Privacy Notice

1. Who we are

Truition is operated by Legacy Wealth Consulting LLC (the “Seller”, “we”, “us”), trading as Truition. We are the data controller responsible for your personal data collected through the Service, except for payment data that Paddle processes as merchant of record (Paddle is the controller for that payment data). This Privacy Notice explains what we collect, why, and your choices.

2. What personal data we collect

We collect the following categories of personal data:

• Account data: your email address, name (if you provide one), and login credentials managed by our authentication provider.
• Submitted content: the cost reports, parent experiences, comments, votes, and other information you post about a school.
• Usage & device data: pages viewed, searches performed, features used, browser type, device identifiers, and IP address, collected through analytics tools such as PostHog and Google Analytics.
• Support messages: the contents of any email or message you send us.

Payment information (card numbers, billing details) is collected and processed by Paddle, our merchant of record — we do not see or store full card details.

3. Why we use it (purposes & legal basis)

• To create and manage your account and provide the Service — based on the performance of our contract with you.
• To process and moderate your submitted reports and experiences — based on contract performance and our legitimate interest in operating an accurate directory.
• To send you transactional messages (sign-in links, receipts, moderation alerts, account notices) — based on contract performance and legal obligations.
• To analyze usage and improve the Service — based on our legitimate interest in product improvement.
• To detect, prevent, and address fraud, abuse, and security issues — based on our legitimate interest in protecting the Service and other users.
• To comply with legal obligations — based on legal obligation.

We only use your data for these purposes. We do not sell your personal data.

4. Who we share it with

We share your personal data with the following categories of recipients:

• Paddle (Merchant of Record): for the sale of memberships, subscription management, payments, tax compliance, and invoicing. Paddle processes your payment data as a controller.
• Service providers and subprocessors: hosting and database providers, our authentication provider, analytics providers (PostHog, Google Analytics), and email delivery services — each used only to operate the Service.
• Professional advisers: legal, accounting, and auditing advisers where needed.
• Authorities: where required by law, regulation, or legal process.

5. International transfers

Some of our service providers and Paddle may process data outside the country where you live, including in the United States. Where this involves transferring personal data from the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision for the destination country.

6. How long we keep it

We keep your account data for as long as your account is active, plus a limited period afterward for security, legal, and audit needs. Submitted reports and experiences are retained as part of the directory while they remain relevant, and may be archived or anonymised when no longer needed. Usage and device data is retained for the period needed for analytics and then deleted or aggregated. We delete or anonymise personal data when it is no longer necessary for the purposes described here, unless retention is required by law.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, object to, or port your personal data, and to withdraw consent where we rely on it. To exercise any of these rights, contact us at admin@truition.co. We will respond in line with applicable law.

If you are in the UK or EEA, you have additional rights under the UK GDPR / GDPR — including the right to lodge a complaint with your local data protection supervisory authority. We will respond to requests within one month, extendable by two further months where necessary for complex requests.

8. Security

We use appropriate technical and organisational measures to protect your personal data, including encryption in transit, access controls, and limiting data access to those who need it. However, no method of transmission or storage is fully secure, and we cannot guarantee absolute security.

9. Cookies

We use cookies and similar technologies for essential functionality (such as keeping you signed in) and, with your consent where required, for analytics to understand how the Service is used. You can manage or disable non-essential cookies through your browser settings. We do not use cookies for cross-site advertising.

10. Children’s privacy

Truition is intended for parents and adult researchers. The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Contact & changes

The data controller is Legacy Wealth Consulting LLC, trading as Truition. For privacy questions or requests, contact admin@truition.co. We may update this Privacy Notice from time to time and will notify members of material changes.