Privacy Policy
Cookie Policy
Privacy Summary
Data Processing Addendum
Terms of Service
Acceptable Use Policy
Community Guidelines
Trust & Safety Guidelines
Verification Policy
How to Write Reviews
Security Overview
Effective date: 15 October 2025
Version 14.1, effective 14 March 2025
Entity:Skanda Projects Pty Ltd trading as TrustVerifi (“TrustVerifi”, “we”, “us”, “our”)
Registered office: Brisbane, Australia
Contact: privacy@trustverifi.com (or via in-product Help & Support)
TrustVerifi is a global trust and reputation platform where individuals and businesses build verified credibility using identity/business verification, testimonials, dynamic badges, analytics, and shareable trust widgets.
This Policy explains how we collect, use, disclose, store, and safeguard personal information when you use TrustVerifi. It applies to:
We comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth), the EU/UK GDPR, and (where applicable) California's CCPA/CPRA. See the frameworks: APPs overview by OAIC, GDPR background, and CCPA/CPRA rights guidance.
To build trust signals, we use third-party verification providers (currently ComplyCube) for identity (KYC) and business (KYB) checks. Data they process may include selfies, ID documents, liveness checks, and registry data. ComplyCube's privacy info is available on their website.
(If we engage other certified providers in the future—e.g., Veriff—we will update this page.)
When you complete identity (KYC) or business verification (KYB), we securely redirect your information to our verification provider ComplyCube. TrustVerifi does not store copies of your government ID, passport, business registration, or other sensitive documents. We only retain the verification status and metadata response provided by ComplyCube (e.g., "verified," "failed," "pending"). This ensures your most sensitive documents remain under the custody of a regulated verification provider and not stored on our servers.
Invite-verified reviews: If a reviewer submits via a personal invite link you sent, we mark the review Verified by default (industry practice also seen in review platforms).
Processed by Stripe. We receive limited billing metadata (e.g., last4, brand, expiry month/year, country) and invoice records; Stripe stores card details. (See Stripe's privacy policy on stripe.com.)
We use necessary, functional, analytics, and (where opted-in) marketing cookies/pixels to: sign you in, remember preferences, measure product usage, run A/B tests, and attribute referrals/ads. You can manage settings in our Cookie Preferences.
| Purpose | Examples | Legal basis (GDPR) |
|---|---|---|
| Provide the service | Account creation, profile pages, sub-profiles, invitations, analytics, dashboards, widgets | Contract (Art. 6(1)(b)) |
| Verification & trust signals | KYC/KYB processing, badge issuance, trust score computation | Legitimate interests in platform integrity (Art. 6(1)(f)); in some regions, consent (Art. 6(1)(a)) for biometric or sensitive data handled by providers |
| Testimonials & sharing | Collecting and displaying reviews, embeddings, social sharing | Contract; legitimate interests |
| Safety & moderation | Content safety checks (e.g., Azure Content Safety + AI classification), fraud/spam prevention, dispute resolution | Legitimate interests; legal obligation where applicable |
| Communications | Service notices, feature updates, onboarding, surveys | Contract; legitimate interests; consent for marketing |
| Billing & tax | Subscriptions, invoices, receipts, fraud checks | Legal obligation; contract |
| Analytics & improvement | Metrics, diagnostics, troubleshooting, A/B tests | Legitimate interests |
| Compliance | Respond to lawful requests, enforce Terms, record-keeping | Legal obligation |
(For APPs, these align with requirements on collection/use/disclosure; for CCPA/CPRA, they map to "business purposes" and "commercial purposes".)
We automatically and manually review content to reduce harmful or deceptive activity. Automated systems may flag content for: profanity, hate, sexual/violent content, doxxing/personals, advertising/links, defamation risk, off-topic/duplicates, or conflicts of interest. (You outlined a two-layer approach: Azure Content Safety first, then AI classification for labels—industry practice in large platforms.) Where automation produces a decision that affects you, you can appeal via the Dispute flow; a human will review.
If you dispute a review, we may request evidence from both parties and temporarily limit visibility while investigating (see our Community Guidelines/Dispute Policy).
We share data only as needed to operate, secure, or comply:
We do not sell personal information as "sale" is defined under CCPA/CPRA. If we use cross-context behavioral advertising, we will provide an opt-out ("Do Not Sell or Share").
We are headquartered in Australia and use global infrastructure. Where data is transferred internationally, we use appropriate safeguards (e.g., standard contractual clauses (SCCs) for EEA/UK, regional data residency when feasible) and vendor addenda. (Microsoft/Azure and major KYC vendors provide GDPR mechanisms.)
We keep personal information only as long as needed for the purposes above, including:
We anonymize or aggregate data wherever possible.
Access and correction rights; ability to complain to us or the OAIC. See the APPs references for details.
Access, rectification, erasure, restriction, portability, objection to processing (including profiling based on legitimate interests/marketing), and the right to withdraw consent at any time. You also have the right to lodge a complaint with your local supervisory authority. See EU references.
Right to know, delete, correct, opt-out of sale/share (if applicable), and non-discrimination for exercising rights. See CA DOJ/CPRA references.
How to exercise: Use in-product privacy tools or email privacy@trustverifi.com. We may verify your identity/request to protect users.
TrustVerifi is not intended for users under 16. We do not knowingly collect personal information from children under 16. If you believe a minor has provided data, contact us to remove it.
We use administrative, technical, and physical safeguards: encryption in transit and at rest, role-based access, network isolation (VNets, private endpoints), WAF/DDoS protections, secret management (Key Vault), monitoring and alerting (Application Insights), and least-privilege controls. While no system is 100% secure, we continually assess and improve safeguards.
If you are a Business:
We categorize cookies as: Strictly Necessary, Functional, Analytics, and Marketing.
We honor regional consent requirements (e.g., EU/UK).
We may link to other sites or allow you to import reviews from third-party platforms; their privacy practices are governed by their policies (e.g., Trustpilot publishes separate legal pages for reviewers/businesses).
We may update this Policy to reflect changes in law, features, or vendors. We'll post the updated version with a new effective date, and where changes are material, we'll notify you (e.g., email or in-product notice).