Privacy Policy

Last updated: 2 October 2026

This policy explains how TrustSaid ("we") handles personal data when you visit our website, use TrustSaid, or respond to a check-in sent by one of our Customers.

1. Who is responsible

  • Our Customers (founders): for the data of their own end customers, our Customer is the data controller (data fiduciary) and we act as processor.
  • Us: for account holders, website visitors and billing, we are the controller.

2. Data we collect

  • Account data: name, email, workspace and product details, connected billing account identifiers.
  • End-customer data (via our Customers): name, email, plan name, payment dates and amounts, survey answers, AI-interview transcripts and summaries, testimonials (text, optional video, photo), consent records (including a hashed IP address and browser details).
  • Payment data: we do not store card numbers. Payments are processed by Dodo Payments.
  • Technical data: basic logs and analytics (device, pages visited) to keep the service secure and improve it.

3. How we use it

  • To provide the Service: schedule and send check-ins, run interviews, display approved testimonials.
  • To generate summaries, tags and insights using AI. We do not allow AI vendors to train on customer data, and we do not use voice or face identification.
  • To bill, secure, support and improve the Service, and to comply with law.

4. AI processing

Survey and interview content is sent to an AI provider to produce replies, summaries and tags. The AI interviewer tells participants it is an AI and is instructed never to request passwords, payment or other sensitive data.

5. Sharing and sub-processors

We share data only with service providers that help us run the Service, under contract: hosting and database providers, email delivery, file storage, AI model provider, payments (Dodo Payments), analytics and error monitoring. We do not sell personal data.

6. Testimonials and consent

A testimonial is published only after the author gives itemised consent and the Customer approves it. Authors can withdraw any time using the link in their confirmation email or by contacting us. Withdrawn testimonials are removed from widgets within minutes.

7. Retention

Raw video and transcripts are deleted after a Customer-configurable period (default 24 months). Consent records and audit logs are kept at least 12 months after last use. On workspace deletion, data is erased within 30 days, subject to legal retention.

8. Your rights

You may request access, correction, deletion, or withdrawal of consent, and unsubscribe from any email using the link in it. End customers should contact the business that sent the check-in or write to us and we will pass the request on. Email support@trustsaid.com.

9. Security

We use encryption in transit and at rest for sensitive tokens, tenant isolation, signed single-purpose links, and rate limiting. No system is perfectly secure, and we will notify affected parties of breaches as required by law.

10. Cookies

We use only essential cookies and light privacy-respecting analytics. We do not use advertising cookies.

11. International transfers

Data may be processed in countries other than your own, with appropriate safeguards where required.

12. Children

The Service is not directed to anyone under 18 and we do not knowingly collect their data.

13. Changes

We will post changes here and update the date above.

14. Contact and grievances

TrustSaid, [Registered business address, add before submitting to Dodo Payments]. Email: support@trustsaid.com (subject "Privacy"). We acknowledge requests within 3 business days.