Privacy policy

In short

• The main pages of this website set no tracking cookies.
• If you fill in a form or book a call, we use your details to reply. We send newsletters and follow-up emails only if you agree, and you can stop them at any time.
• We may score enquiries to decide which to answer first. A person replies to every one.
• If we send you a personalised page, we record when it is opened, so we know it was read.
• When a company engages us, we handle its data on its instructions, under a data processing agreement, and delete its exports after the engagement.

Who we are

DataTruth is a trading name of Axiom Growth Ltd, Ireland. In this policy, “we”, “us” and “our” mean DataTruth. We give companies an independent second opinion on AI investments: before a company signs an AI proposal or commits an AI budget, we test what its data can actually support.

We have two roles:

• Controller for the personal data we collect ourselves: from this website, from enquiries and bookings, from introductions and from our own correspondence.
• Processor for personal data inside the exports and documents a client sends us during an engagement. We handle that data only on the client’s instructions, under a data processing agreement. See Client engagements.

Contact for anything in this policy: [email protected].

What we collect

What you give us

• Forms: your email address and, if you give them, your name, company, role and message, plus which page or resource the form was on.
• Booking a call: the details you enter in our booking tool, such as your name, email, company and the time you choose.
• Correspondence: what you write to us by email or in a call.

What we collect when you use the site

• Visit counts: see Cookies and analytics. These do not identify you.
• Technical data: our hosting provider processes information such as your IP address and browser type to deliver pages and protect the site from abuse.
• Personalised pages: if we have sent you one, when it is opened and which parts are read. See Personalised pages.

What others give us

• Introductions: your name, role and work contact details, when an investor, adviser or contact introduces you to us.
• Public business sources: your role and company, from sources such as company websites and professional networks, to understand who we are talking to.

How we use it

• to reply to your enquiry and arrange the call you asked for;
• to record and answer your resource request;
• to send our newsletter and follow-up emails, only if you agreed to them;
• to decide which enquiries to answer first (see Scoring enquiries);
• to know whether a personalised page we sent you was read;
• to count visits to the site, so we know which pages are useful;
• to deliver an engagement you or your company have signed up to;
• to keep the records the law requires and to protect the site and our business.

We do not sell personal data, and we do not use it for advertising.

Legal basis

Under the GDPR, each use needs a legal basis. Ours are:

What we do	Legal basis
Replying to enquiries and arranging calls	Legitimate interests, or steps you ask us to take before a contract
Newsletter and follow-up emails after a resource download	Consent, which you can withdraw at any time
Scoring enquiries to decide which to answer first	Legitimate interests
Recording visits to a personalised page we sent you	Legitimate interests
Counting visits with cookieless analytics	Legitimate interests
Delivering an engagement to a client	Performance of a contract with the client
Keeping accounting and tax records	Legal obligation

Personal data inside a client’s exports is a different case: there we act as processor, and the client, as controller, decides the legal basis. See Client engagements.

Where we rely on legitimate interests, you can object at any time by emailing [email protected].

Scoring enquiries

When you send an enquiry, we may score it by fit, using details such as your company, your role and how you found us, to decide which enquiries to answer first. The score has no legal or similarly significant effect on you, and a person reads and replies to every enquiry.

Personalised pages

Sometimes we send a named contact a page written for them. The link carries their name, and the page records when it is opened and which parts are read, so we know it was read and can follow up usefully. You can ask us to stop at any time by emailing [email protected], and we will delete the visit records linked to your name.

Client engagements

When a company engages us, it sends exports (spreadsheets downloaded from its systems) and, if there is one, the plan or proposal under review. These can contain personal data, such as customer contacts or employee records. For that data:

• we act as processor, on the client’s written instructions, under a data processing agreement signed before any data moves;
• the full list of sub-processors comes with our data processing agreement, before any data moves;
• we keep quality metrics and the memo; the memo cites a handful of sample records as evidence, and the exports are deleted after the engagement;
• we never use a client’s data or metrics derived from it in any benchmark without the client’s written opt-in.

Where a language model is used: the Truth Score™ (our score out of 100 for how far data can be trusted) is rule-based: the same data, scored on the same date, gives the same score, and no AI model decides it. We do use a language model (Anthropic’s Claude, through its commercial API) to read the plan or proposal a client sends and to help draft the memo’s wording from our findings. A person checks every line before it reaches the client. A client can ask us not to use it on their engagement, and we do that part by hand. See Security and data handling.

Who we share it with

We share personal data only with:

• Service providers that run our tools for us, such as website hosting, email delivery, our booking tool, the system we keep enquiries in, analytics and, for engagements only, the language model provider named above. Each is bound by a contract to use the data only to provide its service to us.
• Professional advisers such as lawyers and accountants, where needed.
• A buyer of our business, if it is ever sold or merged, under the same protections.
• Authorities, where the law requires it.

The full list of sub-processors comes with our data processing agreement, before any data moves. If you are not a client and want to know which providers hold your details, ask us at [email protected].

Transfers outside the EU

Some of our service providers are based outside the European Economic Area or process data there. Where that happens, the transfer is covered by a safeguard the GDPR recognises, such as Standard Contractual Clauses approved by the European Commission or an adequacy decision. Ask us for details of the safeguard for any provider.

How long we keep it

We keep personal data only as long as needed for the purpose we collected it for, then delete it. In particular:

• if you withdraw consent to our emails, we stop sending them and keep only the record that you opted out, so we don’t write again;
• client exports are deleted after the engagement; we keep quality metrics and the memo, which cites a handful of sample records as evidence;
• accounting records are kept as long as the law requires.

Your rights

Under the GDPR, you can ask us to:

• give you a copy of the personal data we hold about you;
• correct anything that is wrong;
• delete it;
• restrict how we use it;
• send it to you or someone else in a structured, machine-readable format;
• stop using it where we rely on legitimate interests, including enquiry scoring and personalised page records;
• stop using it where you gave consent, at any time, without affecting what we did before.

Email [email protected]. We will respond within one month. If the data came to us inside a client’s exports, we will pass your request to that client, as controller, and help them answer it.

You can also complain to the Irish Data Protection Commission (www.dataprotection.ie).

Cookies and analytics

The main pages of this website set no tracking or advertising cookies. We use privacy-friendly, cookieless analytics (Cloudflare Web Analytics) to count visits; it sets no cookies and does not identify you.

• Personalised pages we send to named contacts record visits to that page, as described in Personalised pages. Some of them also offer analytics cookies (Google Analytics and HubSpot), which are set only if you accept them on that page.
• Our booking tool is embedded from our own app at app.getdatatruth.com and handles the details you enter to book a call.
• One interactive checklist remembers your ticks in your own browser’s storage. That stays on your device and never reaches us.

You can block or delete cookies in your browser settings at any time.

Changes to this policy

If we change this policy, we will post the new version here and change the “last updated” date at the top.

Contact us

For any question about this policy or your data, email [email protected].