Company Logo
Privacy Center

Your privacy, explained clearly

TRUZH is built around trust - and trust starts with how we handle your data. This Privacy Center summarizes our practices in plain language. The full legal text follows below.

Last updated: March 2026 · Compliant with EU GDPR

Privacy at a glance

The three principles

Everything we do with your data follows these three commitments.

Your data, your decisions

Manage your privacy settings directly from your TRUZH account. Adjust notifications, personalization, and consent at any time.

Security is our priority

Encrypted connections, secured servers, access controls, and regular security audits protect your data at every layer.

Only what we need

We collect data only when strictly necessary. When it's no longer needed, we securely delete or anonymize it.

Section 1

Data controller

TRUZH is the data controller responsible for your personal data under the EU General Data Protection Regulation (GDPR).

General enquiries

contact@truzh.com

Data protection

privacy@truzh.com

Website

www.truzh.com

Registered address

Valencia, Spain

Section 2

What data we collect

We collect only the data necessary to operate the marketplace and deliver our services to you.

Account information

Name, email, profile photo, password, preferences

Community verification

University or workplace email domain

Listing content

Photos, descriptions, prices, item condition

In-app messages

Chat content between buyers and sellers

Device & log data

IP address, browser type, OS, timestamps

Usage analytics

Behavioral interaction data, page views

Note: TRUZH does not store full payment card numbers or credentials. All payment processing is handled by regulated third-party providers.

Section 3

Legal bases for processing

Every data-processing activity at TRUZH is justified under the GDPR. Here is the complete mapping.

PurposeLegal basisGDPR Reference
Creating and managing user accountsPerformance of a contractArt. 6(1)(b)
Enabling listings, chat, and marketplace activityPerformance of a contractArt. 6(1)(b)
Platform security and fraud preventionLegitimate interestArt. 6(1)(f)
Customer support and dispute resolutionLegitimate interestArt. 6(1)(f)
Analytics and personalizationConsentArt. 6(1)(a)
Legal and tax reporting (e.g., DAC7)Legal obligationArt. 6(1)(c)
Section 4

How we share your data

We do not sell your personal data. Ever.

We share data only with the parties below, under strict data processing agreements:

Technical service providers

Hosting, analytics, and email delivery platforms that process data on our behalf under strict data processing agreements.

Payment providers

Regulated third-party processors that handle online transactions. TRUZH does not store full card details.

Public authorities

Where required by law, including EU DAC7 reporting obligations for high-volume sellers.

Section 5

Cookies and similar technologies

We use cookies to operate and improve TRUZH. You have full control over which categories you accept.

  • Strictly necessary cookies: required for login, security, and core functionality
  • Analytics cookies: activated only with your consent
  • Marketing cookies: activated only with your explicit consent
Read the full Cookie Policy
Section 6

Your rights under GDPR

If you are located in the European Economic Area (EEA) or a jurisdiction with equivalent protections, you have the following rights - and we will respond to any request within 30 days.

Right of access

Request a copy of all personal data we hold about you.

Right to rectification

Correct inaccurate or incomplete data at any time.

Right to erasure

Request deletion of your data where legally permissible.

Right to restriction

Limit how we process your data in certain circumstances.

Right to data portability

Receive your data in a structured, machine-readable format.

Right to withdraw consent

Revoke previously given consent at any time.

To exercise any of these rights: Contact us at privacy@truzh.com

You also have the right to lodge a complaint with your national data protection authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD) at www.aepd.es.

Section 7

Data retention

When data is no longer required, it is securely deleted or anonymized.

Account and listing data

Until you delete your account

Chat messages and support records

Up to 24 months

Legal, financial, and tax records

Up to 10 years (where required by law)

International data transfers

Your data is primarily processed within the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure appropriate safeguards including Standard Contractual Clauses (SCCs) approved by the European Commission.

Data security

We implement encryption in transit and at rest, role-based access controls, regular security assessments, and incident response procedures. No method is 100% secure - if you suspect an issue, contact privacy@truzh.com immediately.

Children's privacy

TRUZH is intended for users aged 18 and over. We do not knowingly collect personal data from minors. If we become aware that a minor has registered, the account will be suspended and the data deleted promptly.

Questions about your privacy?

Our data protection team is ready to help with any privacy question, request, or concern.

General enquiries: contact@truzh.com