1. Data Protection at a Glance

General Information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data involves all data with which you can be personally identified.

Responsible Party

TruthPush, Owner: Timo Gertheiss
Lessingstr. 68
76135 Karlsruhe
Germany
Email: support@truthpush.com

2. Hosting & Infrastructure

Hetzner Online GmbH

We host our website and backend infrastructure on servers provided by the external service provider Hetzner Online GmbH (Industriestraße 25, 91710 Gunzenhausen, Germany).

Personal data collected on this website is stored on Hetzner's servers. This may include IP addresses, meta and communication data, website accesses, and other data generated via a website.

The use of Hetzner is for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 (1) (b) GDPR) and in the interest of a secure, fast, and efficient provision of our online service by a professional provider (Art. 6 (1) (f) GDPR).

Data Processing Agreement: We have concluded a Data Processing Agreement (DPA) with Hetzner Online GmbH. This is a contract mandated by data protection law, which ensures that they process the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

3. Data Collection on this Website

Cookies & Local Storage

We use technically necessary cookies or Local Storage entries (e.g., for login status and display preferences) to operate the website. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in functionality). We do not use tracking or advertising cookies.

Contact Form

If you contact us via the contact form, the data you enter (in particular your email address and message) will be stored by us for the purpose of processing your inquiry and in case of follow-up questions. We do not share this data without your consent.

The legal basis is Art. 6 (1) (b) GDPR if your inquiry relates to contract performance or pre-contractual measures, and Art. 6 (1) (f) GDPR otherwise (legitimate interest in responding to inquiries). We retain this data until the purpose no longer applies or you request deletion, unless statutory retention obligations apply.

Registration & Account Data

When you register, we store your email address and a hashed password. This data is necessary to provide you access to the dashboard (Art. 6 (1) (b) GDPR, performance of a contract or pre-contractual measures).

Unverified accounts: If you do not confirm your email address after registration, the personal data stored for your account will be automatically and permanently deleted (hard delete) after seven days. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in preventing data clutter, abuse, and maintaining a clean user database).

Bot Protection on Registration (Cloudflare Turnstile)

To protect against automated registrations and abuse, we use Cloudflare Turnstile provided by Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA) on our registration pages.

Turnstile checks whether input is made by a human or an automated program. This may involve processing IP address, browser and device information, and interaction data. Processing serves the security of our service and abuse prevention (Art. 6 (1) (f) GDPR).

Where personal data is transferred to the USA, the transfer is based on appropriate safeguards under Art. 46 GDPR (e.g., Standard Contractual Clauses). Further information is available in the Cloudflare Privacy Policy.

Processing of Feed Data (Third-Party Content)

Our service aggregates publicly available data (posts) from the Truth Social platform. This data may contain personal information of third parties. Processing is carried out on the basis of our legitimate interest (Art. 6 (1) (f) GDPR) in providing a journalistic-editorial aggregation service and reading aid.

Retention Period: This third-party data is only temporarily cached in our systems to enable technical delivery to users. Automatic deletion of this content from live access occurs system-side after 24 hours.

4. Email Delivery (Brevo)

We use the email service Brevo (Brevo SAS, 106 boulevard Haussmann, 75008 Paris, France; formerly Sendinblue) to send transactional emails (e.g., registration confirmation, password reset, service notifications).

Data required for delivery is processed, in particular your email address and the content of the respective message. The legal basis is Art. 6 (1) (b) GDPR (contract performance) or Art. 6 (1) (f) GDPR (legitimate interest in reliable system operation).

Data Processing Agreement: We have concluded a DPA with Brevo. Details on Brevo's processing are available in the Brevo Privacy Policy.

5. Payment Processing (Stripe)

Payment processing is handled by the payment service provider Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland).

If you choose a paid service, the data required for payment processing (e.g., name, email, payment details) will be transmitted to Stripe (Art. 6 (1) (b) GDPR). Stripe processes your payment data on its own responsibility. TruthPush does not have access to your full payment data.

Data transfer to the USA: Stripe also processes data in the USA. Data transfer is based on the EU-US Data Privacy Framework and Standard Contractual Clauses (SCC) of the EU Commission. Details can be found in the Stripe Privacy Policy.

6. AI-Assisted Content Analysis (OpenAI)

For automated analysis of public posts (e.g., sentiment scoring, keyword and ticker extraction), we use AI services provided by OpenAI Ireland Ltd. and affiliated OpenAI group companies. Post content to be analyzed is transmitted to OpenAI's API for this purpose.

The legal basis is Art. 6 (1) (b) GDPR (provision of the service you subscribed to) and Art. 6 (1) (f) GDPR (legitimate interest in automated preparation of content for alerts and API output). Only text content required for analysis is transmitted, not your login credentials.

Data transfer to the USA: OpenAI may also process data in the USA. Transfer is based on appropriate safeguards under Art. 46 GDPR. Further information is available in the OpenAI Privacy Policy.

7. Telegram Integration

If you activate the Telegram Alert service, we store your Telegram Chat ID in our database. This is technically mandatory to send you messages.

The legal basis is Art. 6 (1) (b) GDPR (performance of a contract). We transmit the content of the alerts (e.g., text of the post) to the API of Telegram (Telegram Messenger Inc.). By using Telegram, their privacy policies apply. Please note that Telegram may process data in third countries.

8. Your Rights

You have the right to request information about your stored personal data, its origin and recipients, and the purpose of data processing at any time and free of charge. You also have the right to request the correction or deletion of this data. You can contact us at any time using the address given in the Legal Notice for this purpose.

Subject to legal requirements, you also have the right to restriction of processing, data portability, objection to processing, and to lodge a complaint with a supervisory authority.