Privacy Policy

MT Associates Limited (“TrueMER”) operates TrueMER, a marketing-analytics service for online retailers. This policy explains what we collect, why, and the choices you have. It is written for customers and visitors in the United States.

1. Two different roles

This distinction matters for your rights, so we state it up front.

• You, our customer. When you sign up for TrueMER we are the business responsible for your account information.
• Your shoppers. When TrueMER records advertising touchpoints and orders for your store, we act only as your service provider (as that term is used in the California Consumer Privacy Act). We process that information solely on your written instructions, we do not sell or share it, and we do not use it for our own purposes or to build cross-customer profiles. If you are a shopper with a question about your data, contact the store you purchased from — they control it.

2. Information we collect

• Account information — your email address, a hashed password, team members you invite, and billing status. Card details go directly to Stripe; we never receive or store them.
• Connected platform data — advertising metrics (spend, impressions, clicks, conversions, campaign names) from Meta, Google Ads and Pinterest; attributed revenue from Klaviyo; orders from Shopify or from files you upload, including order numbers, dates, amounts, items, and customer email addresses where your export contains them.
• Website measurement data — if you install the TrueMER tracker on your store, we record, for each visit that arrives from an identifiable source: a random visitor identifier stored in a first-party cookie, the referring website, campaign tags (utm parameters), advertising click identifiers, the page path, and a timestamp. IP address and browser user-agent are stored only as salted one-way hashes used for fraud and bot filtering — we do not retain them in readable form, and we do not collect names, addresses, payment details or any special categories of personal information through the tracker.
• Usage data — sign-ins, uploads and other in-app actions, retained for security and support.

3. How we use information

Only to provide the service: to compute your reporting, secure your account, provide support you request, and bill you. We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use your data or your shoppers' data to train machine-learning models.

4. Read-only access

TrueMER requests read-only permissions on every platform it connects to. It does not create, edit, pause or delete campaigns, ads, budgets, emails, products or orders in your accounts. The one exception is our own tracking script, which writes a visitor identifier to your store's cart so an order can be matched to its advertising journey.

5. Cookies

Within the TrueMER app we use only cookies that are strictly necessary to keep you signed in. The tracker sets one first-party cookie on your store (tm_vid, a random identifier, up to 400 days) for the sole purpose of measuring which marketing produced a sale. A visitor whose browser carries tm_consent=denied is not recorded, and any consent tool that blocks third-party scripts also blocks ours. If you install the tracker, you are responsible for disclosing it in your own privacy policy and for obtaining any consent your jurisdiction requires.

6. Your California privacy rights

If you are a California resident, the CCPA as amended by the CPRA gives you the right to know what personal information we hold, to request a copy in a portable form, to correct it, to delete it, and to be free from discrimination for exercising those rights. In the twelve months before the date above we collected the categories described in section 2, for the business purposes described in section 3. We do not sell personal information and we do not share it for cross-context behavioral advertising, and we have not done so in the preceding twelve months — so there is nothing to opt out of. We do not knowingly collect personal information from anyone under 16. To exercise a right, email support@truemer.com; we verify requests through the email address on the account and respond within 45 days.

7. Other US state privacy rights

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana and other states with comprehensive privacy laws have comparable rights to access, correct, delete and port their personal information, and to appeal a denied request. Use the same contact address; if we decline a request we will explain why and how to appeal.

8. Security

• Platform access tokens and API keys are encrypted at rest, never displayed back in full and never written to logs.
• All traffic is served over HTTPS. Passwords are stored only as salted hashes.
• Data is stored on managed infrastructure located in the United States.

9. Where your data is stored and who can access it

TrueMER is operated by MT Associates Limited (“TrueMER”), a company established in the Hong Kong Special Administrative Region. Your data is stored on servers located in the United States. Our personnel and service providers may access it from Hong Kong and other locations in order to operate and support the service. By using TrueMER you understand that your information may be accessed from outside the United States. We apply the same protections described in this policy wherever the data is accessed.

10. Service providers

We use a small number of vendors to operate the service: Google Cloud (hosting), Neon (database), Stripe (payments), and Resend (transactional email). Each is bound to use the information only to provide services to us.

11. Retention and deletion

We keep data while your account is active. You can disconnect any platform at any time, which deletes its stored credentials, and clear imported data from the Upload page. Website measurement data is retained for 25 months and then deleted. To delete your account and all associated data, email support@truemer.com — we complete deletion within 30 days, except where we must retain records to comply with law.

12. Children

TrueMER is a business tool and is not directed to children. We do not knowingly collect personal information from anyone under 16.

13. Changes

If we make a material change we will update the date above and notify account owners by email.

14. Contact

MT Associates Limited, 60 Queens Road East, 2nd Floor, Wanchai, Hong Kong · support@truemer.com