Data Protection

TruSondr was built with data protection as a foundational principle, not an afterthought. We believe that meaningful human connection requires a secure environment where privacy is respected and data is protected.

Our approach to data protection goes beyond legal compliance—it's central to our mission of enabling authentic connections without sacrificing privacy.

We follow the principle of data minimization, collecting only what's necessary to provide our service. We specifically:

• Only collect personal information that's required for the functioning of the platform
• Give users control over what personal information they share with communities
• Allow anonymous participation by default
• Enable progressive identity revelation under user control
• Don't track user behavior for advertising purposes
• Don't sell user data to third parties

We implement strict protocols for how your data is stored and processed:

• Secure Infrastructure: All data is stored on secure servers with industry-standard protections
• Encrypted Storage: Data at rest is encrypted using advanced encryption standards
• Limited Retention: We retain your data only for as long as necessary
• Geographic Restrictions: Communities are formed based on country-level location data to ensure compliance with local data protection laws
• Data Isolation: Community data is logically isolated to enhance security

We limit third-party access to your data to only what's essential for providing our service:

• We don't sell your personal data to third parties
• Service providers only receive the minimum data necessary to perform their functions
• We require strict security and confidentiality from all service providers
• We regularly audit third-party access and compliance
• We only use service providers with appropriate data protection safeguards

We respect and uphold your data protection rights, including:

• Right to Access: You can request a copy of your personal data
• Right to Rectification: You can correct inaccurate or incomplete information
• Right to Erasure: You can request deletion of your personal data
• Right to Restrict Processing: You can request limits on how we use your data
• Right to Data Portability: You can request your data in a machine-readable format
• Right to Object: You can object to certain types of processing

To exercise these rights, contact us at privacy@trusondr.com.

TruSondr uses AI technology to match users into communities and provide moderation. Our AI implementation follows these data protection principles:

• AI matching algorithms run on anonymized or pseudonymized data
• AI systems are designed with privacy by design principles
• We regularly audit our AI systems for fairness and data protection compliance
• We minimize profiling and automated decision-making
• We are transparent about when and how AI is used in our services

We implement comprehensive security measures to protect your data:

• Technical Controls: Access controls, firewalls, intrusion detection, and prevention systems
• Regular Security Testing: Vulnerability scanning and penetration testing
• Authentication: Secure JWT-based authentication with token blacklisting
• Automatic Key Rotation: Regular refresh of encryption keys
• Security Monitoring: Real-time monitoring for suspicious activities
• Incident Response: Documented procedures for security incidents

TruSondr creates communities of users within the same country to minimize international data transfers. However, when international transfers are necessary:

• We implement appropriate safeguards in accordance with applicable data protection laws
• We use standard contractual clauses or other legally recognized transfer mechanisms
• We assess the data protection laws of recipient countries
• We inform users when their data may be transferred internationally

In the unlikely event of a data breach, we are committed to:

• Promptly identifying and containing the breach
• Notifying affected users and relevant authorities within the legally required timeframe
• Providing clear information about the breach and potential impacts
• Taking steps to mitigate potential harm
• Conducting a thorough investigation to prevent future breaches