Introduction
Trustarro ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, store, share, and protect your information when you access or use our online platform ("Platform"), including when you join our waitlist, participate in surveys, or access our courses. We process your data in compliance with applicable data protection laws, including GDPR and CCPA/CPRA.
Information We Collect
We collect various types of information from and about users of our Platform, including:
Personal Information (Directly Provided by You):
- Contact Information: Email addresses provided when you join our waitlist, sign up for an account, or subscribe to email marketing lists (e.g., via Mailchimp).
- Account Details: User registration information such as username and password when you create an account.
- Survey Responses: Information you provide when participating in our online surveys (e.g., via Google Forms), which may include your gig worker niche, challenges, skill interests, and willingness to pay.
- Communications: Information you provide when you contact us directly (e.g., via info@trustarro.com) for support or inquiries.
Usage Data (Automatically Collected):
- Analytics Data: Information about your interactions with the Platform, such as pages visited, time spent on pages, click-through rates, sign-up conversions, course progress and completion rates, and referring URLs. This data is collected via services like Google Analytics and potentially Replit analytics.
- Device Information: Information about the device you use to access the Platform, including IP address, browser type, operating system, and unique device identifiers.
- Payment Information: If and when subscriptions are activated, payment details (e.g., credit card information) are collected and processed directly and securely by our third-party payment processor (Stripe). Trustarro does not store your full payment card details on its servers.
Aggregated/Anonymous Data: We may collect, use, and share anonymized or aggregated data derived from your Personal Information and Usage Data for statistical or demographic analysis, including improving AI features. This data is not considered Personal Information as it does not directly or indirectly reveal your identity.
How We Use Your Information
We use the information we collect for the following purposes:
To Provide and Manage the Platform:
- Managing your waitlist access and sending invitations to access the Platform.
- Setting up and managing your user account.
- Delivering and improving our AI upskilling content, including modules, quizzes, and progress tracking.
- Processing payments and managing subscriptions (if applicable).
For Analytics and Improvement:
- Analyzing user behavior, engagement, course completion, and conversion rates to enhance the Platform's functionality, content quality, and user experience.
- Conducting market research and identifying high-demand niches based on survey responses.
For Communication:
- Sending you important updates, notifications, or information related to your account or the Platform.
- Responding to your inquiries and providing customer support (via info@trustarro.com).
- Sending marketing communications, if you have opted in to receive them (you can unsubscribe at any time).
Information Sharing and Disclosure
We do not sell, rent, or trade your Personal Information with third parties for their direct marketing purposes. We may share your information only in the following circumstances:
With Service Providers: We engage trusted third-party service providers to perform functions and provide services necessary for the operation and maintenance of our Platform. These providers include:
- Hosting Provider: Replit (for application hosting and database storage).
- Email Marketing Services: Mailchimp.
- Analytics Services: Google Analytics.
- Payment Processing Services: Stripe.
For Legal Reasons: We may disclose your information if required to do so by law or in good faith belief that such action is necessary to comply with legal obligations, protect our rights, prevent wrongdoing, or protect user safety.
International Transfers: If data is transferred outside your jurisdiction (e.g., to the US from the EU), we use safeguards like Standard Contractual Clauses to ensure adequate protection.
Data Security
We implement reasonable technical and organizational measures to protect your Personal Information from unauthorized access, use, alteration, or disclosure. Our security practices include:
Technical Safeguards:
- Encrypted Data Transmission: All data transmitted between your device and our servers is encrypted using industry-standard HTTPS/TLS protocols.
- Secure Database Storage: Personal information is stored in encrypted, cloud-based databases with enterprise-grade security.
- Payment Security: All payment information is encrypted and processed securely by our PCI DSS-compliant payment processor (Stripe). We never store payment card details on our servers.
- Security Headers and Session Management: We use protections against common vulnerabilities, including secure headers and strong session tokens.
Organizational Safeguards:
- Access Controls: Access to personal data is restricted to authorized personnel only and limited to what is necessary for their job functions.
- Data Minimization: We collect and retain only the minimum amount of data necessary to provide our services.
- Data Anonymization: Survey responses and analytics data are anonymized where possible to protect individual privacy during analysis.
- Regular Security Reviews: We regularly review and update our security practices to address emerging threats.
- Incident Response: We maintain procedures to detect, respond to, and notify users of any potential security incidents in accordance with applicable laws.
While we implement industry-standard security measures and continuously work to protect your information, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee absolute security, but we are committed to maintaining robust protections for your data.
Cookies and Tracking Technologies
We use cookies and similar tracking technologies (e.g., pixels, web beacons) to track activity on our Platform and hold certain information. Cookies are small data files placed on your device. We use them for:
- Essential Functionality: To make the Platform work (e.g., managing user sessions, login status).
- Analytics and Performance: To collect Usage Data (e.g., page visits, conversion rates, traffic sources) and understand how users interact with our Platform, helping us improve it. This typically involves cookies from Google Analytics.
You have the option to accept or refuse cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. However, disabling cookies may limit your ability to use certain functionalities of the Platform.
Data Retention
We retain your Personal Information only for as long as necessary to fulfill the purposes for which it was collected:
- Waitlist and Registration Data: Retained until you request deletion or your account becomes inactive for a period of 12 months.
- Analytics Data: Retained according to the policies of our analytics providers (e.g., Google Analytics retains data for a specific period, typically 26 months).
- Survey Responses: Anonymized data from surveys may be stored indefinitely for historical analysis of market trends.
Your Data Protection Rights
Depending on your location and applicable laws, you may have certain rights regarding your Personal Information, including:
- Right to Access: You have the right to request a copy of the Personal Information we hold about you.
- Right to Rectification: You have the right to request that we correct any inaccurate or incomplete Personal Information.
- Right to Erasure: You have the right to request that we delete your Personal Information under certain circumstances.
- Right to Restrict Processing: You have the right to request that we restrict the processing of your Personal Information under certain conditions.
- Right to Data Portability: You have the right to request that we transfer your data to another organization or directly to you.
- Right to Withdraw Consent: Where we rely on your consent to process your Personal Information, you have the right to withdraw that consent at any time.
To exercise these rights, contact us at info@trustarro.com. We will respond within the timeframes required by law (e.g., 30 days under GDPR).
Third-Party Services
Our Platform relies on various third-party services for its operation. When you use our Platform, your information may be processed by these third parties in accordance with their own privacy policies. We encourage you to review their respective privacy policies:
- Replit Privacy Policy
- Google Privacy Policy
- Mailchimp Privacy Policy
- Stripe Privacy Policy
Children's Privacy
Our Platform is not intended for individuals under the age of 18. We do not knowingly collect Personal Information from children under 18. If we become aware that we have collected Personal Information from a child under 18 without parental consent, we will take steps to remove that information from our servers.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page with a revised "Effective Date." Your continued use of the Platform after the posting of any changes constitutes your acceptance of those changes.
Contact Us
For any questions or concerns about this Privacy Policy or our data practices, please contact us at: info@trustarro.com.