Privacy Policy

1. Who We Are

Trouvo Inc. ("Trouvo," "we," "us," or "our") operates the Trouvo automatic grocery savings platform. We are headquartered in Chicago, Illinois. This Privacy Policy explains how we collect, use, store, and share information about you when you use our services.

Questions? Contact our privacy team at privacy@trouvo.co.

2. Information We Collect

Category	What we collect	Why
Account info	Name, email address, phone number	To create and manage your account
Grocery credentials	Loyalty account username and password	To load coupons and read purchase history on your behalf
Purchase history	Items purchased, prices, coupons redeemed, store location	To calculate savings attributable to Trouvo and charge accordingly
Coupon activity	Coupons we activated, timestamps, redemption status	To accurately attribute savings and calculate fees
Payment info	Credit/debit card via Stripe (we never store raw card numbers)	To charge our service fee
Device & usage	IP address, device type, app version, feature usage	To improve the Service and diagnose issues

3. How We Use Your Information

We use the information we collect to:

• Operate the Service — load coupons, detect savings, and calculate fees
• Process payments for our service fee
• Send you savings summaries and important account notifications
• Improve and develop the Service
• Detect and prevent fraud or abuse
• Comply with legal obligations

We do not use your data to serve you ads, build advertising profiles, or sell your information to third parties.

4. How We Protect Your Grocery Credentials

Your grocery store login credentials are among the most sensitive data we handle. We take extraordinary care to protect them:

• Credentials are encrypted at rest using AES-256-GCM encryption
• Encryption keys are stored separately from encrypted credentials
• Credentials are decrypted only in memory at the moment of use and never written to logs
• Access to credential storage is restricted to automated systems only — no Trouvo employee can read your grocery password
• We access your grocery accounts only to load coupons and read purchase history — never for any other purpose

5. Data Sharing

We share your information only in the following limited circumstances:

• Service providers: Stripe (payment processing), AWS (infrastructure), Resend (transactional email). These providers are contractually prohibited from using your data for their own purposes.
• Legal requirements: If required by law, court order, or to protect the rights and safety of Trouvo or others.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before your data becomes subject to a different privacy policy.

We will never sell your personal data or grocery purchase history to advertisers, data brokers, or any third party.

6. Data Retention

We retain your data for as long as your account is active and for a reasonable period afterward to comply with legal obligations. Specifically:

• Grocery credentials are deleted within 7 business days of account cancellation
• Purchase history and savings records are retained for 3 years for billing dispute purposes
• Account information is retained for 2 years after cancellation, then permanently deleted

7. Your Rights

You have the right to:

• Access: Request a copy of all personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (subject to legal retention requirements)
• Portability: Request your data in a machine-readable format
• Opt-out: Opt out of non-essential communications at any time

To exercise any of these rights, contact us at privacy@trouvo.co. We will respond within 30 days.

8. Cookies and Tracking

Our website uses minimal cookies necessary for authentication and basic analytics (page views, session duration). We do not use third-party advertising cookies or cross-site tracking. You can disable cookies in your browser, though some features may not function correctly.

9. Children's Privacy

The Service is not directed to children under 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at privacy@trouvo.co.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact us at privacy@trouvo.co.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email at least 14 days before they take effect. The "last updated" date at the top of this page reflects the most recent revision.

12. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy, please contact us at privacy@trouvo.co or write to us at Trouvo Inc., Chicago, IL.