Privacy policy

This policy covers the Trustfac website and the Trustfac platform, both operated by Trustfac. It explains what we collect, why, who sees it and how to ask us about it.

What we collect on this website

• What you type into the contact form: name, email, phone number if you add one, your website, platform, sales range, the services you picked and any notes.
• Whether you ticked the box to receive texts about your inquiry.
• Technical details sent with the form: IP address, browser user agent, the page you were on, and campaign tags in the link you arrived from (for example utm_source).

The interactive demos on the home page run in your browser. Nothing you type into a demo is sent to us.

What we collect in the platform

• Account and verification data. Business registration, the owner's name and date of birth, government ID, bank account details and the documents we ask for in review. Tax ID numbers and ID numbers are encrypted at rest.
• Transaction data. Order amounts, the customer's name, email, billing address and IP address, the card's last four digits, brand and expiry, and the outcome of each charge. Full card numbers never reach our servers. They are entered into hosted fields and held in a PCI DSS Level 1 vault operated by our vault provider.
• Messaging data. Phone numbers and opt-in records for texts and push, the messages sent, and replies.
• Usage data. Logins, the pages used in the dashboard, and the actions taken, kept in an audit log.

How we use it

• To reply to your inquiry and schedule a call.
• To verify a business before it goes live, as the card networks and our banking partners require.
• To process payments, prevent fraud, respond to disputes and send the messages a customer has set up.
• To bill for the service and keep the records the law requires.
• To understand which links bring people to the site.

We do not sell personal information, and we do not use customer transaction data to market to the customers' own buyers.

Text messages

If you give a phone number and tick the consent box, we may text you about your inquiry. Message frequency varies, and message and data rates may apply. Reply STOP to stop or HELP for help. Phone numbers and consent records are not shared with third parties for their own marketing.

Who we share it with

• The acquiring banks, card networks and payment processors that settle transactions, to the extent needed to process them and to meet their rules.
• Identity, sanctions and fraud-screening providers used in review.
• Service providers that run the platform for us: hosting, database, email, SMS and push delivery, and the card vault. They process data only to provide those services.
• Authorities and courts when the law requires it.

How long we keep it

Inquiries are kept while we are in contact with you and deleted on request. Transaction, verification and audit records are kept for as long as card-network rules, tax law and anti-money-laundering law require, typically five to seven years after the account closes.

Your choices

You can ask what we hold about you, ask us to correct it, or ask us to delete it where the law lets us. If you are a buyer on a business that uses our platform, that business controls your order data; contact them first and we will help them answer. Email contact@trustfac.com.

Children

The site and platform are for businesses and are not directed at anyone under 18.

Changes

We may update this policy. The date at the top shows when it last changed.