Privacy Policy

This Privacy Policy describes how Trussed AI, Inc. ("Trussed AI," "we," "us," or "our") collects, uses, discloses, and protects information when you visit our website at trussed.ai (the "Site"), use our platform and services (the "Services"), or otherwise interact with us. This policy applies to all visitors, users, customers, and prospective customers.

By accessing or using the Site or Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, please discontinue use of the Site and Services.

1. Information We Collect

1.1 Information You Provide Directly

We collect information that you voluntarily provide to us, including:

Contact and Account Information. When you request a demo, create an account, subscribe to our newsletter, or otherwise contact us, we may collect your name, email address, phone number, company name, job title, and any other information you choose to provide.

Communications. When you communicate with us via email, contact forms, or other channels, we collect the content of those communications along with associated metadata such as timestamps and sender information.

Payment Information. If you purchase our Services, we collect billing information such as your billing address and payment method details. Payment card information is processed by our third party payment processors and is not stored on our systems.

Customer Data. In the course of providing our Services, you or your organization may provide data to be processed through the Trussed AI platform. The handling of Customer Data is governed by your organization's agreement with Trussed AI (typically a Master Services Agreement or similar contract) and is addressed separately in Section 5 below.

1.2 Information Collected Automatically

When you visit our Site or use our Services, we may automatically collect certain information, including:

Usage Data. Information about how you interact with our Site, including pages visited, features used, time spent on pages, clickstream data, and referring URLs.

Device and Browser Information. Information about the device and browser you use to access our Site, including device type, operating system, browser type and version, screen resolution, and language preferences.

Log Data. Server logs that may include your IP address, access times, pages viewed, and other standard log information.

Cookies and Similar Technologies. We use cookies, pixels, and similar tracking technologies to collect information about your browsing activity. See Section 7 for more details on our use of cookies.

1.3 Information from Third Parties

We may receive information about you from third parties, including:

Business Partners and Referrals. If a business partner or existing customer refers you to us, we may receive your name and contact information.

Public Sources. We may collect professional information from publicly available sources such as LinkedIn, company websites, and business directories to support our sales and marketing activities.

Analytics and Advertising Partners. We may receive aggregated or de-identified information from analytics providers and advertising platforms.

2. How We Use Your Information

We use the information we collect for the following purposes:

Providing and Improving the Services. To operate, maintain, and improve the Trussed AI platform and Site, including troubleshooting, data analysis, testing, and research.

Communication. To respond to your inquiries, send you information you have requested, provide customer support, and send administrative messages related to your account or the Services.

Marketing. To send you marketing communications about our products, services, events, and other offerings that may be of interest to you. You may opt out of marketing communications at any time by following the unsubscribe instructions in any marketing email or by contacting us directly.

Sales and Business Development. To evaluate potential business relationships, manage our sales pipeline, and provide relevant information to prospective customers.

Security and Fraud Prevention. To detect, prevent, and respond to fraud, unauthorized access, and other security incidents, and to protect the rights, property, and safety of Trussed AI, our customers, and the public.

Legal Compliance. To comply with applicable laws, regulations, legal processes, and governmental requests.

Analytics and Aggregation. To analyze usage trends, measure the effectiveness of our marketing efforts, and generate aggregated or de-identified insights to improve our business operations.

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers. We engage third party service providers to perform functions on our behalf, such as hosting, analytics, payment processing, email delivery, customer support, and marketing. These providers are contractually obligated to use your information only as necessary to provide services to us and are required to maintain appropriate security measures.

Business Transfers. In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

Legal Requirements. We may disclose your information if required to do so by law or in response to valid legal process, including subpoenas, court orders, or government requests. We may also disclose information when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

With Your Consent. We may share your information with third parties when you have given us explicit consent to do so.

Aggregated or De-identified Data. We may share aggregated or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, and other purposes.

4. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. The specific retention period depends on the nature of the information and the purpose for which it was collected.

When determining the appropriate retention period, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the information, whether we can achieve those purposes through other means, and applicable legal requirements.

When personal information is no longer required for the purposes described in this policy, we will securely delete or anonymize it.

5. Customer Data and the Trussed AI Platform

5.1 Our Role as a Processor

When our customers use the Trussed AI platform, the platform processes data on behalf of the customer's organization. In this context, the customer is the data controller (or equivalent under applicable law) and Trussed AI acts as a data processor.

The types of data processed through the platform are determined by the customer and may include prompts, model inputs and outputs, policy evaluation results, audit logs, and metadata associated with AI interactions. We process this Customer Data solely in accordance with the customer's instructions and the terms of our contractual agreements.

5.2 Data Security for Customer Data

Trussed AI implements technical and organizational measures designed to protect Customer Data from unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls, audit logging, and regular security assessments.

5.3 Sub-processors

We may engage sub-processors to assist in providing the Services. A list of our current sub-processors is available upon request. We require all sub-processors to enter into written agreements that impose data protection obligations consistent with this policy and applicable law.

5.4 Data Location

Customer Data is processed and stored in the United States unless otherwise specified in the applicable customer agreement. For customers with specific data residency requirements, we offer deployment options including on-premises and hybrid environments.

6. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information, including:

Access. The right to request access to the personal information we hold about you.

Correction. The right to request correction of inaccurate or incomplete personal information.

Deletion. The right to request deletion of your personal information, subject to certain exceptions.

Portability. The right to request a copy of your personal information in a structured, commonly used, and machine-readable format.

Objection. The right to object to certain types of processing of your personal information.

Withdrawal of Consent. Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Opt Out of Marketing. The right to opt out of receiving marketing communications from us at any time.

To exercise any of these rights, please contact us at the information provided in Section 11 below. We will respond to your request within the timeframe required by applicable law. We may need to verify your identity before fulfilling your request.

7. Cookies and Tracking Technologies

We use cookies and similar technologies on our Site for the following purposes:

Strictly Necessary Cookies. These are essential for the operation of our Site and cannot be disabled. They include cookies that enable you to navigate the Site and use its features.

Analytics Cookies. These help us understand how visitors interact with our Site by collecting and reporting information anonymously. We use this data to improve the Site and our Services.

Marketing Cookies. These are used to deliver relevant advertisements and to measure the effectiveness of our advertising campaigns. They may be set by us or by third party advertising partners.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Site.

We do not currently respond to "Do Not Track" browser signals, as there is no industry consensus on how to interpret or respond to such signals.

8. Security

We implement reasonable and appropriate technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, employee training, and regular security assessments.

However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to use commercially reasonable means to protect your personal information, we cannot guarantee its absolute security.

9. Children's Privacy

Our Site and Services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe we may have collected information from a child under 16, please contact us at the information provided in Section 11.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this page and, where required by law, by providing additional notice such as an email notification or a prominent notice on our Site.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Trussed AI, Inc.
Email: privacy@trussed.ai
Website: trussed.ai

You may also reach out to us through the contact form on our website.

If you are not satisfied with our response to a privacy concern, you may have the right to lodge a complaint with your applicable data protection authority.

12. State-Specific Disclosures

12.1 California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). These rights include the right to know what personal information we have collected, the right to request deletion of your personal information, the right to opt out of the sale or sharing of your personal information (we do not sell personal information), and the right to non-discrimination for exercising your privacy rights.

To exercise your rights under California law, please contact us using the information in Section 11. We will verify your identity before processing your request.

In the preceding twelve months, we have collected the following categories of personal information: identifiers (such as name and email address), professional or employment-related information (such as job title and company name), internet or other electronic network activity information (such as browsing history and interactions with our Site), and inferences drawn from the above categories.

12.2 Other U.S. State Privacy Laws

Residents of states with comprehensive privacy laws, including but not limited to Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states that have enacted consumer privacy legislation, may have additional rights similar to those described in Section 12.1. To exercise your rights under your state's applicable privacy law, please contact us using the information in Section 11.

13. International Users

The Trussed AI platform and Site are primarily operated from the United States. If you access the Site or Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, and we process your personal data, we will do so on the basis of applicable legal grounds, including your consent, our legitimate business interests, the performance of a contract, or compliance with legal obligations. We will ensure that appropriate safeguards are in place for any transfer of personal data outside your jurisdiction, consistent with applicable data protection laws.

This Privacy Policy is provided as a draft for informational purposes and should be reviewed by qualified legal counsel before publication. Trussed AI, Inc. makes no representations that this policy is sufficient to comply with all applicable laws and regulations in your jurisdiction.