Privacy Policy

Information we collect

1.1 Information you provide directly

• Contact and consultation information: name, email address, and any details you share when booking a consultation, submitting an inquiry, or contacting us.
• Project and account information: information related to your project (proposals, milestones, communications) and, if you use our client management platform (manage.trusssystems.io), your email address for the purpose of passwordless login (one-time codes / magic links).
• Payment-related information: when you make a payment, this is handled directly by Paddle.com Market Limited ("Paddle"), our payment provider and merchant of record. We do not directly collect or store full payment card details. See Section 4 for more on Paddle's role.

1.2 Information collected automatically

At this time, our Sites do not use analytics, tracking cookies, or similar technologies. If this changes in the future, we will update this Privacy Policy to describe what is collected and why, before any such tracking begins.

Standard web server logs (such as IP address, browser type, and access times) may be automatically recorded by our hosting infrastructure for basic security and operational purposes (e.g. detecting abuse, maintaining uptime). These logs are not used to build advertising profiles or shared with third parties for marketing purposes.

How we use information

We use the information we collect to:

• Respond to inquiries and schedule consultations
• Prepare and deliver project proposals, milestones, and invoices
• Provide access to our client management platform (manage.trusssystems.io), including authenticating you via one-time codes or magic links
• Communicate with you about your project's progress
• Process payments (via Paddle) and maintain records required for accounting and tax purposes
• Improve our Sites and Services
• Comply with legal obligations

We do not sell your personal information to third parties.

Legal basis for processing

(For users in regions where this applies, e.g. the EU/UK.) Where applicable data protection law requires it, we rely on the following legal bases: performance of a contract (delivering the Services you've engaged us for), legitimate interests (operating and improving our business), and consent (where we ask for it specifically, such as optional marketing communications, if introduced in future).

Third-party services

4.1 Paddle (payments)

Payments are processed by Paddle.com Market Limited, which acts as merchant of record for transactions on our Sites. When you make a payment, Paddle collects and processes your payment information directly, subject to Paddle's own privacy policy. We recommend reviewing Paddle's privacy policy for details on how they handle your payment data.

4.2 Email service providers

We may use third-party email delivery services to send consultation confirmations, one-time login codes, magic links, and project-related communications. These providers process your email address solely to deliver these communications on our behalf.

4.3 Hosting infrastructure

Our Sites are hosted on third-party infrastructure providers, which may process technical data (such as server logs) as part of standard hosting operations.

We do not share your personal information with third parties for their own independent marketing purposes.

Data retention

We retain personal and project-related information for as long as reasonably necessary to fulfill the purposes described in this Policy, including maintaining business records for accounting, tax, and legal compliance purposes, and for a reasonable period after a project concludes in case of follow-up work or disputes. Specific retention periods may vary depending on the type of information and applicable legal requirements.

Data security

We take reasonable technical and organizational measures to protect the personal information we hold, including secure authentication practices for our client platform (e.g. no plaintext storage of login credentials) and access controls limiting who on our team can view client information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your rights

Depending on your location, you may have rights regarding your personal information, including the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information, subject to our legitimate business and legal record-keeping needs
• Object to or restrict certain processing
• Request a copy of your information in a portable format

To exercise any of these rights, contact us using the details in Section 10.

International data transfers

As a Bangladesh-based business serving clients internationally, information we collect may be processed or stored in countries other than your own, including Bangladesh and the countries where our hosting, payment, and email service providers operate. We take reasonable steps to ensure information is handled securely wherever it is processed.

Children's privacy

Our Sites and Services are intended for businesses and individuals capable of entering into commercial engagements and are not directed at children. We do not knowingly collect personal information from anyone under the age of 18.

Contact us

Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or operational reasons. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated through a notice on our Sites.