Book a demo

Privacy Policy

Last updated: October 16, 2026

This Privacy Policy explains how Truly LLC (“Truly,” “we,” “us”) collects, uses and shares personal information when you visit www.truly.law, use the Truly app at app.truly.law, or take an interview that a law firm sends you through Truly.

Truly is software for law firms. Truly is not a law firm and does not give legal advice.

Who this policy covers

Law firms and their staff. Firms that subscribe to Truly (“Customers”) and the people at those firms who use it.

Law firm clients. People who receive an interview link from a law firm and take an interview, upload documents or sign in to the client portal. When you do this, you are sharing information with your law firm. Truly processes that information for the firm, under the firm’s instructions. The firm decides what questions are asked, who at the firm can see your answers, and how long your information is kept. Questions about the firm’s use of your information should go to the firm.

Website visitors. People who browse www.truly.law or ask us for a demo.

Information we collect

Information you give us

  • Account information: name, work email, mobile phone number, firm name, practice area and role.
  • Interview information (law firm clients): your spoken or typed answers, a recording of voice interviews, the written transcript of your interview, your preferred language, any corrections you make to your answers, and your approval of the transcript.
  • Documents: files you upload, such as IDs, certificates or records your firm asks for.
  • Sensitive information: interviews and documents may include sensitive information a law firm asks for, such as government ID numbers, immigration status, health and injury details, financial information or criminal history. We use it only to provide the Service to the firm, and never to profile you or for advertising.
  • Template materials (law firms): intake forms and other documents a firm uploads to build an interview.
  • Billing information (law firms): handled by our payment processor, Stripe. We receive limited details such as the card brand, the last four digits, and the bank name. We never receive or store full card or bank account numbers.
  • Messages to us: what you send when you book a demo, email us or ask for support.

Information collected automatically

  • Sign-in and security records: the date and time of each sign-in, the sign-in method, IP address, device and browser information, and records of failed sign-in attempts.
  • Usage records: which features a firm uses and how much interview capacity (“Truly Tokens”) is used.
  • Cookies and similar technologies: see “Cookies” below.

Information from Google

If you sign in with Google, we receive your name, email address and profile picture from your Google account. We use them only to sign you in and identify your account. Truly does not request access to your Gmail, Google Drive, Calendar or Contacts.

Truly’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, we do not use it to train AI models, and we do not allow people to read it except with your consent, for security, to comply with law, or when it has been aggregated and anonymized.

Voice

When you take an interview by voice, your microphone audio is streamed to our speech and AI providers in real time so the interview can respond to you and produce a transcript. We store a recording of the interview and the written transcript in the United States for your law firm, and we keep them as described under “How long we keep information.”

How we use information

We use personal information to:

  • run interviews, generate transcripts, check that answers are complete, and ask follow-up questions;
  • turn a firm’s intake forms into interview questions;
  • send interview invitations, sign-in codes, reminders and account emails by email, text message or WhatsApp;
  • let firms review cases, transcripts and documents, and send them to tools the firm connects, such as Prima.Law;
  • bill firms, measure usage, and prevent fraud;
  • keep Truly secure, investigate problems and enforce our Terms;
  • provide support and respond to requests; and
  • meet legal obligations.

We do not sell personal information for money. Some marketing cookies on www.truly.law may let advertising partners show you Truly ads on other sites. See “Cookies” below.

Artificial intelligence

Truly uses artificial intelligence, provided by Google Cloud’s Vertex AI (Gemini models and Speech-to-Text), to conduct interviews, transcribe speech, check answers and build interview questions. An AI interview starts with a notice that sets the context, and your law firm reviews the results. AI can make mistakes. Your firm’s attorneys, not Truly, decide what your information means for your legal matter.

Your information is not used to train AI models. Google does not use the information processed through Truly to train its models, and neither does Truly.

How we share information

We share personal information only as follows:

  • With your law firm. Interview answers, transcripts and documents go to the firm that invited you. People at the firm see them according to the roles the firm assigns.
  • With service providers who help us run Truly, under contracts that limit their use of the information:
  • Google Cloud: hosting, file storage, AI and speech processing, and sign-in with Google
  • Our database hosting provider: database hosting in the United States
  • Stripe: payments
  • SendGrid: email delivery
  • Twilio: text message and WhatsApp delivery
  • Kinsta: website hosting
  • With tools a firm turns on. If a firm connects Prima.Law or sets up a webhook, Truly sends case information to that tool when the firm tells it to.
  • For legal reasons. To comply with law or legal process, to protect the rights, safety and property of Truly, our users or others, or to enforce our Terms.
  • In a business transfer. As part of a merger, acquisition or sale of assets, subject to this policy.

Mobile information is not shared with third parties or affiliates for marketing or promotional purposes. Text message opt-in data and consent are not shared with any third party.

Cookies

www.truly.law and the Truly app use cookies and similar technologies where necessary to:

  • make the site and app work, for example keeping you signed in and secure;
  • provide customer support, for example a support chat or help widget; and
  • support marketing, for example measuring which pages and campaigns bring people to Truly.

We do not use advertising pixels in the Truly app (app.truly.law). You can block or delete cookies in your browser settings. Cookies needed to sign in are required for the app to work.

Text messages and WhatsApp

Truly sends text (SMS and MMS) messages and WhatsApp messages for sign-in codes, interview invitations, reminders and follow-ups, often on behalf of a law firm. We send them only with consent:

  • law firm clients consent when they sign up for their law firm’s services, and each law firm is required to collect that consent;
  • law firm staff consent when their firm signs up for Truly; and
  • anyone who requests a sign-in code by text has asked for that message.

Consent is not a condition of any purchase. Message frequency varies. Message and data rates may apply. Reply STOP to opt out at any time, or HELP for help. You can also email info@truly.law. See our SMS Terms.

We use your mobile number only to send these messages and to secure your account. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. We share mobile numbers only with our messaging provider, Twilio, to deliver messages.

How long we keep information

  • Firm accounts: while the subscription is active. When an account is closed, we delete it within 30 days, together with all of its data: users, cases, interview recordings, transcripts and documents.
  • Interview recordings, transcripts and documents: kept for the law firm until the firm deletes them or closes its account. Firms are responsible for their own retention schedules.
  • Sign-in codes: stored only as a scrambled (hashed) value and expire after 10 minutes.
  • Automation history: deleted after 60 days.
  • Billing records: kept as long as tax and accounting law requires.

How we protect information

Truly runs on Google Cloud in the United States. Data is encrypted in transit and at rest. We use passwordless sign-in, short-lived sessions that end after 15 minutes of inactivity, sign-in rate limits and lockouts, role-based access for firm staff, and audit logs of account activity. Access by Truly personnel is limited to what is needed to operate and support the Service. Payment details are handled by Stripe. No system is perfectly secure, and we can’t guarantee absolute security. See our Security page for more.

Security incidents. If we learn of a breach affecting personal information, we will notify affected Customers without undue delay, and individuals and regulators where the law requires.

Health information

Truly is not a health care provider, health plan or clearinghouse, and is not a “covered entity” under HIPAA. A law firm may collect health or injury information through Truly for a legal matter. Truly acts as a HIPAA “business associate” only where it has signed a business associate agreement with a Customer.

Where information is stored

Truly stores information in the United States. If you use Truly from outside the United States, your information will be transferred to and processed in the United States, where privacy laws may differ from those where you live. When the law requires, we protect international transfers with appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.

Legal bases for processing (EEA, UK and Switzerland)

If European, UK or Swiss data protection law applies to you, we process personal information on these legal bases:

  • To perform a contract: providing the Service to Customers and their users.
  • Legitimate interests: securing the Service, preventing fraud, improving the Service and marketing to businesses, balanced against your rights.
  • Consent: non-essential cookies and text messages, which you can withdraw at any time.
  • Legal obligation: tax, accounting and responding to lawful requests.

For interview information about law firm clients, the law firm is the “controller” and decides the legal basis. Truly is its “processor” and acts only on its instructions.

Your choices and rights

  • Law firm clients: to see, correct or delete interview information, contact the law firm that invited you. You can correct your own answers when you review your transcript. If you contact us, we will pass your request to the firm.
  • Firm users and website visitors: you can ask us to access, correct or delete your personal information, or for a copy of it, by emailing info@truly.law. We will verify your request and respond within the time the law requires. An authorized agent may make a request for you with your written permission. We will not discriminate against you for using your rights.
  • U.S. state privacy rights: depending on your state (for example California, Colorado, Connecticut, Virginia or Texas), you may have the right to know what personal information we collect and how we use and disclose it; to access, correct, delete or get a copy of it; to opt out of its “sale,” “sharing” for cross-context behavioral advertising, or use for targeted advertising or profiling; and to limit the use of sensitive personal information. We do not sell personal information for money and do not use sensitive personal information for purposes beyond providing the Service. To opt out of marketing cookies, adjust your browser settings or email us. Where the law requires, we treat a Global Privacy Control signal as an opt-out request for that browser. If we deny your request, you may appeal by replying to our decision.
  • EEA, UK and Swiss rights: you may have the right to access, correct, delete, restrict or object to processing of your personal information, to data portability, and to withdraw consent at any time. You may also complain to your local data protection authority.
  • Texts: reply STOP at any time.
  • Emails: account and security emails are part of the service. Marketing emails include an unsubscribe link.

Customers’ data processing terms

Our Terms of Service include data processing terms that govern how Truly handles personal information on behalf of law firms. Customers that need a separate signed data processing agreement can request one at info@truly.law.

Children

Truly is a business tool for law firms and is not directed to children under 13 (or under 16 where that age applies). We do not knowingly collect personal information from children except when a law firm uses Truly to collect information for a legal matter. In that case the firm is responsible for obtaining any required consent from a parent or guardian. If you believe a child has given us information without that consent, email info@truly.law and we will delete it.

Changes to this policy

We may update this policy. If the changes are significant, we will post the new version here with a new “Last updated” date and, for Customers, give notice by email or in the app.

Contact us

Truly LLC 603 E 16th St, Ste 110 Holland, MI 49423 info@truly.law