Privacy Policy

About TrueKeep

TrueKeep provides original digital ebooks and operates this website. For applicable data-protection law, TrueKeep is responsible for the personal data described in this policy.

Contact: support@truekeep.store

Scope of This Policy

This policy applies to the TrueKeep website, accounts, ebook purchases, customer support, and the digital library. It does not govern third-party websites or services that publish their own privacy notices.

Consent

This policy explains our privacy practices. Using the website or agreeing to purchase terms does not provide blanket consent to processing that legally requires separate consent. Where consent is required, we will request it for the specific purpose and explain how to withdraw it.

Information We Collect

• Account data: name, email address, profile image when provided by Google, authentication identifiers, and account ID received through Google or email-code sign-in and Supabase Authentication.
• Purchase data: ebooks ordered, price, currency, order and payment references, transaction status, refunds, disputes, purchase timestamps, and the version and time of your acceptance of purchase terms and licence.
• Payment-related data: Dodo Payments processes payment details. We receive transaction references and status information, but we do not receive or store complete payment-card numbers.
• Library and delivery data: purchased-product entitlements and information needed to provide or secure downloads.
• Support data: your account and order identifiers, request category, messages, replies, request status, and timestamps when you use purchase support; and your email address, correspondence, and any attachments you choose to send by email.
• Store activity: product views, purchase sign-ins, checkout activity, payment confirmations, and issued download links, together with the edition, event reference, and timestamp.
• Technical and security data: IP address, browser and device information, request timestamps, cookies, and security logs processed when you access the store.

How We Obtain Information

We obtain data directly from you, from Google when you choose Google sign-in, from Dodo Payments when a transaction is processed, and automatically from the infrastructure used to operate and secure the store.

How We Use Your Information

• create and secure your account;
• process orders, confirm payment, deliver ebooks, and maintain your library;
• provide support and resolve failed access, incorrect delivery, refunds, and disputes;
• detect fraud, abuse, unauthorised access, and security incidents;
• maintain transaction, tax, accounting, and compliance records;
• send purchase confirmations and measure aggregate purchase activity to improve the store;
• enforce our terms and protect our legal rights; and
• comply with lawful requests and applicable law.

Where these legal bases apply, account administration, payment, delivery, and purchase support are necessary to perform our contract with you. Transaction records may be required for legal obligations. Security, fraud prevention, and limited store measurement serve our legitimate interests, subject to your rights. Where applicable law requires consent, we must obtain it before the relevant processing. You may withdraw that consent without affecting processing already lawfully completed. We do not treat acceptance of our terms as consent to marketing.

Third-Party Services and Privacy Policies

We use the following providers to operate the store:

• Google: optional Google OAuth sign-in;
• Supabase: Google and email-code authentication, database, and account infrastructure;
• Cloudflare: hosting, content delivery, network security, and request processing;
• Dodo Payments: merchant-of-record checkout, payment processing, transaction administration, refunds, disputes, tax handling, and digital-product delivery services; and
• Resend: purchase-confirmation emails, using your recipient address and the order information included in the message.
• Meta: with advertising consent, Pixel page views and checkout activity, and server-side purchase measurement through Conversions API. Matching may use Meta cookie identifiers, your browser information, and SHA-256 hashes of your email and any valid international phone number provided at checkout. These hashes are used for matching and are not anonymous data.

We may also disclose information when legally required, to protect users or the service, or as part of a genuine business reorganisation. Meta advertising measurement is optional and stays off until you choose to accept advertising tracking. We do not send newsletters. We record first-party activity counts for product views, Buy clicks, purchase sign-ins, checkout creation, confirmed payments, and issued download links. Activity records do not directly include your email or IP address. Checkout and payment event references can, however, be linked to your account through our transaction records. We therefore do not describe all activity data as anonymous. Product-view measurement respects your browser’s Do Not Track setting; necessary payment and delivery records are still maintained.

Dodo Payments also processes purchase information under its own privacy notice as merchant of record. Choosing Google sign-in does not give us access to your Gmail messages or contacts. Our infrastructure processes security requests and rate-limit identifiers, including hashed email or IP values and account identifiers, to prevent abuse.

Log Files

Our hosting and security providers process request and diagnostic logs to operate the store, investigate failures and prevent abuse. Logs can include IP addresses, request paths, browser information and timestamps. Transaction and activity references may be linked to an account, so we do not describe these records as anonymous.

International Processing

We sell worldwide and use service providers that may process data in India and other countries. Those countries may have different data-protection laws. Where applicable law requires them, international transfers require lawful safeguards. Contact us for information about the providers and transfer arrangements relevant to your data.

Cookies and Similar Storage

The store uses essential cookies and similar storage required for authentication, session continuity, fraud prevention, and security. Advertising cookies activate only with your permission. Disabling essential cookies may prevent sign-in or library access.

• Sign-in session: Supabase authentication cookies (names beginning with sb-) keep your account signed in. Their lifetime follows the authentication session settings; signing out clears the account session cookies.
• Email-code sign-in: truekeep_otp_email remembers the email for the sign-in flow for up to 10 minutes. truekeep_otp_resend_at supports a 60-second resend cooldown. These cookies are cleared after successful verification.
• App offline fallback: A service worker stores a generic reconnect page and its TrueKeep icon in your browser. It does not cache account pages, checkout responses, or purchased ebooks. You can remove this storage by clearing this site's data in your browser settings.
• Tracking choice: truekeep_tracking_token links this browser to a server-recorded choice for up to 180 days. It honours acceptance or rejection. Choices are per browser, not shared across your account's devices.
• Meta advertising: after acceptance, Meta may set _fbp and _fbc identifiers for ad measurement and matching. See Meta's cookie policy for its handling and retention.

Use Tracking preferences in the footer to accept or reject advertising tracking at any time. Rejecting does not affect buying, transactional email, or ebook access. Withdrawal stops future browser tracking and suppresses unsent purchases linked to this browser's consent. Events already sent cannot be recalled through this control. Clearing browser storage removes the link to the previous choice; contact support if you need help withdrawing a prior receipt.

Basic first-party product-view measurement uses a temporary per-view reference without a persistent visitor identifier or browser storage, and sends no account cookies. We honour the browser’s Do Not Track signal for that measurement.

Data Retention

We keep account and entitlement records as needed to maintain your account and purchased library. Transaction, refund, dispute, tax, and accounting records are kept for the applicable legal recordkeeping period and, where necessary, to resolve claims. Support and security records are kept according to the need to resolve the request, prevent abuse, or comply with law. We review deletion or anonymisation when those purposes no longer apply. Backup copies may remain until the provider’s backup retention period expires and are restricted from ordinary use. Scheduled store maintenance deletes activity measurement records older than 90 days; deletion may be delayed if maintenance is interrupted. This does not delete the underlying purchase records.

Security

We use access controls, encrypted connections, restricted server credentials, authenticated downloads, database security rules, and payment-webhook verification. No online system is completely secure, and we cannot guarantee absolute security.

Your Privacy Rights

Subject to applicable law, you may ask to access, correct, update, erase, or receive information about your personal data; withdraw consent; object to or restrict certain processing; and submit a grievance. We may need to verify your identity before acting. Some information must be retained for transactions, fraud prevention, legal claims, tax, or accounting obligations.

Providing an email address and the information needed to authenticate and confirm a purchase is necessary to use your account and library. Without it, we cannot provide those services. You do not need an account to read our public product and policy pages. You may request account closure by email; we will explain any effect on future library access before completing it. Automated security controls can limit requests; contact support if they block legitimate use.

Send requests to support@truekeep.store. You may also complain to the competent privacy or data-protection authority available in your country.

Where the GDPR applies, rights include access, rectification, erasure, restriction, objection and data portability, subject to the conditions in that law. Requests are normally free of charge; any permitted fee or refusal must be justified under applicable law.

Where the CCPA applies, California residents may have rights to know, delete and correct personal information, opt out of its sale or sharing, limit certain uses of sensitive personal information, and receive equal treatment when exercising their rights. Meta advertising data sharing may fall within these rules. Reject advertising tracking through Tracking preferences and contact support for other privacy requests.

Children’s Information

TrueKeep is intended for people aged 18 or older. We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact us so we can investigate and take appropriate action.

Contact Us

TrueKeep
Email: support@truekeep.store

Please include your account email, order reference where relevant, and a clear description of the issue. We acknowledge consumer complaints within 48 hours and resolve them within one month of receipt. Privacy-rights requests are handled within the deadline required by the applicable law. We will explain any lawful extension and the reason for it.

Changes to This Privacy Policy

We may update this policy when our services, providers, or legal obligations change. The revised policy will show a new effective date. Material changes will be communicated where required.