Privacy policy - Trustivo

At Trustivo (“we,” “us,” “our”), protecting your privacy and ensuring transparency in how we handle your data is a fundamental part of our commitment to users. This privacy policy explains how we collect, use, store, and protect your personal information when you interact with our website, platform, and services (collectively, the “services”).

By using our services, you acknowledge that you have read and understand this policy and consent to the collection and use of your information as described. If you do not agree with this policy, please do not use our services.

This privacy policy should be read alongside our terms of service, which govern your use of our platform.

Scope of this policy

This privacy policy applies to personal information collected through Trustivo’s website, platform, and services.

It does not apply to:

Third-party websites, applications, or services that may be linked from or referenced on our platform. These operate under their own privacy policies, and we encourage you to review them separately.
Any customer data collected and processed by businesses using our platform. If you are a customer of one of our clients, your information is handled according to their privacy policy, and we act only as a service provider.

If you have questions regarding how a business using Trustivo collects or processes your personal information, you should contact that business directly.

What personal information we collect

We collect different types of personal information depending on how you engage with our platform. This may include:

Information you provide to us

When you create an account, subscribe to our services, or contact us, we collect:

Your full name
Business name
Email address
Phone number
Business address (if applicable)
Any other information you choose to provide when filling out forms or communicating with us

Customer contact details (for businesses using our platform)

If you use Trustivo to request reviews from your customers, you may provide:

Customer names
Customer email addresses
Customer phone numbers

This information is used exclusively to facilitate review requests on your behalf. You are responsible for ensuring you have obtained consent from your customers before submitting their contact details to our platform.

Billing and payment information

To process subscription payments, we collect:

Billing name and address
Payment details (e.g., credit card or other payment method information)

We do not store full credit card details. Payments are securely processed through Stripe, Inc., which complies with PCI DSS (Payment Card Industry Data Security Standards).

Automated data collection

When you visit our website or use our platform, we automatically collect certain data to enhance security, improve functionality, and analyze platform performance. This may include:

IP address
Device type and operating system
Browser type and settings
Activity on our platform (e.g., pages visited, time spent, referral URLs)
Location data (if enabled on your device)

This data helps us understand how our platform is used, optimize user experience, and maintain security.

How we use personal information

We use the information we collect for the following purposes:

service delivery and account management – to create and manage your account, enable review requests, and provide access to our platform features.
customer support and communication – to respond to inquiries, troubleshoot issues, and provide relevant updates about our services.
billing and payments – to process transactions, manage subscriptions, and prevent fraudulent payments.
platform improvement and analytics – to analyze usage patterns, enhance functionality, and develop new features based on user behavior.
security and fraud prevention – to monitor platform activity, detect unauthorized access, and protect against malicious activities.
compliance with legal obligations – to ensure adherence to applicable US laws, industry regulations, and data protection requirements.
marketing and promotional communications – to send you relevant content, promotional offers, and service updates (you can opt out at any time).

How we communicate with you

We may contact you through:

email (service updates, marketing communications, support responses)
phone (customer service inquiries, urgent notifications)
SMS (review request confirmations, account-related messages)
platform notifications (in-app messages, dashboard alerts)

If you opt into SMS communications, you may receive text messages related to service notifications or platform usage. Standard messaging and data rates may apply. You can update your preferences within your account settings.

Use of customer contact data

If you use our platform to collect customer reviews, the contact details you provide are used only to facilitate review requests. Trustivo does not use this data for marketing or share it with third parties for unrelated purposes.

How we share personal information

We do not sell your personal information. However, in order to operate our platform effectively, we may share data in the following situations:

With service providers

We engage trusted third-party vendors to help us deliver our services, including:

Hosting and data storage providers
Payment processors
Email and SMS service providers
Analytics and performance monitoring tools
Fraud detection and security services

These service providers are contractually required to protect your data and may only use it for purposes related to our platform.

Legal compliance and protection of rights

We may disclose your personal information:

To comply with US legal requirements (such as subpoenas, court orders, or regulatory inquiries).
To enforce our terms of service and investigate potential violations.
To protect our rights, users, or the public from harm, fraud, or illegal activity.

Business transactions

If Trustivo undergoes a merger, acquisition, or sale, personal information may be transferred as part of the business transition. In such cases, we will ensure that data remains protected under this privacy policy.

De-identified data

We may use aggregated, non-identifiable data for research, analysis, and service improvements. This information does not contain any personally identifiable details.

Cookies and tracking technologies

We use cookies, tracking pixels, and similar technologies to improve our services, understand how users interact with our platform, and enhance your experience. These technologies help us provide essential functionalities, personalize content, and analyze platform usage.

Types of tracking technologies we use

Cookies – Small text files stored on your device that help us recognize repeat visitors, save preferences, and improve platform navigation.
Web beacons (also called tracking pixels) – Tiny image files embedded in emails or webpages that track interactions and measure campaign effectiveness.
Analytics tools – We use third-party analytics services, such as Google Analytics to collect aggregated data on website performance and user activity.
Session recording and heatmaps – We may use tools that track user interactions, such as where you click or how you navigate the platform, to improve usability.

Why we use these technologies

We use tracking technologies for the following purposes:

Essential functionality – Enabling core platform features, such as secure logins and session management.
Performance monitoring – Identifying trends, improving site performance, and troubleshooting errors.
Marketing and advertising – Delivering targeted ads and measuring ad campaign effectiveness through services like Google Ads and Meta (Facebook) Ads.
User experience improvements – Customizing content, saving user preferences, and optimizing our platform layout.

How you can manage cookies

You can control or disable cookies through your browser settings. However, blocking certain cookies may impact platform functionality.

Data retention and user rights

How long we keep your data

We retain personal information only as long as necessary for the purposes outlined in this policy, including:

User account data – Stored while your account is active and for a period after cancellation (unless required for legal or compliance purposes).
Customer review data – Retained while businesses use our platform, but we do not store reviews permanently.
Billing and transaction records – Maintained as required for tax and accounting compliance.
Marketing data – Stored until you opt out or unsubscribe from promotional communications.

If you request account deletion, we will remove your data unless retention is required for legal, security, or contractual obligations.

Your rights over your data

Depending on where you are located, you may have the following rights regarding your personal information:

Access – Request a copy of the personal data we hold about you.
Correction – Ask us to correct inaccurate or outdated information.
Deletion – Request deletion of your data, subject to legal retention requirements.
Opt-out of marketing – Unsubscribe from promotional emails, texts, or targeted advertising.
Restrict processing – In some cases, request that we limit how we use your data.

To exercise these rights, contact us at [hello@trustivo.com]. We will verify your identity before processing requests and respond within the required timeframe under US privacy laws.

California privacy rights (CCPA and CPRA compliance)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

Your California privacy rights

Under CCPA and CPRA, you may:

Request access to personal data – Receive a report on the categories of personal information we collect, use, and share.
Request deletion – Ask us to delete the personal data we have collected from you, subject to certain exceptions.
Opt out of data sales or sharing – While we do not sell personal data, California residents can request to opt out of any data-sharing for targeted advertising.
Correct inaccurate information – Request corrections to your stored personal data.
Limit use of sensitive personal information – If applicable, restrict how certain data is used.

How to make a CCPA request

To exercise your rights under CCPA/CPRA, you can:

We will verify your identity before processing your request. California law allows us 45 days to respond, with an extension of another 45 days if needed.

Authorized agents

If you authorize someone else to make a privacy request on your behalf, we will require written consent and identity verification.

Do not track (DNT) signals

Some browsers allow users to enable a “Do Not Track” (DNT) setting. Currently, our platform does not respond to DNT signals.

Advertising and third-party tracking

We work with third-party advertising platforms to improve our marketing efforts and deliver relevant advertisements to users who may benefit from our services. These third parties may use tracking technologies to collect data about your interactions with our website and other online properties.

How we use third-party tracking and advertising

We use tools from advertising networks such as Google Ads, Google Tag Manager etc. to:

Deliver targeted ads – Show relevant advertisements based on your past interactions with our website.
Measure ad effectiveness – Track how users engage with our ads and improve campaign performance.
Retarget users – Serve ads to people who have previously visited our website.
Analyze website traffic – Understand user behavior across different marketing channels.

What data is collected for advertising?

IP addresses and location data (general region, not precise location)
Device and browser information
Browsing activity on our website
Interactions with advertisements

Data security and protection

We take reasonable and industry-standard measures to protect your personal information from unauthorized access, loss, misuse, or disclosure. However, no online service can guarantee absolute security.

How we protect your data

Encryption – We use SSL/TLS encryption to protect data transmitted between your browser and our platform.
Access controls – Personal information is accessible only to authorized personnel with a legitimate need.
Secure storage – Data is stored with protections against unauthorized access.
Regular security audits – We conduct periodic security reviews and vulnerability testing.
Fraud detection systems – We monitor for suspicious activity to prevent unauthorized account access.

What you can do to protect your account

To help secure your data, we recommend that you:

If you suspect unauthorized access to your account, contact us immediately at hello@trustivo.com.

Children’s privacy

Our services are intended for business use only and are not designed for individuals under the age of 18. We do not knowingly collect personal information from children.

If you are a parent or guardian

If you believe that your child has provided personal information to us, please contact us at hello@trustivo.com, and we will take appropriate steps to delete the data.

International data transfers

Our services may be accessed from outside the United States, and some of our service providers may process data in other countries. This means your personal information may be transferred, stored, or processed in a country outside your own jurisdiction, which may have different data protection laws than your home country.

How we handle international data transfers

When we transfer personal information internationally, we take steps to ensure that your data remains protected under appropriate legal safeguards. These measures may include:

Standard contractual clauses (SCCs) – If data is transferred outside the US, we may rely on legally approved data transfer mechanisms, such as SCCs under applicable privacy laws.
Data processing agreements – Our agreements with third-party service providers include privacy and security obligations to protect your information.
US and global compliance standards – We comply with applicable US laws and international privacy regulations when handling data transfers.

If you are located outside the US and choose to use our services, you acknowledge that your data may be processed in the United States or other jurisdictions where our partners operate.

Changes to this privacy policy

We may update this privacy policy periodically to reflect changes in our services, legal requirements, or industry best practices.

How we notify you of updates

We encourage you to review this privacy policy regularly to stay informed about how we protect your information. Your continued use of our services after any changes indicates your acceptance of the updated policy.

Contact information

If you have any questions, concerns, or requests regarding this privacy policy or how we handle your personal data, please contact us:

For privacy-related requests (such as accessing, correcting, or deleting your data), please include your name, contact information, and a description of your request. We may require additional information to verify your identity before processing certain requests.