Privacy policy

• Store owners and teams (those who register on trunly.com): name, email, password (stored only as a hash), two-factor sign-in settings, store data, invoices and plan payment history, support requests.
• Visitors to trunly.com: technical data (IP address, browser, pages, referral source — including UTM tags and ad click IDs), cookies — see the Cookie policy.
• Buyers of stores on the platform: data a buyer leaves in a particular store (name, phone, delivery address, orders). Their controller is the owner of that store; we process it as a processor — only so the store can work.

• providing the service: registration, sign-in, running the store, plan payment, account and invoice emails;
• support and security: investigating failures, preventing abuse, activity logs;
• analytics and advertising for trunly.com — only with your cookie consent;
• meeting legal requirements (accounting and tax records).

Contract (Terms of use), consent (analytics and advertising cookies, newsletters), legitimate interest (service security) and the requirements of Ukrainian law, in particular the Law “On Personal Data Protection”.

Only with those who help provide the service, and only to the extent needed:

• hosting and site protection — the hosting provider and an attack protection service;
• plan payment — WayForPay (we neither receive nor store card details);
• sending emails — an email delivery service;
• analytics and advertising — Google (Analytics, Ads), Meta, TikTok — if you agreed to the relevant cookies;
• public authorities — only in cases provided for by law.

Some of these services process data outside Ukraine; we choose providers that ensure adequate protection.

Account data — as long as the account exists, plus 90 days after deletion for backups and settlements. Payment data — as long as tax law requires. Technical logs — up to 90 days.

You can find out what data we hold, correct it, restrict processing, withdraw consent, delete your account and data (except what we are required to keep by law), and complain to the Ukrainian Parliament Commissioner for Human Rights. Write to [email protected] — we will reply within 30 days.

Encrypted connection (HTTPS), passwords stored only as hashes, integration keys stored encrypted, two-factor sign-in, restricted access for the support team with an activity log, regular backups.

We will announce significant changes on the site or by email. Version of 14 October 2026.