Privacy Policy

1. Information We Collect

• Account/Profile: Name, email, company, payment info, credentials.
• Usage/Product Data: Logs, agent interactions, inputs/outputs for hardening/RAG/policy enforcement, telemetry anonymized/pseudonymized where possible, IP/device info, cookies.
• Customer Data: Code, configs, data processed in Services. You control what you input.
• Automatically: Analytics, error logs, cookies/tracking. See Cookie Policy.
• Third Parties: From integrations, sign-ins, or partners, with consent where required.

We minimize collection to what is necessary for Services, compliance, and improvement. No sensitive data, such as health information, unless you provide it and we have safeguards/DPA in place.

2. How We Use Information

• Provide, secure, and improve Services, including hardening, analytics, and support.
• Billing, communications, and marketing, with opt-out available.
• Legal compliance and fraud prevention.
• Aggregate/anonymize information for research and product development.
• AI: Process inputs for features; no training on Customer Data without opt-in. Outputs are not guaranteed accurate or bias-free.

3. Sharing and Disclosure

• Service providers/subprocessors bound by agreements; list available in Trust Center.
• Affiliates, legal requirements, and business transfers.
• No sale of personal data under TDPSA/CCPA definitions. Opt-outs for targeted ads/sharing where applicable.

We do not share Customer Data for third-party marketing.

4. Data Security

We maintain reasonable technical and organizational measures that are SOC 2-aligned. You are responsible for your end, including configurations and access controls. Breach notification will be handled per applicable law.

5. Data Retention

We retain data as long as needed for the purposes described and to meet legal requirements. We delete data upon request, subject to certain exceptions.

6. Your Rights — GDPR, CCPA, TDPSA, etc.

You may have rights to access, correct, delete, and opt out of sale, targeting, or profiling of your personal information. Submit requests via email: privacy@trustabl.ai. Texas residents have rights under TDPSA, including an appeals process. We respond in a timely manner and verify identity. We do not discriminate against anyone for exercising these rights.

7. International Transfers

Where personal information is transferred across borders, we apply adequate safeguards, such as Standard Contractual Clauses.

8. Children’s Privacy

Our Services are not directed to children under 13, or 16 where applicable under COPPA/GDPR, and we do not knowingly collect their information.

9. Changes

We may update this Privacy Policy from time to time. Updated versions will be posted here, and continued use of the Services constitutes acceptance. We will notify you of material changes.

10. Contact

Questions about this Privacy Policy can be directed to privacy@trustabl.ai. A Data Processing Addendum is available for enterprise customers.