Legal
Privacy Policy
Last updated: January 15, 2026
TrustRouter.ai ("we," "us," or "our") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.
1. Information We Collect
1.1. Account Information
When you create an account, we collect your email address, name, organization name, and billing address.
1.2. Message Metadata
We process message metadata required to route and deliver messages (recipient identifiers, timestamps, delivery status). We do not store or inspect message content beyond the minimum required to transmit it to the selected provider.
1.3. Usage Data
We automatically collect usage statistics such as API call frequency, error rates, and routing decisions.
1.4. Cookies and Similar Technologies
We use cookies for session management and analytics. See our Cookie Policy for details.
2. How We Use Your Information
- Provide, operate, and improve our messaging routing service.
- Authenticate users and manage accounts.
- Bill for service fees and provider pass-through costs.
- Send transactional emails (invoices, security alerts, product updates).
- Analyze aggregate trends to enhance platform performance.
3. Data Sharing and Disclosure
3.1. Third-Party Providers
Message payloads and necessary metadata are forwarded to your selected messaging providers (SMS aggregators, WhatsApp BSPs, etc.) to deliver messages.
3.2. Service Providers
We use sub-processors for hosting (cloud infrastructure), payment processing, and analytics. All sub-processors are bound by data protection agreements.
3.3. Legal Requirements
We may disclose information when required by law, subpoena, or in response to lawful government requests.
4. Data Retention
We retain account and billing data for as long as your account is active, plus an additional period required for legal or financial compliance. Message metadata is retained for 90 days for debugging and analytics, unless you request earlier deletion.
5. Security
We implement industry-standard security measures including TLS encryption in transit, encryption at rest, role-based access control, and regular penetration testing. However, no system can guarantee absolute security.
6. International Transfers
Your data may be processed outside your country of residence. We rely on standard contractual clauses (SCCs) and other lawful transfer mechanisms to protect data transferred internationally.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you.
- Request correction or deletion of your data.
- Object to processing or request restriction.
- Data portability.
To exercise these rights, contact us at privacy@trustrouter.ai.
8. GDPR (European Users)
If you are located in the European Economic Area (EEA), we process your data under legitimate interest (for service operation) and contractual necessity. You may lodge a complaint with your local supervisory authority.
9. CCPA (California Users)
California residents may request disclosure of the categories and specific pieces of personal information collected, as well as the right to deletion. We do not sell personal information.
10. Children's Privacy
Our services are not directed at individuals under 16. We do not knowingly collect data from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notice. Continued use of the service after changes constitutes acceptance.
12. Contact Us
For privacy-related inquiries, contact privacy@trustrouter.ai.