Last updated: 2026. This document describes how truelo handles your data.

What we collect

• Identity — your Slack user ID, display name and email (via Slack sign-in), and, if connected, your GitHub username and Jira account ID.
• Work activity — commit metadata (repository, branch, message, additions/deletions, timestamps) from your connected GitHub organization, and issue metadata from your connected Jira site. We do not store source code.
• Self-reported input — what you submit via the /wrap command (hours, notes) and time-off requests (dates, type, optional reason).
• Operational data — settings, integration connection records (secrets encrypted at rest), and logs needed to run the service.

How we use it

To generate end-of-day summaries and dashboards, manage time off, and provide the features you and your workspace admins configure. Commit messages and notes may be sent to a third-party AI provider (OpenAI or Anthropic) to generate summaries and ratings; that content is processed to produce the output and is not used to train their models under the applicable API terms.

Who can see it

Your data is scoped to your organization. Access within your organization follows the roles your admins configure. We do not sell your data or share it with third parties except the sub-processors needed to run the service (hosting, database, and the AI provider).

Retention & deletion

We keep data for as long as your organization uses the service. You can request a copy or deletion of your personal data, and an admin can remove members or delete the organization, which removes its data. Contact us to exercise these rights.

Security

Integration secrets are encrypted at rest, access is authenticated and role-gated, and server-side credentials are never exposed to the browser.

Contact

Questions or data requests: trueloapp@gmail.com.