Privacy policy

Information we handle

• Accounts and teams. Email addresses, password hashes, invitations, sessions, workspace membership, store permissions, and records of account actions.
• Brand and campaign content. Product details, audiences, brand voice, claims documentation, prompts, AI presenter descriptions, scripts, calendars, images, audio, videos, review choices, and publishing consent.
• Connected accounts. Account identifiers and display names, publishing permissions, and authorization tokens issued by TikTok or the configured publishing provider. Trupe does not ask for your TikTok password.
• Publication and performance. Schedules, publication results, post identifiers and URLs, and available aggregate performance counts reported by the provider. These records can include views, likes, comments, and shares as counts.
• Billing. Your Trupe organization’s billing name and identifier, store terms, invoice evidence and amounts, and payment references and status. When Stripe Checkout is enabled, Stripe handles card details on its hosted page; Trupe does not store full card numbers.
• Support and operations. Messages and reports you send us, audit records, and service logs and metrics such as route, response status, and timing. Hosting and network providers also process connection information to deliver the service.

The public pages use no advertising trackers or third-party analytics scripts. Signing in uses cookies needed to maintain your session. Connected services and payment pages have their own privacy policies.

How we use and share information

We use information to operate your workspace, generate and review content, publish with your authorization, report performance, prepare invoices, handle support, and protect the service.

Workspace managers control team membership and store access. Authorized users can see information within their granted access. Trupe operators can access operational records to provide and maintain the service.

Service providers receive information needed for the configured service. These include hosting and private storage, AI writing and rendering providers, publishing platforms, payment processing when enabled, and communications providers.

Brand context and content may be sent to the AI providers used for your program. Approved media and publishing choices are sent to the connected publishing service. Provider use and retention also depend on that provider’s terms.

We may disclose information when required by law or to protect rights, safety, and the service. We do not sell personal information or use it to target advertising to you.

Connected social accounts

Trupe uses connected-account data to publish authorized content and report performance for your store’s account. Reviewers choose the destination, visibility, interactions, and commercial disclosures before a person with approval permission consents to publication.

Disconnecting a direct TikTok connection removes its encrypted tokens, TikTok account identifier, and nickname from the live connection record. It stops unstarted server and Android publications for that destination. Ayrshare publications remain unchanged. Publications already accepted by TikTok may still finish.

Trupe also requests token revocation from TikTok. If that request cannot be confirmed, remove Trupe in TikTok’s app permissions. Repeating Disconnect cannot retry credentials that Trupe has erased.

Ayrshare connections use a separate publisher profile and account-linking process. Direct TikTok disconnection does not change Ayrshare’s access. For personas, a workspace manager can use ‘Disconnect this publisher in Trupe’ to remove the local profile key and linked account name. This does not revoke access at Ayrshare or TikTok; manage those permissions separately. Contact support about stored publisher data for a store’s default destination.

For admitted publications, Trupe keeps a one-way account fingerprint with the publication record. It can match a later authorization to the original account without retaining that account’s live credentials.

Disconnection does not delete published posts or all account history. Publication, audit, performance, and billing records can remain. Older audit records can include an account nickname; backups can contain earlier connection records.

Trupe receives aggregate post metrics rather than a list of individual viewers through this workflow. TikTok’s own privacy policy applies when people view content on TikTok.

Storage, security, and retention

Production media is kept in private S3-compatible object storage. Signed-in users preview media through Trupe, and publishing providers receive time-limited delivery links. Account permissions restrict access; live TikTok authorization tokens are encrypted in the application database and passwords are hashed.

Completed media is queued for removal after all its uses have been finished for at least 30 days. Unused ready uploads are also eligible after 30 days. Pending review, scheduled work, active generation, and unresolved publication attempts can keep media longer.

Removing media revokes new previews and delivery links, then queues storage deletion. In-progress transfers may finish, and deletion can take longer when the storage provider is unavailable. Retained object versions and backups follow separate storage policies.

Account, campaign, audit, publication, performance, and billing records can remain after media is removed. We retain records needed to provide the service, resolve issues, and meet accounting or legal obligations. Contact us about deletion and the retention applicable to your information.

Removing a stored video does not remove an existing social media post. The account owner manages published content on the social platform.

Your choices and requests

Email hello@trupe.ai to request access, correction, export, or deletion, or to ask a privacy question. Identify the relevant account or workspace. We may need to verify your identity and authority before acting.

Some records may need to remain for an ongoing service, a dispute, security, or applicable law. We will explain limitations that apply to your request. Privacy rights and available remedies depend on your location.

Managers can change team access. Store connection permission allows direct TikTok disconnection for that store; shared persona connections require a workspace manager. People with the relevant permissions can cancel unstarted publications or remove stored media. See support for these options and content reports.

Children and changes

Trupe is a business service intended for adults, not children under 18. Contact us if you believe a child has supplied personal information.

We will post changes to this policy here and update its effective date. Contact us if you need information about a previous version.

Contact

EDE Ventures, LLC d/b/a Trupe · hello@trupe.ai