Privacy Policy

1. Overview

This Privacy Policy applies to TrustFabric (hereinafter "TrustFabric", "we", "us", or "our") and covers how we collect, use, store, and protect personal data of individuals ("you") who visit our website at trustfabric.in or use our compliance platform services.

By using our website or platform, you acknowledge that you have read and understood this Privacy Policy.

2. Data We Collect

We collect personal data in the following ways:

a) Information you provide directly

• Name, email address, phone number, and company name when you fill out our contact or demo request form
• Messages and communications you send us via email or contact forms
• Account credentials when you register for or use our platform
• Payment information (processed securely by our payment processor — we do not store card data)

b) Information collected automatically

• IP address, browser type, operating system, and device information
• Pages visited, time spent on pages, and referring URLs
• Cookie data (see our Cookie Policy for details)

c) Information from third parties

• Professional information from LinkedIn or other integrations when you connect them
• Analytics data from Google Analytics (anonymised)

3. How We Use Your Data

We use your personal data for the following purposes:

• Service delivery — To operate, maintain, and improve the TrustFabric platform
• Communication — To respond to your enquiries, demo requests, and support tickets
• Account management — To manage your platform account and subscriptions
• Marketing — To send product updates, newsletters, and event invitations (only with your consent)
• Analytics — To understand how our website and platform are used and improve user experience
• Legal & compliance — To comply with applicable laws, regulations, and our legal obligations
• Security — To detect, investigate, and prevent fraud or other security incidents

4. Lawful Basis for Processing

Under the DPDP Act 2023, we process your personal data on the following lawful bases:

• Consent — Where you have given us clear consent (e.g., marketing communications, non-essential cookies)
• Contract — Where processing is necessary to fulfil a contract with you (e.g., providing platform access)
• Legal obligation — Where we are required by law to process your data
• Legitimate interest — For analytics, security, and fraud prevention, where our interests are balanced against your rights

5. Sharing & Disclosure

We do not sell your personal data. We may share it with:

• Service providers — Cloud hosting (AWS/Google Cloud), email delivery (e.g., SendGrid), CRM (e.g., HubSpot), and analytics providers operating under data processing agreements
• Legal authorities — When required by law, court order, or to protect our legal rights
• Business transfers — In the event of a merger, acquisition, or sale of assets, your data may be transferred with appropriate notice

All third-party processors are contractually bound to protect your data and use it only for the specific purposes we specify.

6. Data Retention

We retain your personal data only for as long as necessary for the purposes for which it was collected:

• Website enquiry and contact form data: 3 years
• Platform account data: Duration of your subscription plus 2 years
• Marketing consent records: Until consent is withdrawn plus 1 year
• Financial records: 7 years (as required by Indian tax law)
• Server logs: 90 days

After these periods, data is securely deleted or anonymised.

7. Your Rights as a Data Principal

Under the DPDP Act 2023, you have the following rights:

• Right to Access — Request a summary of the personal data we hold about you
• Right to Correction — Request correction of inaccurate or incomplete data
• Right to Erasure — Request deletion of your personal data (subject to legal obligations)
• Right to Grievance Redressal — Raise a grievance about how your data is handled, to be resolved within 30 days
• Right to Withdraw Consent — Withdraw consent for consent-based processing at any time
• Right to Nominate — Nominate another person to exercise your rights in case of incapacity or death

To exercise any of these rights, email us at info@trustfabric.in. We will respond within 30 days.

8. Security

We implement appropriate technical and organisational security measures to protect your personal data, including:

• TLS/SSL encryption for all data in transit
• AES-256 encryption for data at rest
• Role-based access controls and multi-factor authentication
• Regular security audits and vulnerability assessments
• ISO 27001-aligned information security practices

In the event of a data breach that is likely to result in a risk to your rights, we will notify the Data Protection Board of India within 72 hours and inform affected individuals promptly.

9. Cookies

We use cookies and similar tracking technologies on our website. For full details on what cookies we use, their purpose, and how to manage your preferences, please read our Cookie Policy.

10. Children's Data

Our website and platform are not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at info@trustfabric.in and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of significant changes by email (if you are a registered user) or by posting a notice on our website. The "Last updated" date at the top of this page indicates when the policy was last revised.

Continued use of our services after changes are posted constitutes acceptance of the updated policy.

12. Contact & Grievance Officer

For any privacy-related questions, requests, or grievances, please contact:

Data Protection Officer / Grievance Officer
TrustFabric
Email: info@trustfabric.in
Website: www.trustfabric.in

If you are not satisfied with our response, you have the right to file a complaint with the Data Protection Board of India.