Random Truffle Privacy Policy
Effective Date: August 27, 2025
Version: 1.0
1. Introduction
Welcome to Random Truffle. This Privacy Policy explains how Random Truffle (“we,” “us,” or “our”) collects, uses, and discloses information. Our mission is to provide our customers (“you” or “Customer”) with a powerful AI-native Marketing and Advertising platform (the “Service”).
This policy is divided into two main parts, reflecting our dual role in handling data:
- Part I: Customer Data (We act as a Data Processor). This section covers the data you provide to us when you use our Service, such as information from your CRM, data lakes, and advertising platforms.
- Part II: Our Data (We act as a Data Controller). This section covers the information we collect from our website visitors, prospective customers, and in the management of our customer accounts.
Part I: Customer Data (Our Role as a Data Processor)
This section applies to the data you connect, upload, or integrate into the Random Truffle Service (“Customer Data”). In this context, you are the Data Controller, and we are the Data Processor.
- Information We Process on Your Behalf
The Random Truffle Service is designed to unify your data from various sources. The specific categories of Customer Data we process are determined by you, the Customer, based on the sources you choose to connect. These may include:
- CRM & Data Lake Information: May include personal identifiers like names, email addresses, phone numbers, company details, and other information about your customers.
- Web & App Analytics Data: May include user IDs, device information, IP addresses, and behavioral data related to interactions with your digital properties.
- Campaign Performance Data: May include advertising campaign metrics, audience segment identifiers, and performance data from platforms like Google Ads, Meta Ads, TikTok Ads, and LinkedIn Ads.
- How We Use Customer Data
We process Customer Data strictly on your behalf and in accordance with your written instructions, as outlined in our Terms of Service and your configuration of the Service. Our processing activities are limited to:
- Providing the Service: To ingest, harmonize, analyze, and structure Customer Data within your dedicated data warehouse instance.
- Enabling AI-Powered Features: To allow you to query your data using natural language and to run predictive models to generate insights and audiences.
- Activating Audiences: To facilitate the secure transfer of audience lists created within the Service to the advertising destinations you select.
- AI, Machine Learning, and Your Data
We are committed to the ethical and secure use of AI.
- Data Segregation: All Customer Data is logically segregated and processed within a secure, isolated environment for each Customer.
- No Cross-Customer Model Training: We do not use your Customer Data to train any shared or global AI models. Any predictive models for features like propensity scoring are trained solely on your own Customer Data within your isolated environment. Your data is never commingled with that of other customers.
- Your Responsibilities as Data Controller
As the Data Controller, you are responsible for ensuring that you have a legal basis (e.g., consent, legitimate interest) for collecting and processing your Customer Data within our Service. You retain full ownership and control over your Customer Data.
Part II: Our Data (Our Role as a Data Controller)
This section applies to the information we collect and process for our own business purposes.
- Information We Collect
- Information You Provide: When you request a demo, contact us for support, or sign up for our Service, we collect information such as your name, work email address, phone number, company name, and job title.
- Information We Collect Automatically: When you visit our website, we may collect technical information such as your IP address, browser type, device information, and usage data through cookies and similar technologies.
- How We Use This Information
- To Provide and Manage Our Service: To create and manage your account, process payments, and provide customer support.
- To Communicate With You: To send you service-related updates, security alerts, and administrative messages.
- For Marketing and Promotions: To send you marketing communications about our products and services. You may opt-out of receiving these communications at any time.
- To Improve Our Website and Services: To analyze usage trends and improve the user experience on our website and within our Service, typically using aggregated and anonymized data.
- Legal Basis for Processing
We process this data based on:
- Performance of a Contract: When you sign up for our Service.
- Consent: For sending marketing communications.
- Legitimate Interest: For improving our services, security, and communicating important service updates.
General Provisions (Applicable to All Data)
- Data Security
We implement robust technical and organizational security measures designed to protect data from unauthorized access, disclosure, alteration, and destruction. These measures include, but are not limited to:
- Encryption of data at rest and in transit.
- Strict access controls and principle of least privilege.
- Regular security assessments and vulnerability scanning.
- A secure, enterprise-grade cloud infrastructure from a leading global provider.
- Data Sharing and Disclosure
We do not sell your personal information or Customer Data. We may share information under the following limited circumstances:
- With Sub-processors: We use a limited number of third-party service providers (e.g., for cloud infrastructure, customer support) to help us provide our Service. These sub-processors are vetted for their security and privacy practices and are bound by confidentiality obligations. A list of our sub-processors is available in our Data Processing Addendum (DPA).
- With Your Direction: We will share Customer Data with advertising platforms when you explicitly direct us to do so by using the audience activation features of the Service.
- For Legal Reasons: We may disclose information if required by law, subpoena, or other legal process, or if we have a good faith belief that disclosure is necessary to protect our rights, your safety, or the safety of others.
- International Data Transfers
Your information may be transferred to, and processed in, countries other than the one you reside in. We rely on legally-provided mechanisms to lawfully transfer data across borders, such as Standard Contractual Clauses (SCCs).
- Data Retention
- Customer Data: We retain Customer Data for as long as your account is active or as instructed by you. Upon termination, we will delete your Customer Data in accordance with our Terms of Service.
- Our Data: We retain information we control for as long as it is necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.
- Your Data Protection Rights
Depending on your location, you may have certain rights regarding your personal information, including the right to access, correct, delete, or restrict its processing. To exercise these rights, please contact us using the details below. If you wish to exercise rights related to your Customer Data, you must contact the respective Data Controller (our Customer).
- Changes to This Privacy Policy
We may update this Privacy Policy from time to to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new policy on our website and updating the effective date.
- Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:
Random Truffle
Email: privacy@randomtruffle.com
