregated data. You can export your record or ask us to delete it. The details are below.

1. Overview and Scope. Trueside LLC, a Michigan limited liability company (“Trueside,” “we,” “us,” or “our”), offers an AI-assisted digital home manager for adult homeowners. This Privacy Policy explains how we collect, use, disclose, and retain personal information through our limited, invitation-only Michigan proof-of-concept pilot, related invitation and welcome experiences, communications, and support (collectively, the “Service”). Each account is associated with one home record for one home, although separately authorized adult spouses, co-owners, or household members may have individual accounts or access associated with that home.

This Policy applies to homeowners, prospective homeowners who receive an invitation, inviters such as realtors or sponsors, authorized household or co-owner users, and others who interact with the Service. It does not apply to a third party’s own website or service.

2. What we collect depends on how you interact with the Service:

• Invitation information. A realtor or other inviter may give us a prospective homeowner’s name and email address, the property address and related property information, and the inviter’s identity and contact information. We use that information to prepare and send the invitation and may send one reminder approximately seven days after the invitation.

• Sealed inspection report before acceptance. An inviter may upload an inspection report for the prospective homeowner. Until the homeowner accepts the invitation, we store the report in a sealed state and do not read, analyze, or otherwise process its contents. If the invitation is not accepted, we delete the report 30 days after the invitation.

• Welcome experience and home image. Before acceptance, the invitation or welcome experience may display the invitee’s name, the inviter’s identity, property information, and an AI-generated watercolor-style rendering of the home. The rendering may be based on a house photo the inviter took or has the right to use, or on public or licensed property imagery identified from information the inviter provides. An authorized person may review the rendering before the invitation is sent.

• After acceptance. When the homeowner accepts, we process the inspection report and use it, together with other available information, to build the homeowner’s home record. We also collect account information such as name, email address, phone number if provided, authentication information, preferences, and authorized household or co-owner access settings.

• Homeowner-provided content. A homeowner may add photos (including images showing serial or model numbers), documents, files and folders, answers, property facts, maintenance and repair records, warranties, invoices, receipts, quotes, messages, forwarded emails, and other home-related records. Please provide information about another person only when you are authorized to do so.

• From others: a realtor or sponsor who invites you (your name, contact details and address); and, if vendor functionality is activated, vendors’ quotes and job updates for your home.

• Other sources and operational data. We may obtain public records, permitting information, property characteristics, equipment or model lookup results, satellite or property imagery, and other information from public or licensed sources. We may also collect vendor quotes or job updates; communications and support information; and technical and usage information such as IP address, browser and device type, operating system, access times, pages or features used, diagnostic events, and approximate location inferred from IP address, if collected. We maintain records needed to document account creation, authentication, consent and acceptance, policy versions and hashes, timestamps, IP or device information if collected, and similar audit events. If call recording is enabled, we will provide notice and obtain consent as required by law; otherwise, calls are not recorded.

3. How We Use Information. We use personal information to provide, personalize, maintain, and secure the Service; create and organize a home record; authenticate users and administer authorized access; analyze home information to identify maintenance or repair considerations and respond to questions; support homeowner-directed vendor requests if that functionality is activated; communicate about invitations, accounts, service updates, support, security, and administrative matters; troubleshoot, maintain, and improve the product; prevent fraud, misuse, and security incidents; comply with law and enforce our agreements; establish or defend legal claims; and carry out another purpose disclosed at collection or with consent where required.

We may combine information from the sources described above for these purposes. We may also create aggregated or de-identified information that does not reasonably identify an individual or home for product improvement, analytics, security, research, and lawful business reporting, subject to Section 5’s special restrictions for Gmail-derived data.

4. AI-Assisted Features. Trueside uses automated and AI-assisted tools to analyze inspection reports, documents, photos, communications, equipment information, and other home information; organize the home record; identify maintenance or repair considerations; generate summaries or suggested responses; and provide assistance. AI outputs may be incomplete or inaccurate and should not replace qualified professional advice or inspection. AI providers act as processors for Trueside. They may include Anthropic, ChatGPT and similar providers and may change as the Service develops. We limit the information sent to a provider to what is reasonably needed for the relevant feature and use contractual and operational controls appropriate to the service. We do not promise a provider-specific retention, logging, training, or human-review setting unless Trueside has confirmed and disclosed that setting. Gmail-derived data remains subject to Section 5.

We do not use AI to make legal or similarly significant decisions about you without human review. Please don’t submit sensitive information, such as financial account numbers or health information, unless a feature asks for it.

5. Google user data. If Trueside activates a Gmail connection, Trueside’s use of information received from Google APIs will follow the Google API Services User Data Policy, including the Limited Use requirements. We will use Gmail data only to provide the connected feature described at authorization, and not for advertising, sale, inclusion in aggregated or de-identified datasets, or training general-purpose AI models. Transfers and human access will be limited to circumstances permitted by the Google API Services User Data Policy and described in the applicable authorization flow. These rules apply wherever Gmail-derived information appears, including in conversations and summaries.

6. How We Disclose Information. We disclose personal information only as reasonably necessary for the purposes described in this Policy:

• Approved home-service vendors. If vendor functionality is activated, at the homeowner’s direction we may send an approved vendor the information needed for a requested quote or service, such as the property address, scope, and selected photos or records. The homeowner controls whether Trueside makes that disclosure.

• Realtors, inviters, and sponsors. After acceptance, we share home-record content or activity with a realtor, inviter, or sponsor only when the homeowner chooses to do so. Sending an invitation does not give the inviter ongoing access to the homeowner’s record.

• Authorized household members and co-owners. We provide access only as the homeowner authorizes and subject to available permission controls. Privacy choices and connected accounts are individual. Authorizing a spouse or co-owner to use the home record does not authorize access to that person’s Gmail account, and one person’s Gmail authorization does not extend to another person’s account.

• Processors and service providers. Providers may process information for hosting, storage, authentication, AI-assisted analysis, communications, customer support, property information, mapping, security, and monitoring. Currently contemplated examples include Anthropic for AI processing, Sentry for error monitoring using data scrubbed where configured, Postmark for email delivery, and Twilio for SMS if that channel is activated. Provider availability and the vendors used may change. We require providers to process information for the services they perform for Trueside and subject to appropriate contractual obligations.

• Legal, safety, and compliance. We may disclose information when we reasonably believe doing so is necessary to comply with law, regulation, legal process, or a government request; protect rights, safety, or property; prevent or investigate fraud, abuse, or security incidents; enforce agreements; or respond to a claim or dispute. We may also disclose information to lawyers, auditors, insurers, and other professional advisers who need it to provide services to us.

• Business transactions. Information may be disclosed or transferred in connection with an actual or proposed financing, merger, acquisition, reorganization, bankruptcy, sale of assets, or similar transaction, subject to appropriate confidentiality and data-protection measures. We may also disclose information with the person’s consent or at that person’s direction.

7. Sale, Sharing, Targeted Advertising, and De-Identified Information. We do not sell personal information for money, and the pilot is not designed to use personal information for cross-context behavioral advertising. Some state privacy laws define “sale,” “sharing,” and targeted advertising broadly, so if a technology or disclosure we use ever falls within those definitions, we will give any required notice and opt-out choices. We may use cookies and similar technologies to sign you in, keep the Service secure, remember preferences, and understand how the Service is used. Because there is no common standard for browser “Do Not Track” signals, we do not currently respond to them. We may use aggregated or de-identified information, such as regional maintenance trends, for internal product improvement, analytics, security, research, and business reporting. We will not disclose that information for commercial use unless we update this Policy and give any required notice or choice. We won’t try to re-identify information we keep in de-identified form, and we require any recipient not to either. Gmail-derived data is never included in aggregated or de-identified datasets.

8. Property Records and a Home Sale. If a home-record transfer feature is activated, at the homeowner’s direction and after confirmation of authority, Trueside may make selected facts about the property itself—such as the age or repair history of a roof—available for a next owner’s record. Trueside will not transfer the former homeowner’s personal details, connected accounts, private communications, or documents merely because the home is sold. Any transfer feature will identify what is being shared and request the appropriate authorization.

9. Your Choices and Account Controls. Subject to available product features and applicable law, you may ask to access, correct, export, or delete personal information associated with you; update account information and authorized household access; withdraw an optional consent; or close your account by using available controls or contacting us. If a Gmail connection is activated, Gmail controls are separate. You may disconnect your Gmail account to stop future OAuth access. Disconnection does not delete Gmail-derived content already imported into the home record; use the available deletion control or contact us to request deletion of that imported content. Each person controls that person’s own connected accounts and privacy choices. You may unsubscribe from marketing email by using the unsubscribe link or contacting us. We may still send non-marketing service, security, legal, or administrative messages. SMS is optional and requires separate consent where required. If SMS is activated and you opt in, message and data rates may apply; reply STOP to opt out and HELP for help. SMS consent is not a condition of using the Service, and mobile opt-in information will not be shared with third parties for their own marketing.

10. Retention. We keep your personal information for as long as reasonably necessary for the purposes described in this Policy, including while your account is open. A sealed inspection report for an invitation that is not accepted is deleted 30 days after the invitation. If an invitation is not accepted, we keep a limited record of it-the invitee’s name and email address, the inviter’s identity, the invitation and reminder dates, and whether the invitation was opened-for up to three years after the invitation, so we can recognize a later invitation for the same person and avoid sending duplicate or unwanted invitations. After an account or content deletion request, eligible information is removed from live systems within 30 days and from backups within 90 days as backups are overwritten, subject to legal holds and records we must or are permitted to retain. If a backup is restored, Trueside will reapply all pending deletion requests before the restored data is returned to active use. Consent, acceptance, arbitration opt-out, policy-version, policy-hash, and related audit records are retained while your account is open and for six years after it closes, so we can show what was agreed to and when. We may retain de-identified information that cannot reasonably identify a person or home, but not Gmail-derived data in aggregated or de-identified datasets.

11. Security. We use administrative, technical, and physical safeguards designed to protect personal information, taking into account the nature of the information and the risks involved. Measures may include access controls, authentication, encryption where appropriate, logging and monitoring, vendor management, and incident-response practices. No transmission or storage method is completely secure, and we cannot guarantee absolute security. If an incident requires notice, we will provide notice as required by applicable law.

12. U.S. State Privacy Rights. Depending on your state of residence and whether a state privacy law applies to Trueside or the relevant processing, you may have rights to know or access personal information; correct inaccuracies; delete information; obtain a portable copy; opt out of a sale, sharing, targeted advertising, or certain profiling; limit certain uses of sensitive personal information; appeal a request decision; and not be discriminated against for exercising a right. This section does not represent that every listed law or right applies to this limited Michigan pilot. To submit a request or appeal, contact us using Section 17 and describe the request. We may take reasonable steps to verify your identity and authority, and may deny or limit a request where permitted by law. An authorized agent may submit a request where applicable law permits and appropriate proof is provided. We will respond within the period required by applicable law. If Trueside later engages in an activity requiring a browser-based opt-out signal or online “Your Privacy Choices” mechanism, we will provide and honor it as required.

13. Adults Only. The Service is intended only for adults age 18 and older. Trueside does not knowingly offer the Service to, or collect personal information directly from, children. If you believe a child has provided personal information to us, contact us so we can review and take appropriate action.

14. U.S. Processing and International Access. Trueside operates the Service from the United States. Personal information may be processed in the United States and in other locations where Trueside’s service providers operate. If you access the Service from outside the United States, your information may be transferred to and processed in jurisdictions with different privacy laws. The pilot is not presently designed as an EEA/UK offering.

15. Third-Party Sites and Services. The Service may link to or interoperate with third-party sites or services, including Google services and approved vendors. Those third parties’ privacy practices apply to their own services. Trueside is not responsible for their independent privacy or security practices, and you should review their notices before providing information to them.

16. Changes to This Policy. We may update this Policy as the pilot and our practices evolve. We will revise the “Last Updated” date and provide additional notice of material changes when required by law or appropriate to the change. Unless otherwise stated, an updated Policy is effective when posted or presented for acceptance.

17. Contact Us. For questions, privacy requests, or appeals, contact us at privacy@trueside.com