Privacy Policy
Last Updated: 6/20/2026
LEGAL DISCLAIMER: This Privacy Policy is a template draft and does NOT constitute legal advice. It requires review by qualified legal counsel before production use. The implementer is NOT qualified to provide legal advice.
1. Information We Collect
Information You Provide:
- Account Information: Email address, phone number, name, location, trade/specialty
- Report Submissions: Company information, descriptions of experiences, evidence level, visibility preferences
- Communications: Messages sent through our support channels
Automatically Collected Information:
- IP address, browser type, device information
- Usage data (pages visited, time spent, features used)
- Cookies and similar tracking technologies
2. How We Use Your Information
- Provide and improve the Service
- Verify user accounts and prevent fraud
- Enable report submission and company profile features
- Send notifications about reports and platform updates
- Comply with legal obligations
- Analyze usage patterns and improve user experience
3. Information Sharing
We do NOT sell your personal information. We may share data in the following circumstances:
- Public Reports: Reports marked "public" are visible to all users
- Anonymous Reports: Displayed without identifying the author
- Service Providers: Third parties who help us operate the platform (hosting, email, analytics)
- Legal Requirements: When required by law, subpoena, or court order
- Business Transfers: In the event of a merger, acquisition, or sale of assets
4. Data Retention
We retain user data and submitted reports for 7 years from the date of submission for legal, operational, and platform integrity purposes. After 7 years, data may be anonymized or deleted.
5. Your Rights
All Users:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your account and data (subject to legal obligations)
- Export your data
- Opt out of marketing communications
GDPR Rights (EU Residents):
- Right to data portability
- Right to restrict processing
- Right to object to processing
- Right to lodge a complaint with a supervisory authority
CCPA Rights (California Residents):
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of sale of personal information (we do not sell data)
- Right to non-discrimination for exercising CCPA rights
Note: Full GDPR/CCPA compliance requires legal review and implementation of specific technical and organizational measures.
6. Data Security
We implement reasonable security measures to protect your data, including encryption, secure password storage, input sanitization, and CSRF protection. However, no method of transmission or storage is 100% secure.
7. Cookies
We use cookies and similar technologies to maintain sessions, remember preferences, and analyze usage. You can control cookies through your browser settings, but some features may not function properly without them.
8. Third-Party Services
Our Service uses third-party providers for AI processing (OpenAI, Anthropic Claude, etc.), hosting, and analytics. These providers have their own privacy policies and data practices.
9. Children's Privacy
TrustEazy is not intended for users under 18 years of age. We do not knowingly collect information from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of material changes via email or prominent notice on the Service.
11. Contact Us
For privacy-related questions or to exercise your rights, contact:privacy@trusteazy.com