Privacy Policy

1. Introduction
[COMPANY NAME] is committed to protecting the privacy of the users of TrustFlow. This Privacy Policy explains how we collect, use, store and protect your personal data when you use our service and visit https://www.trytrustflow.ai, in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the French Data Protection Act ("Loi Informatique et Libertés").

2. Data controller
The data controller is [COMPANY NAME], whose registered office is located at [REGISTERED OFFICE ADDRESS]. For any question regarding the processing of your data, you can contact us at [CONTACT / DPO EMAIL].

3. Data we collect
• Account and identification data: first name, last name, email address, company, password.
• Billing data: billing details and transaction history (payments are processed by our payment provider; we do not store full card numbers).
• Data from connected social media accounts: when you connect your Instagram, Facebook/Meta or TikTok accounts, we process comments, messages, public profile information and engagement metrics strictly for the purpose of providing the moderation, response and analytics features.
• Usage and technical data: IP address, browser type, pages viewed, and cookie data.

4. Purposes and legal bases
• Providing and operating the service – performance of the contract.
• Managing accounts, billing and support – performance of the contract and legal obligations.
• Improving and securing the service – our legitimate interest.
• Sending marketing communications – your consent and/or our legitimate interest.
• Complying with legal obligations – legal obligation.

5. Recipients and sub-processors
Your data is accessed only by authorised staff of [COMPANY NAME] and by our sub-processors acting on our instructions: hosting providers, payment provider, AI/technology providers, and the social media platforms you connect (Meta, TikTok). A list of sub-processors is available on request at [CONTACT EMAIL]. We never sell your personal data.

6. International transfers
Where data is transferred outside the European Union, we ensure an appropriate level of protection through suitable safeguards such as the European Commission’s Standard Contractual Clauses.

7. Data retention
We keep your data only as long as necessary for the purposes described: for the duration of your account and then in accordance with applicable legal retention periods (notably for accounting and billing records).

8. Your rights
In accordance with the GDPR, you have the right to access, rectify and erase your data, to restrict or object to processing, to data portability, and to withdraw your consent at any time. You may exercise these rights by contacting [CONTACT EMAIL]. You also have the right to lodge a complaint with the French data protection authority (CNIL – www.cnil.fr).

9. Security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or alteration.

10. Cookies
The Website uses cookies that are necessary for its operation and, subject to your consent, cookies for analytics and marketing purposes. You can manage your preferences at any time through the cookie banner or your browser settings.

11. Changes to this policy
We may update this Privacy Policy from time to time. Any significant change will be communicated through the Website or by email.

Last updated: [DATE].