TrustMint

1. Who We Are

TrustMint is a review collection platform operated by KADIVEL EOOD (UIC 208282493), a company registered in Bulgaria with its registered office at 9 Boris Rumenov Str, Sofia, Bulgaria, represented by Dimitar Valchanov ("we", "us", "our"). Primary application data is hosted on EU servers. We act as a data processor on behalf of our business customers (the data controllers) when handling end-customer personal data.

2. Data We Collect

We collect only the minimum data necessary to provide our service:

Business users: email address, password (hashed), business name, logo, Google review URL, billing information (processed by Stripe).
Google Business Profile (optional): when you connect a profile you manage, we access and store the location, reviews and replies, profile content, and available performance data needed for the features you choose, including the owner-authorized audit.
End customers: name, email address, phone number (optional), review feedback, and the contact basis recorded by the business user. For manual phone requests, we also keep the merchant's permission declaration, its date and evidence note, the chosen channel, destination, and draft message. We keep opt-out records to prevent further requests.
Automatically collected: email open/click events, review page visits, and first-party acquisition data submitted with account creation, such as landing page, referring domain, UTM campaign parameters, and advertising click identifiers.
Google Contacts (optional): if you choose to import contacts via Google, we access your contact names, email addresses, and phone numbers through the Google People API.
Google Calendar (optional): if you connect a calendar, we read your calendar list and the selected calendar's event identifiers, times, status, organizer and guest details. We store the selected calendar, encrypted connection tokens, and details needed to track eligible appointments.

3. How We Use Your Data

To send review request emails on behalf of businesses.
To prepare manual WhatsApp, Viber, SMS, or copied review requests for a business user to send through their own app, and record a send only when they confirm it.
To display review landing pages.
To provide analytics and reporting to business users.
To process payments via Stripe.
To send transactional emails (account confirmation, password reset).
To prepare the owner-authorized Google Business Profile audit and provide the connected product features you choose.
To measure which TrustMint pages and advertising campaigns lead to account setup, product activation, and paid subscriptions.
To import customer contacts from Google when you explicitly initiate the import.
To import eligible appointment guests from your selected Google Calendar when you enable guest import, and to schedule review request emails after appointments when you separately enable automatic sending.

4. Legal Basis for Processing

We process personal data under the following legal bases (GDPR Art. 6):

Contract performance: to provide the TrustMint service to business users.
Controller instructions: we process end-customer contact data on behalf of the business using TrustMint.
Business-declared contact basis: the business selects the basis it relies on and remains responsible for its underlying records and any applicable electronic-communications rules. Before a manual phone request, the business user records a customer and channel-specific permission declaration. If the user chooses to remember the declaration for later customers, its date, evidence note and selection are kept in that browser tab's session storage and copied into a separate record for each confirmed send. TrustMint keeps these declarations for accountability but cannot independently verify the underlying consent.

5. Data Retention

Business account data is retained for the duration of the account plus 30 days after deletion.
End-customer data is retained until the business user deletes it or the account is closed.
Opt-out records remain while the business account is active so a deleted or re-added customer is not contacted again.
Billing records are retained as required by EU tax law (typically 7 years).
Email tracking data (opens, clicks) is retained for 12 months.
Google review text, reviewer identity, replies, drafts, and individual review-level records are retained for up to 30 days. Content-free aggregate metrics, including monthly topic and sentiment totals, may be retained for historical reporting and follow the account deletion period above.
Google Calendar connection tokens and tracked appointment records are deleted when you disconnect the calendar. Imported customer records and sent request history remain until you delete them or close the account.

6. Data Sharing

We do not sell personal data. We share data only with:

Brevo (Sendinblue): email delivery (EU servers). When you choose to email a customer imported from Google Calendar or Google Contacts, the customer's name and email address are used for that delivery.
Stripe: payment processing (certified EU-US Data Privacy Framework).
Heroku / Salesforce: hosting infrastructure (EU region).
Google: optional business lookup during setup, Google Business Profile connection and audit, Google Contacts import, and the Google Calendar connection when initiated by you.
Integrations you set up: if you add a webhook endpoint or connect Zapier, TrustMint sends the events you choose to that destination on your instruction. Feedback, review request and opt-out events include the customer's name, email address and phone number, except for customers imported from Google Contacts or Google Calendar, whose details stay in TrustMint. New Google review events only say that a review arrived and link to it in TrustMint; they never include review text, ratings, reviewer details or Google identifiers. Remove the endpoint or turn off the Zap to stop sending.

7. Google API Services

TrustMint's optional business finder uses Google Maps Platform during setup. A business search query and selected place identifier are processed through the Places API to help you identify your own location. The owner-authorized audit does not use Places data or automated nearby-business comparisons. Google's processing is governed by the Google Privacy Policy.

The optional Google Business Profile connection uses the business.manage scope. Google provides this broad management permission rather than a separate audit-only permission. We use it to read the profile data required for the audit and connected features, and to perform a profile action only when you explicitly initiate that action.

Business Profile data: locations, reviews and replies, owner-maintained profile fields, services, attributes, posts and media, plus available performance signals.
How it is used: to monitor the selected profile, build its audit, show analytics, and complete actions you explicitly request, such as posting a review reply.
Storage and control: OAuth tokens and connected profile data are stored securely with your account. Review content and individual review-level records are available in TrustMint for up to 30 days; content-free aggregate reporting may continue after that. You can disconnect Google in Settings at any time.
Deletion: disconnecting Google removes stored tokens, review content, and cached profile payloads. Content-free historical aggregates remain available until account deletion.

TrustMint also offers an optional Google Contacts import using the Google People API and the read-only contacts.readonly scope. We access contact names, email addresses, and phone numbers only when you initiate an import. Imported contacts become customer records in your account and can be deleted at any time.

The optional Google Calendar connection uses the read-only calendar.calendarlist.readonly and calendar.events.readonly scopes. We read your calendar list so you can select one calendar, then read its appointment events to identify eligible guests and appointment end times. We do not change calendar events or store their titles or descriptions. Connecting alone does not import guests or send email. If you enable guest import, eligible guest names and email addresses become customer records. If you separately enable automatic sending, we use appointment end times to schedule review requests. Disconnecting removes the Calendar connection and tracked appointments and cancels pending Calendar requests; imported customers and sent requests remain in your account until deleted under the applicable retention rules.

Calendar access tokens are stored encrypted. We do not send tokens or calendar event details to our email delivery provider. When you choose to send a review request, the customer's name and email address are used to deliver that email. Google Contacts and Calendar data is not used to develop, improve, or train generalized AI or machine-learning models.

Google user data is not sold or used for advertising, and is not shared with third parties except as required to deliver the TrustMint feature you requested. Webhooks and Zapier only send data to destinations you add yourself. They never include Google review content or the names, email addresses and phone numbers of customers imported from Google Contacts or Google Calendar.

TrustMint's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

8. Your Rights (GDPR)

As a data subject in the EU, you have the right to:

Access your personal data.
Rectify inaccurate data.
Erase your data ("right to be forgotten").
Restrict processing of your data.
Data portability - receive your data in a machine-readable format.
Object to processing based on legitimate interest.
Withdraw consent at any time.

End customers can unsubscribe from review requests using the link in every email or by replying to a manual phone message. The business records phone replies in TrustMint, and either type of opt-out stops review requests across channels for the affected customer. Business users can export or delete their data from the Settings page.

9. Cookies

We use essential cookies required for session management, security, authentication, and preserving an audit or signup handoff. The audit-intent handoff expires after 2 days and the signed first-touch attribution handoff expires after 30 days. TrustMint records campaign parameters server-side when you create an account. We do not currently load third-party advertising or analytics tags, and we do not use this information to track your browsing across other websites.

10. Security

All data is encrypted in transit (TLS 1.2+) and at rest. Passwords are hashed using bcrypt. We conduct regular security reviews and follow OWASP best practices.

11. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority. The competent authority for KADIVEL EOOD is the Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria - www.cpdp.bg.

12. Contact

For privacy-related inquiries or to exercise your rights, contact us at support@trustmint.co.