Privacy Policy

Effective September 14, 2026

1. What we collect

When you use TrustShelf, we process: reviews your own customers submit through a public review form you share with them, plus your business details; standard technical data (IP address, browser type, pages visited) collected automatically via Google Analytics; and payment confirmation data from Stripe (we receive confirmation that a payment succeeded, never your full card number).

2. How we use it

We use the data you submit to generate an owner dashboard and an embeddable review widget for your own website, and to operate, secure, and improve the Service. If you are a business owner using the Service, reviews your customers submit (including any name or contact detail they choose to include) are stored so they can be displayed on your dashboard and widget, and are processed by the AI processor named below to suggest rewordings without changing their factual meaning. If you are a customer submitting a review through a TrustShelf form, your review text and any contact details you include will be visible to the business you are reviewing and may be published publicly on that business's website via the widget.

3. Third parties we share data with

• Anthropic (api.anthropic.com) — processes the content you submit to generate the AI output described above.
• Stripe — processes payments; handles your card details directly, which never touch our servers.
• Google Analytics — collects anonymized usage statistics about how the site is used.

We do not sell your personal data to third parties.

4. Data retention

Reports are stored on our servers, keyed by a random, unguessable identifier, so we can show you your result and let you retrieve it later. We retain this data only as long as needed to operate the Service and respond to support requests; you can request deletion at any time (see Contact below).

5. Cookies

The Service uses Google Analytics, which may set cookies to distinguish visitors. No advertising or cross-site tracking cookies are used.

6. Your rights

Depending on where you live, you may have the right to access, correct, or delete your personal data, or to object to its processing. To exercise any of these rights, contact us using the details below.

7. Children

The Service is not directed at children under 18 and we do not knowingly collect data from them.

8. Contact

Questions about this Privacy Policy, or requests to access or delete your data, can be sent to o.guzey@crtable.com.