These documents are template-level information for transparency. They are not certified legal translations or lawyer-approved equivalents in every language. For binding advice, consult qualified counsel. Enterprise customers receive executed MSA, Order Form, and counter-signed DPA — see Enterprise contracting.
Policy version: 2026-06-22 · EN
Privacy Policy
Version: 2026-06-22 · Controller: Soluzyn OÜ (Registry code 17387492), Harju maakond, Tallinn, Kesklinna linnaosa, Ahtri tn 12, 15551, Estonia
1. Scope
Applies to trustoriginality.ai, panel, APIs, SDKs, mobile apps.
2. Data we collect
| Category | Examples |
|---|---|
| Account | Name, email, password hash, company |
| Verification | Text, images, audio, video |
| Technical | IP, browser, device, logs |
| KYC/biometric | Selfie, voice, ID — special category |
| Cookies | Cookie Policy |
3. Purposes & legal bases
| Purpose | Basis |
|---|---|
| Services | Contract Art. 6(1)(b) |
| Security | Legitimate interests |
| Analytics cookies | Consent |
| Marketing | Consent |
| Legal | Legal obligation |
4. Website analytics (marketing site)
On trustoriginality.ai we use the tools below only after you consent to performance/analytics cookies in our cookie banner (legal basis: GDPR Art. 6(1)(a) consent; ePrivacy opt-in).
| Tool | Processor | Purpose | Typical data |
|---|---|---|---|
| Web analytics | Google LLC | Usage statistics, pages viewed | Pseudonymous identifiers, IP (may be truncated), browser/device, referrer |
| Session analytics | Microsoft Corporation | Session analytics, heatmaps | Interaction events, page snapshots (masking where configured), device/browser |
Default: analytics cookies and scripts are off until you click Accept all or enable Performance / analytics in Cookie Settings. Withdraw consent anytime via footer Cookie Settings.
See Cookie Policy and Sub-processor List. Google Privacy Policy · Microsoft Privacy Statement.
5. Automated analysis & profiling (Art. 22)
Outputs are decision-support only and are not used as sole automated decisions with legal or similarly significant effects under GDPR Art. 22(1). Deployers must ensure human oversight.
Trust Score and detection signals are decision-support only. They are not used as the sole automated decision-making mechanism producing legal or similarly significant effects about you. If you use our Service to evaluate individuals (as data controller), you are responsible for human oversight and a valid legal basis.
6. Sharing & subprocessors
Service providers. We do not sell personal data.
7. International transfers
International transfers use SCCs or adequacy decisions.
8. Retention
| Data | Period |
|---|---|
| Account | Until deletion + 2 years billing |
| Verification | 48 hours default |
| Logs | 1–3 years |
9. Security
TLS 1.3, AES-256, RBAC, MFA.
10. Your rights
Access, rectification, erasure, restriction, portability, objection. privacy@trustoriginality.ai
11. Supervisory authority
Complaint: AKI — https://www.aki.ee or your local EU authority.
12. Children
Not directed at under-16s.
13. DPO
Uğur Seçginli — ugur.secginli@trustoriginality.ai
14. Company details
- Legal: info@trustoriginality.ai
- Privacy: privacy@trustoriginality.ai
- Address: Soluzyn OÜ (Registry code 17387492), Harju maakond, Tallinn, Kesklinna linnaosa, Ahtri tn 12, 15551, Estonia
- Contact person (register entry): E-Residency Hub OÜ (17387492 14249878), Harju maakond, Tallinn, Kesklinna linnaosa, Ahtri tn 12, 10151, Estonia, info@erhub.ee, ugur.secginli@soluzyn.com (Uğur Seçginli)