Privacy policy
Draft — last updated October 2026
1. Scope
This policy covers TrustPlug's website and every plugin we publish for Framer (and, later, any other platform we support).
2. What we plan to collect
Account data (your email and a securely hashed password — we never store passwords in plain text). Plugin settings, which vary by plugin: the sources Testimonials connects to, the rules Gatekeeper and Pathfinder apply, the whitelist Standby Mode checks against, the handle Social Feed follows. Cached third-party content (reviews or posts), held only briefly to keep widgets fast. Anonymous, aggregated usage counts per account. Billing data limited to your plan and country for tax — we never see or store your card details. Anything you send our support inbox.
3. Why we'd process it
To run the service you asked for (contract), to meet legal obligations like tax and fraud prevention, and for legitimate interests such as keeping the service secure and understanding usage at an aggregate level.
4. Your site's visitors
Our plugins are built so no API key or credential ever ships inside your published page — the sensitive part stays on our servers. Widgets are designed to set no advertising or tracking cookies on your visitors.
5. Third parties we expect to rely on
A payment processor for billing, an email provider for transactional messages, a hosting provider for the backend, and — depending on the plugin — the review or social platforms you connect (e.g. Google, Trustpilot). We'll name the exact providers here once each integration ships.
6. Retention
Cached third-party content expires automatically, typically within a day. Account data is kept while your account is active. Ask us to delete your account and we'll do it within 30 days.
7. Your rights
Access, correction, deletion, objection, portability, and withdrawing consent — all of it, on request. If you're in the EU, you can also complain to your local data protection authority.
8. Cookies
Only the strictly necessary kind on our own site. No advertising or third-party tracking cookies, on our site or inside the widgets we ship to your visitors.
9. Security
HTTPS everywhere, hashed passwords, signed tokens, access restricted to what each system needs. No system is perfectly secure, but this is the bar we hold ourselves to.
10. Changes & contact
We'll update the date below whenever this changes. Questions go to TrustPlug.contact@gmail.com.