Privacy Policy

Last updated: June 2025

We never sell your data

Raw WhatsApp messages are never stored

Buyer data is never used for marketing

1. Introduction

TrustShip (“we”, “us”, “our”) is committed to protecting your privacy and the privacy of your buyers. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights over it.

TrustShip is operated by Darshan Thakor (sole proprietorship).

By using TrustShip, you agree to the collection and use of information as described in this policy. We aim to align with responsible data practices and applicable data protection laws where they apply to our processing.

2. Who This Policy Covers

This policy covers two types of people:

Sellers — businesses and individuals who create a TrustShip account to manage their WhatsApp orders.

Buyers — end customers of sellers whose order information is processed through TrustShip as part of the order verification flow.

3. Data We Collect

3a. Data You Give Us (Seller)

  • Full name and business name
  • Email address and phone number
  • WhatsApp Business number
  • Business address
  • Bank/payment details if applicable in future
  • Any other information provided during signup or account setup

3b. Data Collected Automatically (Seller)

  • Login activity and session data
  • Device type, browser, IP address
  • Pages visited and features used within TrustShip
  • Error logs and performance data

3c. Buyer Data (Processed on Your Behalf)

When your buyers send orders via WhatsApp, TrustShip processes:

  • Buyer name
  • Buyer phone number
  • Delivery address
  • Order details (product, quantity, amount)
  • WhatsApp message content (for AI parsing only)
  • Order confirmation responses

Important: TrustShip processes buyer data as a data processor on behalf of the seller (data controller). Sellers are responsible for ensuring they have a legitimate basis for sharing buyer data with TrustShip.

4. Why We Collect This Data

Seller data:

  • To create and manage your TrustShip account
  • To provide order parsing and verification services
  • To send you product updates, alerts, and support communications
  • To improve TrustShip's features and AI accuracy
  • To comply with legal obligations

Buyer data:

  • To parse and structure incoming order messages
  • To run automated verification checks (phone, address, RTO history)
  • To send WhatsApp confirmation messages to buyers
  • To maintain order history for RTO risk scoring
  • We do not use buyer data for marketing or any purpose beyond order processing

5. How We Use AI & Automation

  • Incoming WhatsApp messages are sent to Google Gemini API for order parsing
  • Message content is processed by Gemini to extract order details
  • Gemini's use of this data is governed by Google's API Terms
  • TrustShip does not use message content to train AI models
  • Parsed order data is stored in TrustShip's secure database
  • Phone numbers are verified via third party HLR lookup services
  • Addresses are validated via Google Maps Geocoding API

6. Data Sharing

We share data only when necessary to provide the service:

  • Google Gemini API — for AI order parsing
  • Google Maps API — for address validation
  • MSG91 / HLR providers — for phone number verification
  • Meta WhatsApp Cloud API — for sending confirmation messages
  • Razorpay — for payment processing if applicable
  • Cloud hosting provider — for secure data storage

We do NOT:

  • Sell your data or your buyers' data to anyone
  • Share data with advertisers
  • Share data with other sellers on TrustShip
  • Use your data for any purpose beyond providing TrustShip service

7. Data Storage & Security

  • All data is stored on secure cloud servers
  • Data is encrypted in transit (HTTPS/TLS)
  • Database access is restricted and logged
  • We conduct regular security reviews
  • In case of a data breach, we will notify affected users within 72 hours

8. Data Retention

  • Seller account data — retained while account is active + 90 days after deletion
  • Order and buyer data — retained for 12 months for RTO history and dispute purposes, then permanently deleted
  • WhatsApp message content — deleted immediately after parsing; raw messages are not stored
  • Payment data — retained as required by law (typically 7 years)

9. Your Rights as a Seller

You have the right to:

  • Access all data TrustShip holds about you
  • Correct inaccurate data
  • Request deletion of your account and data
  • Export your order data in CSV format
  • Withdraw consent for communications
  • Lodge a complaint with relevant authorities

To exercise any of these rights, email contact@trustship.site

10. Buyer Rights

If you are a buyer whose data has been processed through TrustShip:

  • Your data was shared by the seller you purchased from
  • Contact the seller directly for data requests
  • For urgent concerns email contact@trustship.site and we will assist

11. Cookies

TrustShip uses minimal cookies:

  • Session cookie — keeps you logged in (essential)
  • CSRF token — security protection (essential)
  • No advertising cookies
  • No third party tracking cookies
  • No analytics cookies without consent

See our Cookie Policy for full details.

12. Children's Privacy

TrustShip is not intended for use by anyone under 18 years of age. We do not knowingly collect data from minors.

13. WhatsApp & Meta

By connecting your WhatsApp number to TrustShip:

  • Your WhatsApp message data passes through Meta's infrastructure
  • Meta's own Privacy Policy applies to WhatsApp data
  • TrustShip only receives message data that Meta forwards via webhook — we do not access your full WhatsApp history

14. Changes to This Policy

  • We will notify you via email of significant privacy policy changes
  • At least 14 days notice before changes take effect
  • Continued use after changes means acceptance of updated policy
  • Previous versions available on request

15. Contact & Complaints

For any privacy related questions or concerns:

Email: contact@trustship.site
Response time: Within 3 business days

If you are not satisfied with our response, you may contact the relevant data protection authority in your jurisdiction.

← Back to Home