Privacy notice

Information we process

• Account and workspace details: names, work email addresses, organization details, login and membership records.
• Directory and activity data: information an organization uploads or enters about its members, selected audiences, activity setup and participation. Organizations decide what personal information they collect and who may access it.
• Operational records: role changes, administrative actions, audit events, support messages and technical request information needed to operate and protect the service.
• Contact requests: name, email, organization, topic and message submitted through the public contact form. Platform administrators can review, resolve and delete these submissions; they are retained in the contact inbox until deleted.
• Payments: Trusivic records order and payment status. Card details are collected through Stripe-hosted checkout and are not stored in the Trusivic application database.

How information is used

We use this information to provide workspaces and activity workflows, authenticate users, deliver requested invitations and notices, process payments, respond to support requests, maintain service integrity and meet applicable obligations.

Organization-managed information

Your organization controls its workspace directory, audiences and activities. Its administrators decide who can access that information. If you are a participant or member, contact the organization that invited you to ask about its records or to request a correction or deletion. Trusivic may need to retain limited records where required to operate the service or meet legal obligations.

Service providers and sharing

We use service providers to host the application and database, deliver email and process payments. Stripe processes payment details for checkout. We do not sell personal information or use it for third-party advertising. We disclose information when needed to provide the service, protect people and the service, or comply with a lawful request.

Cookies

The service uses a first-party session cookie to support sign-in and protect forms. It is HTTP-only, uses SameSite=Lax, and is marked Secure in production. The public site does not use advertising cookies or third-party font embeds.

Security and retention

Production browser connections use HTTPS. The service uses role-based access controls, password hashing, session protections and audit records. No internet service can promise absolute security. We retain workspace information while an organization uses the service and as needed for the purposes above; organization administrators can manage member and directory records, and may contact support about workspace closure or data requests.

Your choices and requests

Account holders can ask their organization administrator to correct or remove workspace data. You can also send a privacy or data request using our contact form. We will route it to the service team and may need to verify the request and coordinate with the relevant organization.

Children

Trusivic is designed for organizations and is not intended for children to create accounts independently. Organizations are responsible for ensuring they have an appropriate basis to include participants in their directories and activities.

Changes and contact

We may update this notice as the service changes. The current version will be posted here. Use the contact form for privacy questions. This notice should be reviewed alongside the organization’s own privacy notices and any applicable data-processing terms.