Privacy Policy

LeTrusto collects the information needed to create and secure your account, including your name, work email, authentication details, workspace settings, and support messages.

When you use a LeTrusto widget, the platform may process approved event streams such as sign-ups, purchases, bookings, reviews, and other customer activity that you choose to connect. Visitor logs may include widget views, approximate location derived from technical data, browser and device information, timestamps, referral context, and interaction events.

You control which customer events are approved for display. Do not send sensitive personal data, payment credentials, passwords, or information that your organization is not authorized to process.

We use data to provide, secure, maintain, and improve the LeTrusto workspace, deliver public widgets, measure widget usage, enforce plan limits, provide support, prevent abuse, and communicate service updates.

We use aggregated or de-identified information for product analytics and reliability work where it cannot reasonably be used to identify an individual.

When you connect a storefront, CRM, or webhook, LeTrusto receives only the event fields you configure. We validate the workspace destination, record delivery metadata, apply your approval rules, and expose approved events to the widget. Customers remain responsible for lawful collection and for removing data they no longer have permission to process.

LeTrusto uses essential browser storage for authentication, security, consent preferences, and reliable product operation. Optional analytics or marketing storage is used only according to your consent choice and may be changed through Cookie Preferences.

LeTrusto uses access controls, authenticated APIs, encrypted connections, and operational safeguards designed to protect account, workspace, event, and visitor data. Access is limited according to role and service need.

No online service can guarantee absolute security. You are responsible for protecting account credentials, API keys, and the data you send to your workspace. Notify support promptly if you suspect unauthorized access.

We use infrastructure, email delivery, analytics, authentication, and monitoring providers to operate LeTrusto. These providers process information only as needed to provide services to LeTrusto and under appropriate contractual or technical safeguards.

A customer who installs a public widget remains responsible for its own notices, lawful basis, consent choices, and privacy commitments relating to visitor data collected through its website. LeTrusto does not sell personal information.

Depending on the relationship and data involved, LeTrusto may act as a processor for customer-controlled event and visitor data, and as a controller for account, billing, support, and product administration data. Customers are responsible for determining their lawful basis and providing required notices to their users.

Where GDPR or similar privacy laws apply, individuals may have rights to access, correct, delete, restrict, object to, or export personal data, subject to applicable exceptions. Send requests to support@letrusto.com with enough detail for us to identify the relevant workspace.

For customers and individuals in India, LeTrusto aims to support obligations under the Digital Personal Data Protection Act, 2023 and applicable rules. Customers determine the lawful purpose and notices for their event data, and LeTrusto processes that data on the customer's documented instructions where it acts as a data processor.

We retain information for as long as needed to provide the service, meet contractual and legal duties, resolve disputes, prevent misuse, and maintain appropriate operational records. Retention may vary by data category.