Legal
Privacy Policy
This policy explains what information Source of Truth (“we”, “us”), a Houston, Texas company, collects, why, who helps us process it, and the choices you have.
Two kinds of information
Your account. When a business signs up, we collect the owner’s name, email address, password (stored only as a secure hash), business type, chosen plan and team size, and a phone number if given. Team members, clients and vendors who are invited give us their name and email address when they accept.
Your workspace. Everything a business puts into Source of Truth (its clients, bookings, contracts, invoices, files, messages and notes) is that business’s data. We process it on the business’s behalf, only to run the service for them. If you are a client or vendor of a business on Source of Truth and have a question about your information, ask that business first; we will help them answer.
Payments
Card details are entered into a field run by Stripe and go straight to Stripe. They never reach our servers. We keep only what Stripe sends back to identify the card, such as its brand and last four digits, and the state of the subscription. Payments clients make to a business are handled by Stripe through that business’s own Stripe account.
How we use information
- To run the service: sign you in, show each person the parts of an event they are allowed to see, send the emails and notifications you or your business ask for, and keep the service secure.
- To bill the subscription and tell you about your account, such as the date of your first charge or a failed payment.
- To answer you when you contact us or send a report from inside the app.
- To understand, in aggregate, how the website is used, so we can improve it (see “Website measurement” below).
We do not sell personal information, and we do not use workspace data for advertising.
Website measurement
Our marketing pages count a few events (a page view, a button or profession tab being chosen, the sign-up form being started and finished) with our own first-party measurement. It uses no cookies and no advertising pixels. We store only the event, the page it happened on and, for a page view, the name of the website that linked to us. We do not store your IP address or any identifier that follows you between visits. If your browser sends a Do Not Track or Global Privacy Control signal, nothing is counted at all.
Emails a business sends to its clients through Source of Truth may include a small tracking image so the business can see whether a message was opened. Emails are delivered by an email delivery provider acting for us.
The assistant
When someone in a workspace uses the built-in assistant, or asks it to read a document such as a timeline, the question and the workspace information it needs are sent to an AI model provider (Anthropic) to produce the answer. They are used to answer that request and not to advertise to anyone.
Who processes information for us
We use a small number of service providers, each only for the job below:
- Netlify: hosting the website and app, and the database and file storage behind them.
- Stripe: subscription billing and client payments.
- An email delivery provider (such as Resend, Postmark or SendGrid): sending account and workspace emails.
- Anthropic: the AI model behind the assistant.
- Google Fonts: the typefaces on our pages, which your browser loads from Google.
We may also disclose information if the law requires it, to protect someone’s safety, or as part of a sale or merger of our business, in which case this policy would continue to apply.
How long we keep it
We keep account and workspace information for as long as the account is active. After a subscription ends, we keep the workspace for at least 90 days so it can be exported or restored, and may then delete it. We keep billing records for as long as tax and accounting law requires. Website measurement events are kept in aggregate form only.
Security
Information travels over encrypted connections. Passwords are stored as hashes, never in plain text. Permissions are enforced on our servers, so information a person isn’t allowed to see is never sent to their browser. No system is perfectly secure, and if a breach affects your information we will tell you as the law requires.
Your choices and rights
You can see and correct your account details in the app, export a workspace at any time, and ask us to delete your account. Depending on where you live, you may have further rights to access, correct, delete or move your personal information, or to object to how it is used. Email info@getsourceoftruth.com and we will respond within the time the law allows. We will not treat you differently for using these rights.
Children
Source of Truth is a business tool and is not meant for children under 13. We do not knowingly collect their information.
Changes
If we change this policy in a way that matters, we will update the date above and email workspace owners before the change takes effect.
Contact
Source of Truth, Houston, Texas · info@getsourceoftruth.com