Legal

Privacy Policy

Last updated: October 27, 2026 · Effective for TrustBadge AI (demo MVP)

This Privacy Policy explains how TrustBadge AI (“we”, “us”) collects, uses, shares, and protects personal information when you use our website and services. It is designed to align with the EU/UK GDPR and the California CCPA/CPRA. This demo product uses simulated scanning — we do not scrape private user data from scanned sites beyond publicly available signals represented in our mock engine.

1. Who we are

Controller: TrustBadge AI Demo · Contact: privacy@trustbadge.ai · Support: support@trustbadge.ai. See our Contact page.

2. Information we collect

Account data: email address and optional name when you sign in or claim a badge.
Service data: URLs you submit for scanning, generated scores, badge settings, and claim ownership.
Technical data: IP address, browser type, device signals, and security logs needed to operate the service.
Consent preferences: your cookie category choices stored locally and in a first-party cookie.

3. How we use information

Provide Trust Scores, public reports, embeds, and dashboards.
Authenticate sessions and protect against abuse.
Improve the product using analytics only when you opt in.
Respond to privacy and support requests.
Comply with legal obligations.

Legal bases (GDPR): contract performance, legitimate interests (security & product improvement with safeguards), consent (non-essential cookies), and legal obligation.

4. Cookies & tracking disclosure

We minimize non-essential data collection. Non-essential cookies load only after you accept them in our CMP. You can reject all non-essential categories or set category-level preferences at any time via Privacy choices in the footer.

Category	Purpose	Default
Strictly necessary	Session cookies, CSRF protection, consent storage	Always on
Analytics	Aggregated product analytics — no sale of personal data	Off until opt-in
Preferences	Theme, locale hints, recent activity	Off until opt-in
Marketing	Campaign attribution and limited advertising measurement	Off until opt-in

We do not sell personal information. We do not use non-essential trackers for cross-context behavioral advertising in this MVP. If that changes, we will update this policy and request fresh consent where required.

5. Sharing

We share data with infrastructure processors (hosting, email delivery) under contracts, when required by law, or with your direction (e.g. public report pages you publish). Public Trust Badge reports are intentionally shareable.

6. Your rights

Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to processing, and to withdraw consent. California residents may also request to know, delete, and correct personal information and opt out of “sale”/“sharing” (we do not sell). Email privacy@trustbadge.ai to exercise rights. You may appeal a denied request by replying to our decision email.

7. Retention & security

We retain account and scan records while your account is active and for a limited period afterward for security and dispute resolution. We use HTTPS, access controls, and least- privilege practices. No method of transmission is 100% secure.

8. Children

TrustBadge AI is intended for business users age 16+ (or the digital consent age in your jurisdiction). We do not knowingly collect data from children.

9. Changes

We may update this policy. Material changes will be posted here with a new “Last updated” date. Continued use after changes means you acknowledge the updated policy.

Also see our Terms of Service and Contact page.