Privacy Policy

Overview

Trusttool ("we", "us", "our") provides the TrustVoice AI translation platform and free online tools. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our websites, applications, and services at https://www.trusttool.net.

Information We Do Not Collect

We do not collect:

• Calculator inputs, results, or any data you enter into our free online tools — these stay on your device
• Precise geolocation data
• Sensitive personal information (health, religion, political views)
• Financial or health information you enter for calculation purposes

Information We Collect

Depending on how you use our services, we may collect the following categories of information:

• Account information — When you create an account, we collect your email address and a securely hashed password. If you sign up via Google, we collect your name, email, and avatar URL from your Google profile.
• API keys and usage data — If you use TrustVoice via API, we collect your API key prefix, translation minutes used, platform type (desktop/web/mobile), and timestamps of usage for quota management and billing.
• Payment information — When you purchase a paid plan, payment processing is handled securely by Lemon Squeezy (lemonsqueezy.com), our merchant of record. We do not store full credit card numbers on our servers. We retain only the last four digits and expiry date for reference, as provided by Lemon Squeezy.
• Translation content — Audio streams and text submitted for translation are processed in real time. Audio is deleted immediately after translation. Translated text is retained temporarily for session continuity and deleted after processing unless you choose to save it to your history.
• Page view analytics — Page URLs visited, referral source, browser type, and approximate country-level location for aggregated usage statistics via Google Analytics.
• Performance data — Core Web Vitals and error logs to diagnose issues and improve site performance.
• Language preference — Stored in a cookie on your browser. Not sent to our servers.

Cookies

Cookies are small text files stored on your device. We use them only where necessary:

• Authentication cookies — Session cookies required for user login and admin dashboard access. These are essential for the functioning of user accounts.
• Analytics cookies — Google Analytics cookies (_ga, _gid) to understand how visitors use the site. These are non-essential and are set only after you give your consent via our cookie banner. You can withdraw consent or opt out at any time through the banner or your browser settings.
• Preference cookies — Remembers your selected language and display settings for your next visit.
• Advertising cookies — Google AdSense may set advertising cookies to serve contextual ads on our free tool pages. These are non-essential and are set only after you give your consent via our cookie banner. You can opt out through the banner or Google's ad settings.

We do not sell your personal data to third parties. Essential cookies are required for the Service to function and are set without consent. Non-essential cookies (analytics and advertising) are set only with your prior opt-in consent, which you may withdraw at any time. You can manage your choices via the cookie banner or your account settings.

AI Translation & Data Processing

TrustVoice and Trusttool use third-party AI providers to process translations and content. Our AI providers include Google Gemini, Claude Haiku (Anthropic), LibreTranslate, MyMemory, and LanguageTool. When you use our services:

• Audio streams are sent to the active AI provider for real-time translation and are not stored after the session ends
• Translated text may be temporarily processed by the AI provider and is not used to train their models
• We do not use your translation content to train our own AI models
• You may delete your translation history at any time from your dashboard

Third-Party Services

We use the following third-party services to operate and improve our platform:

• Google Analytics — Anonymized usage analytics. Google may set cookies as described above. Google Privacy Policy
• Vercel — Cloud hosting and content delivery via Vercel. Vercel may process IP addresses and request metadata for security and performance. Vercel Privacy Policy
• Lemon Squeezy — Payment processing and merchant-of-record services for paid plans. Lemon Squeezy handles all payment data securely. Lemon Squeezy Privacy Policy
• Google Gemini — AI-powered translation and content generation for TrustVoice and website tools. Google Privacy Policy
• Claude Haiku (Anthropic) — AI translation and content review for website tools and batch processing. Anthropic Privacy Policy
• LibreTranslate — Open-source text translation engine for website tool translations. LibreTranslate Privacy
• MyMemory — Translation memory and fallback text translation service. MyMemory Privacy
• LanguageTool — Grammar and spell checking for website text tools. LanguageTool Privacy
• Google AdSense — Contextual advertising on free tool pages. Google AdSense may use cookies to serve relevant ads. Google Ad Technology Page

Legal Bases for Processing (GDPR / UK GDPR Art. 6)

We process your personal data only where we have a lawful basis. The bases that apply to each category are:

• Performance of a contract — to provide the Service you request (e.g., account data, API usage, payment processing, translation content).
• Legitimate interests — to secure, operate, and improve the Service (e.g., performance data, security, limited analytics), balanced against your rights.
• Consent — for non-essential cookies (analytics, advertising) and optional marketing communications. You may withdraw consent at any time.
• Legal obligation — to retain certain records (e.g., billing records) for the periods required by tax, accounting, or other applicable law.

International Data Transfers

Trusttool is operated globally, and your personal data may be transferred to, stored in, or processed from countries outside your country of residence, including the United States and other jurisdictions where our service providers (such as Google, Anthropic, Lemon Squeezy, and Vercel) are established. Where we transfer personal data from the EEA, the United Kingdom, or Switzerland to a country that has not been deemed to provide an adequate level of protection, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, or other lawful transfer mechanisms. You may request a copy of the relevant safeguards by contacting us.

EU and UK Representatives (GDPR Art. 27)

Our EU/UK representative is in the process of being appointed. Until a representative is appointed, please contact our Data Protection team using the details in the Contact section below.

Automated Processing and Profiling

Translation, grammar checking, and related outputs are generated through automated AI processing. This does not produce legal or significant effects about you solely through automated means within the meaning of GDPR Art. 22. We do not use your personal data to build profiles that produce solely automated decisions with legal or similarly significant effects. You may always request human review of any decision that affects you by contacting us.

Data Retention

Account data is retained while your account is active and for up to 12 months after deletion or termination for legal and audit purposes. Aggregated analytics is retained indefinitely in anonymized form. Translation history is retained until you delete it or your account is terminated. Audio data is not retained after processing.

Children's Privacy

Trusttool and TrustVoice are not directed to children under 13 (or under 16 in the European Economic Area). We do not knowingly collect any personal information from children. If you believe a child has provided us with data, please contact us and we will delete it promptly.

Data Security

We implement appropriate security measures: all communications are encrypted via HTTPS/TLS, passwords are hashed using PBKDF2 with individual salts, API keys are stored as SHA-256 hashes, provider API keys are encrypted using AES-256-GCM, and database access is restricted to authorized services only. Despite these measures, no method of transmission or storage is 100% secure.

Your Privacy Rights

Depending on your location, you may have the following rights under applicable law (including the GDPR in the European Economic Area, UK GDPR, and the CCPA in California):

• The right to know what personal data we hold about you
• The right to request correction of inaccurate data
• The right to request deletion of your data (subject to legal retention requirements)
• The right to data portability — receive your data in a structured, commonly used format
• The right to withdraw consent at any time
• The right to opt out of analytics and advertising cookies
• California residents: the right to opt out of the "sale" or "sharing" (including cross-context behavioral advertising) of personal information, and the right to limit the use of sensitive personal information
• The right to non-discrimination for exercising your privacy rights

To exercise your rights, log in to your account dashboard or contact us at the email below. California residents may also use our "Do Not Sell or Share My Personal Information" link in the footer. We will respond within the timeframe required by applicable law (typically within one month under the GDPR/UK GDPR, and within 45 days under the CCPA/CPRA, both extendable where permitted). We may need to verify your identity before acting on a request.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Material changes will be notified via email to registered users. Your continued use of Trusttool after changes constitutes acceptance of the revised policy.

Contact

If you have questions, concerns, or requests regarding this Privacy Policy, or to exercise your data rights, please contact us at