Privacy and data policy
Last updated October 25, 2026.
Who we are
TrueFloat (gettruefloat.com) is operated by Daniel Fillion as a sole proprietor. "We" on this page means him. He decides how your data is used and is responsible for it. Contact: admin@gettruefloat.com.
What we collect
The schedule files you upload (XER or XML), your email address when you sign in, and payment records from our payment provider. We do not collect card details; the payment provider holds them.
What we keep, and for how long
Uploaded schedule files are deleted 24 hours after upload. Free results are deleted after 24 hours. Paid reports are deleted 30 days after purchase. You can delete any report immediately from the report page. In a project, the latest two updates' files are kept, encrypted, so the next update can be compared automatically; a project and everything in it is deleted when you delete it, or after 180 days with no new update and no active plan. Cost and rate fields are discarded when your file is read; the encrypted original file, which still contains them, is deleted within 24 hours.
How it is protected
Each report is encrypted with its own key, split in two halves kept in different systems (our database and our file storage). Deleting a report deletes the half kept in file storage, which keeps no versions or backups, so every remaining copy, including database backups, becomes unreadable. Files are read in a separate locked-down process with no access to our keys. Report links only work for the account that owns them.
AI processing
For paid reports, the computed analysis (not the raw file) is sent to Anthropic's API to draft the narrative. Anthropic does not use API data to train its models; it may retain it for a limited period for abuse monitoring under its terms. You can switch this off for any upload or project ("Don't use AI for the narrative"); a template draft is written instead and nothing is sent to Anthropic.
Sub-processors
| Provider | What for | What it holds |
|---|---|---|
| Fly.io | Hosting the app and the analysis worker | Data in memory while it is processed |
| Neon | Database | Accounts, report records and encrypted fields; half of each report key, itself encrypted |
| Cloudflare | File storage (R2), domain and email forwarding | Encrypted files and results; the other half of each report key, encrypted |
| Anthropic | Drafting the narrative (optional) | The computed analysis for one report, not the file |
| Lemon Squeezy | Payments, tax and invoices (merchant of record) | Billing details; we never see card numbers |
| Resend | Sign-in and notification emails | Your email address |
We do not sell data or use it for advertising.
Your rights
Ask for a copy or deletion of your account data at admin@gettruefloat.com.