Privacy Policy | Trustfolio

Trustfolio ("we", "us", or "our") operates the website at trustfolio.dev("Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Service.

1. Information We Collect

1.1 Information You Provide

Account Information: Name, email address, and profile details when you register for an account.
Testimonial Content: Testimonials, reviews, images, and other content you or your customers submit through the Service.
Communications: Information you provide when you contact us for support or send feedback.

1.2 Information Collected Automatically

Usage Data: Pages visited, features used, time spent, and interaction patterns.
Device Information: Browser type, operating system, device type, and screen resolution.
Log Data: IP address, access times, referring URLs, and error logs.
Cookies & Similar Technologies: We use cookies and similar tracking technologies to maintain sessions and analyze usage. See Section 6 for details.

1.3 Information from Third Parties

Authentication Providers: If you sign in via a third-party service (e.g., Google), we receive basic profile information as permitted by your settings.
Payment Processor: Our Merchant of Record, Paddle, processes all payments and may share limited transaction information with us (e.g., subscription status, transaction ID). We do not receive or store your credit card number or full payment details — these are handled entirely by Paddle.

2. How We Use Your Information

We use collected information to:

Provide, operate, and maintain the Service.
Process transactions and manage your subscription.
Send administrative communications (e.g., billing confirmations, security alerts).
Analyze usage patterns to improve the Service.
Provide customer support and respond to inquiries.
Power AI features such as testimonial analysis, sentiment detection, and content suggestions.
Detect, prevent, and address fraud, abuse, or technical issues.
Comply with legal obligations.

3. How We Share Your Information

We do not sell your personal information. We may share information with:

Paddle (Merchant of Record): To process payments, manage subscriptions, and handle tax compliance. Paddle acts as the seller of record and is independently responsible for payment data it collects. See Paddle's Privacy Policy.
Service Providers: Third-party vendors that help us operate the Service (e.g., hosting, analytics, email delivery). These providers only access data as necessary to perform their functions and are contractually obligated to protect it.
Legal Requirements: When required by law, legal process, or government request, or to protect our rights, safety, or property.
Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., resolving disputes, enforcing agreements).

Testimonial content associated with active embed widgets may be cached for performance purposes but will be removed promptly after account deletion.

5. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS/SSL), secure data storage, and access controls. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Cookies & Tracking Technologies

We use the following types of cookies:

Essential Cookies: Required for the Service to function (e.g., authentication, session management).
Analytics Cookies: Help us understand how the Service is used (e.g., Google Analytics).

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the Service.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Access: Request a copy of your personal data.
Correction: Request correction of inaccurate or incomplete data.
Deletion: Request deletion of your personal data.
Portability: Request a machine-readable copy of your data.
Objection: Object to certain processing of your data.
Withdrawal of Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at support@trustfolio.dev. We will respond within 30 days.

8. International Data Transfers

Trustfolio is operated from the Republic of Korea. If you access the Service from outside Korea, your information may be transferred to and processed in Korea or other countries where our service providers operate. By using the Service, you consent to such transfers. We take steps to ensure that your data receives adequate protection in accordance with applicable data protection laws.

9. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will promptly delete it.

10. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to read the privacy policies of any third-party site you visit.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last Updated" date. Your continued use of the Service after changes constitutes acceptance of the revised policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at: support@trustfolio.dev