Policy version: 2026-06-22 · EN

Privacy Policy

Version: 2026-06-22 · Controller: Soluzyn OÜ (Registry code 17387492), Harju maakond, Tallinn, Kesklinna linnaosa, Ahtri tn 12, 15551, Estonia

1. Scope

Applies to trustoriginality.ai, panel, APIs, SDKs, mobile apps.

2. Data we collect

Category Examples
Account Name, email, password hash, company
Verification Text, images, audio, video
Technical IP, browser, device, logs
KYC/biometric Selfie, voice, ID — special category
Cookies Cookie Policy
Purpose Basis
Services Contract Art. 6(1)(b)
Security Legitimate interests
Analytics cookies Consent
Marketing Consent
Legal Legal obligation

4. Website analytics (marketing site)

On trustoriginality.ai we use the tools below only after you consent to performance/analytics cookies in our cookie banner (legal basis: GDPR Art. 6(1)(a) consent; ePrivacy opt-in).

Tool Processor Purpose Typical data
Web analytics Google LLC Usage statistics, pages viewed Pseudonymous identifiers, IP (may be truncated), browser/device, referrer
Session analytics Microsoft Corporation Session analytics, heatmaps Interaction events, page snapshots (masking where configured), device/browser

Default: analytics cookies and scripts are off until you click Accept all or enable Performance / analytics in Cookie Settings. Withdraw consent anytime via footer Cookie Settings.

See Cookie Policy and Sub-processor List. Google Privacy Policy · Microsoft Privacy Statement.

5. Automated analysis & profiling (Art. 22)

Outputs are decision-support only and are not used as sole automated decisions with legal or similarly significant effects under GDPR Art. 22(1). Deployers must ensure human oversight.

Trust Score and detection signals are decision-support only. They are not used as the sole automated decision-making mechanism producing legal or similarly significant effects about you. If you use our Service to evaluate individuals (as data controller), you are responsible for human oversight and a valid legal basis.

6. Sharing & subprocessors

Service providers. We do not sell personal data.

7. International transfers

International transfers use SCCs or adequacy decisions.

8. Retention

Data Period
Account Until deletion + 2 years billing
Verification 48 hours default
Logs 1–3 years

9. Security

TLS 1.3, AES-256, RBAC, MFA.

10. Your rights

Access, rectification, erasure, restriction, portability, objection. privacy@trustoriginality.ai

11. Supervisory authority

Complaint: AKIhttps://www.aki.ee or your local EU authority.

12. Children

Not directed at under-16s.

13. DPO

Uğur Seçginli — ugur.secginli@trustoriginality.ai

14. Company details