TrustOnChain is operated by TrustOnChain Pte. Ltd., with its registered address at 3 FUSIONOPOLIS WAY #13-20 SYMBIOSIS SINGAPORE 138633 ("TrustOnChain", "we", "us" or "our"). We are responsible for deciding how personal data is used for the Website and business-contact activities described in this Privacy Policy and act as the data controller where that term applies.
This Policy explains how we collect, use, disclose and protect personal data when you visit trustonchain.ai or other public pages linking to this Policy (the "Website"), contact us, request a demonstration, or receive related communications. It also explains your choices and how to exercise your rights. "Personal data" means information that identifies you or can reasonably be linked to you.
Our customer platform supports Web2 and Web3 risk management. Processing personal data for a business customer under a separate service arrangement is addressed in Section 12. The data involved in those services is not necessarily collected from ordinary Website visitors.
Information you provide. When you complete a Book a Demo or contact form, request materials or communicate with us, we collect the information you provide. Depending on the form and your request, this may include your name, business email, telephone number, employer, job title, country or region, product interests, business requirements, preferred meeting time and message content. We also keep relevant correspondence and records of consent and communication preferences.
Website and device information. When you visit the Website, technical information may be generated or collected, including your IP address, browser, operating system, device type, language, referral source, pages viewed, access times, interactions and error or security logs. We may derive an approximate location from your IP address. Collection through optional cookies and similar technologies is subject to the choices explained in Section 5.
Communication information. We keep records of inquiries, replies and meeting arrangements. Where enabled and permitted, email tools may record delivery, link interactions or message opens to help us manage communications. Tracking technologies used for this purpose are subject to applicable notice and consent requirements.
Information from others. We may receive business contact details from a colleague or representative who arranges an introduction or meeting involving you. If we receive your details indirectly, we provide information about the processing and source as required by applicable law.
Required fields and sensitive information. Required form fields will be identified. If you do not provide information necessary to handle your inquiry, we may be unable to respond or arrange the requested demonstration. Please do not use public forms to send identity documents, payment-card details, biometric or health data, passwords, private keys, recovery phrases or identifiable customer datasets. If you provide another person's details, ensure that you are authorized to do so and that they receive appropriate privacy information.
We use personal data for the purposes below. Where the EU or UK General Data Protection Regulation applies, the corresponding legal bases are also described below. In other jurisdictions, we rely on the lawful grounds available under the applicable data protection law.
Inquiries and demonstrations. We use your contact information, business details and correspondence to answer questions, arrange demonstrations, provide requested materials and manage follow-up with the appropriate team. Our basis is our legitimate interest in communicating with prospective customers and business contacts. Where you personally are a prospective contracting party, we may instead rely on taking steps at your request before entering into a contract.
Website operation and security. We use technical data and relevant records to deliver Website functions, resolve faults, prevent misuse and protect systems and users. Our basis is our legitimate interest in maintaining a secure and functioning Website, subject to any separate consent requirements for tracking technologies.
Website and communication improvement. Where analytics or communication-measurement features are enabled, we use permitted usage and interaction data to understand which content is useful and improve our Website and communications. We rely on consent where required, and otherwise on legitimate interests where the relevant activity is permitted without consent.
Marketing. We use business contact details, expressed interests and preferences to send relevant product updates, news or invitations where you have consented or another applicable rule permits the communication. We obtain consent separately where it is required. Further details and withdrawal options are in Section 4.
Legal obligations and rights. We use relevant records to comply with binding legal requirements, respond to lawful requests, maintain evidence of preferences, and establish, exercise or defend legal claims. We rely on legal obligations or our legitimate interests in protecting legal rights, as appropriate.
Where we rely on legitimate interests, we consider the necessity of the processing and its effect on your rights and reasonable expectations. You can ask for information about that assessment. If we need to use your data for a new, incompatible purpose, we will provide the required information and establish a lawful basis before doing so.
Submitting a contact or Book a Demo form enables us to reply and follow up on your request. It does not, by itself, give blanket consent to promotional communications. Where consent is required for marketing, you can choose whether to give it without losing the ability to make an inquiry or request a demonstration.
You can stop marketing emails at any time by clicking the unsubscribe link in an email, visiting the email preference or unsubscribe page linked from that message, or emailing mkt@trustonchain.ai. You do not need to create an account or pay a fee. We will act on your request without undue delay and within the applicable legal period.
You may object at any time to our use of your personal data for direct marketing, including any related profiling. Once you opt out, we will stop the marketing covered by your request. We may retain a limited record of your email address and preference to prevent further unwanted marketing and demonstrate that we have respected your choice.
Unsubscribing does not prevent necessary, non-promotional replies to your inquiries or communications concerning an existing service, security matter or legal obligation. Withdrawal of consent does not affect processing that was lawful before the withdrawal.
The Website may use cookies, local storage, pixels and similar technologies. Essential technologies support functions such as security, form submission and remembering privacy choices. Where enabled, optional technologies may help us understand visits, remember additional preferences or measure marketing communications.
Where applicable law requires consent, we will request it before using non-essential technologies and provide a way to refuse or withdraw it. Submitting a demonstration request does not automatically enable optional tracking. Information about the technologies actually deployed, their purposes and duration will be provided through the relevant cookie notice or preference controls when they are used.
You can also use your browser settings to block or delete cookies. This may affect some Website features. Settings that block remote images in emails may limit certain tracking pixels. Where applicable law requires us to recognize a browser-based opt-out preference signal, we will honor it for the processing to which it applies.
We disclose personal data only as reasonably necessary for the purposes described in this Policy and as permitted by law. Access within our organization is limited to personnel who need the information for their responsibilities.
Service providers. We use providers that support Website hosting, infrastructure, security, customer relationship management, inquiry handling, email delivery, meeting scheduling and, where enabled, analytics or communication measurement. They may store or process the relevant information on our behalf. Providers acting on our instructions are subject to appropriate contractual restrictions, confidentiality duties and security requirements. We do not permit them to use your inquiry details for their own unrelated marketing.
Business support and professional advisers. Where involved in handling your request or supporting our operations, relevant group entities or authorized business-support providers may receive necessary information. We may also disclose information to legal, accounting and other professional advisers where appropriate. A separate recipient acting as a controller is responsible for its own processing, and we will provide additional information where required.
Legal and protective disclosures. We may disclose relevant information to courts, regulators, law-enforcement bodies or other recipients where required by law or where lawfully necessary to investigate misuse, protect people or systems, or establish, exercise or defend legal rights.
Corporate transactions. Personal data may be disclosed to advisers, counterparties or successors in connection with a genuine merger, financing, reorganization or transfer of all or part of our business. We apply appropriate confidentiality and data protection arrangements and provide any notice required by law.
Your personal data may be stored or accessed outside the country where you live, including where our authorized personnel and service providers operate. The relevant hosting and access locations are Singapore. Laws in those locations may provide different protections from those in your country.
Where a transfer is restricted by applicable law, we use a legally recognized transfer mechanism and any required additional safeguards. Depending on the transfer, this may involve a recognized adequacy decision, applicable standard contractual clauses, a UK transfer addendum or international data transfer agreement, and the assessments and supplementary measures required for that transfer.
You may contact us for information about the destinations and safeguards applicable to your data, including a copy of relevant contractual safeguards subject to lawful redactions. Merely visiting the Website or submitting an inquiry does not constitute consent to unrestricted international transfers.
We keep personal data for as long as reasonably necessary for its stated purpose, taking account of the nature of the data, the status of our relationship, applicable legal duties and relevant limitation periods.
Inquiry and business-contact records are kept while we handle your request and maintain a relevant business relationship. Their continued relevance is reviewed, and information is deleted or anonymized when no longer needed. Marketing records are kept while we have a lawful basis to contact you; limited consent, objection and suppression records may be retained longer to respect your choices and demonstrate compliance.
Technical and security logs are kept for the operational or security period relevant to their purpose. Records needed for an incident, legal obligation or dispute may be retained longer for that reason. Deleted information may remain in restricted backups until the applicable backup cycle ends and is not used for ordinary business purposes during that period.
We apply technical and organizational safeguards appropriate to the information and risks, including access restrictions, confidentiality requirements and proportionate protection for storage and transmission. We require providers handling data for us to maintain appropriate safeguards.
No website, transmission method or storage system can be guaranteed completely secure. If a personal data breach occurs, we will assess it and notify affected individuals and competent authorities where and when applicable law requires.
Depending on the law applicable to your personal data, you may have rights to:
These rights are subject to applicable conditions and exceptions. An objection to direct marketing is addressed separately in Section 4. Where you object to processing based on legitimate interests for another purpose, we will assess whether a legally permitted reason allows it to continue.
Send a request to qingzhang@trustonchain.ai. We may ask for proportionate information to confirm your identity or an agent's authority, but will not ask for more than reasonably necessary. We will respond within the legally required period and explain any permitted extension, refusal or fee. Where an appeal right applies, you may reply to our decision to request an appeal.
You may complain to the competent data protection authority, including the authority in your place of residence, work or alleged infringement where applicable. You do not have to contact us first. We will not unlawfully discriminate or retaliate against you for exercising your rights.
We may use automated tools to organize inquiries, route them to the appropriate team and manage communication preferences. The Website inquiry process is not used to make decisions based solely on automated processing that produce legal or similarly significant effects on you.
The AI-assisted risk management capabilities described in product materials concern customer services. Their use of personal data, purposes and applicable safeguards must be addressed in the relevant service arrangements and privacy information. This Policy does not provide blanket authorization to use inquiry data to train general-purpose AI models. Any such additional use would require its own lawful basis and the necessary notice or consent.
Depending on the service and configuration agreed with a customer, the TrustOnChain platform may process identity or contact information, device and behavioral signals, payment or transaction records, wallet addresses, transaction hashes, blockchain activity, third-party risk indicators and case-management information. Publicly available blockchain data may still be personal data when it relates to an identifiable person.
Where we process such data solely on a customer's behalf and instructions, that customer determines the purposes and legal basis, and we act as its processor or service provider. The customer's privacy notice and our applicable service and data processing agreements address that processing. This Website Policy does not replace those arrangements or authorize a customer to provide data unlawfully.
If your request concerns a business customer's use of the platform, contact that customer first. We will assist it in responding as required by applicable law and our agreement. If we determine a separate purpose for processing service-related personal data, we will provide the relevant additional privacy information and establish an appropriate legal basis.
The Website is intended for adult business and professional users and is not directed to children under 18. We do not knowingly seek their personal data through Website forms. If you believe a child has provided personal data, contact us so that we can investigate and take appropriate steps, including deletion where appropriate.
External websites and social-media services linked from the Website operate under their own privacy notices. Please review those notices before submitting information to the relevant provider.
We may update this Policy to reflect changes in our practices, Website features or legal requirements. We will post the revised version and update its effective date. Where required, we will provide additional notice of material changes and obtain consent for a new use that requires it. A change to this Policy does not retrospectively create consent.
For privacy questions or rights requests, contact qingzhang@trustonchain.ai. You may also email mkt@trustonchain.ai to have your inquiry directed to the appropriate person. To stop marketing emails, use the unsubscribe options in Section 4.
