Privacy Policy

TrussCharts ("we", "our", "us") is a product of Journeys Through Search ("JTS"). This policy describes what we collect, how we use it, who we share it with, and your rights.

What we collect

From this website

• Demo and quote requests. When you use the request-a-demo form on any page of this site, we collect your first and last name, work email, the systems you use, and the question you write in. This form is processed by Jotform.
• Analytics. We use Google Analytics to understand how this site is used: pages visited, how visitors arrived, approximate location (city or region), and device and browser type. Google Analytics uses cookies to do this. It does not store full IP addresses.
• Server logs. Our hosting provider records standard request information, including IP address, user agent, and pages visited, which we use for security and debugging.
• Accessibility widget. The accessibility tool on this site is loaded from the jsDelivr content delivery network, which receives standard request information such as your IP address and browser type when it delivers the script.

From client dashboards we build

When we build a custom dashboard for a client, we access the data sources they authorize (phone systems, CRMs, ad accounts, EMRs, and similar). We only access the fields the client explicitly grants.

To power a dashboard, we may store data from those systems, such as call records and caller phone numbers, callback status, agent activity history, CRM status fields, and aggregated counts. Some systems only return recent history through their APIs, so for some dashboards this data is kept in a database on a cloud server that the client owns and we set up, so that the dashboard and its trends stay accurate. Other dashboards read the data live from the client's systems and store nothing.

When a client turns on voicemail alerts with transcription and AI summaries, the transcript and summary are produced by the client's own phone system, such as CallTrackingMetrics, under that provider's agreement with the client. Alerts are delivered to the destinations the client chooses, such as email, Microsoft Teams, Slack, or the dashboard, and may include caller details.

For healthcare clients subject to HIPAA, we sign a Business Associate Agreement (BAA) and follow its terms.

How we use information

• To respond to requests and questions you send us.
• To build, host, and maintain custom dashboards, reports, and alerts for paying clients.
• To understand how this website is used and improve it.
• To keep our systems secure.
• To comply with legal obligations.

We do not sell personal information. We do not share client data between clients.

Cookies

We ask before setting any analytics cookies. When you first visit, a banner lets you accept or reject Google Analytics cookies, and rejecting is as easy as accepting. Until you accept, Google Analytics runs in a consent mode that sets no analytics cookies. If your browser sends a Global Privacy Control signal, we treat it as a rejection. You can change your choice at any time with the “Cookie settings” link at the bottom of every page.

Some things work without asking because the site needs them: our demo request form (Jotform) may set cookies it needs to submit your request, the accessibility tool remembers your display settings in your browser, and we store your cookie choice in your browser so we don't ask again. We do not use advertising cookies. You can also block or delete cookies in your browser settings. The site works without them.

Service providers

We use the following providers to operate this website and our dashboards. They process information on our behalf, for the purposes described above.

• Vercel: hosting of this website and client dashboards
• Google Workspace: email and documents
• Google Analytics: website usage measurement
• Cloud servers owned by the client: data storage for dashboards that need it
• Jotform: our request-a-demo form
• jsDelivr: delivery of the accessibility widget script
• The client's phone system: voicemail transcription and summaries, when a client turns them on
• Email, Microsoft Teams, and Slack: delivery of alerts, to the destinations each client chooses
• CallTrackingMetrics, CallRail, Salesforce, Zoho, HubSpot, Pipedrive, Kipu, ModMed, Google Ads, Microsoft Advertising, Meta Ads, and other systems: only when a client authorizes the integration

Security

Client dashboards are password-gated at minimum. Credentials, API keys, and tokens are stored encrypted and are never exposed to browsers. We use HTTPS everywhere. We follow the principle of least privilege when accessing client systems. More detail is on our security and HIPAA page.

Your rights

You can request access to, correction of, or deletion of personal information we hold about you by contacting us at the address below. For dashboard clients, the authoritative data lives in your source systems. We hold the data needed to power your dashboard, reports, and alerts, as set out in your agreement with us.

HIPAA

If you are a healthcare client, we sign a Business Associate Agreement before any PHI is processed. The BAA governs how we handle PHI, including minimum necessary use, breach notification, and termination.

Contact

Questions about this policy: support@trusscharts.com.

Changes

We may update this policy. If we do, we will post the revised version here with an updated "Last updated" date.