Privacy Policy

Trustfield Technologies, Level 6, Prestige Atrium, Central Business District, Bengaluru 560001, India, operates Trustfield and is the data fiduciary for the account and billing information described below. For the business records you create inside your workspace (your customers, equipment, tickets and reports), your company is the data fiduciary and we act as your processor.

Privacy contact and grievance officer: privacy@trustfield.dev.

• Account data: company name, owner name, email address, phone number, city, GST number and workspace slug.
• Team data: employee name, employee code, email, phone, role, territory, password hash and PIN hash. We never store passwords or PINs in readable form.
• Business data you enter: clients, contacts, deals, quotations, invoices, serial numbers, service tickets, contracts, photos and signatures.
• Usage and device data: pages opened, actions taken, browser type, device type, IP address and timestamps, kept for security, support and aggregate product analytics.
• Payment metadata: plan, billing cycle, amount, payment reference and status. Card, UPI and bank credentials never reach our servers — Razorpay handles them.
• Support communications: emails and messages you send us.

• To create and run your workspace, sign users in, and show each person the data their role allows.
• To provide support and fix problems you report.
• To bill you correctly, issue GST invoices and meet tax and accounting obligations.
• To keep the service secure: detect abuse, prevent unauthorised access and maintain audit logs.
• To improve the product using aggregated, de-identified usage patterns.
• To send you service messages (renewal reminders, security notices, material changes). Marketing email is opt-in and has an unsubscribe link.

We process data to perform our contract with you (providing the workspace), to comply with legal obligations (tax records), for our legitimate interests (security, product improvement), and with your consent where required (marketing emails). You can withdraw consent at any time without affecting the service.

• Razorpay — payment processing and invoice settlement.
• Our hosting and database providers (Vercel, and a managed PostgreSQL provider), which store data on our behalf under contract.
• Email and support tools used to reply to you.
• Professional advisers, auditors or authorities where the law requires it.

We do not sell your data, and we do not use your customer data for advertising. We do not share one customer's workspace data with another customer.

Data is stored in managed cloud infrastructure used by our providers, which may be located outside India. We apply contractual and technical safeguards for such transfers. Access is limited to staff who need it for support or operations.

Security measures include encrypted transport (HTTPS), isolated workspaces per company, role-based access, hashed credentials (bcrypt), audit logs, and routine backups. No system is perfectly secure, but we work to keep yours safe and will notify you and the relevant authority of a personal-data breach as required by law.

• Active workspaces: for as long as your account is open.
• Closed workspaces: 30 days so the data can be restored, then deleted from live systems. Backups roll off within a further 30 days.
• Invoices and payment records: as long as tax law requires (currently eight years in India).
• Security and audit logs: up to 12 months.

• Access a copy of the personal data we hold about you.
• Correct inaccurate data, including from inside the workspace.
• Export your business data at any time.
• Ask us to delete your account and personal data, subject to records we must keep by law.
• Withdraw consent for marketing messages.
• Nominate a person to exercise your rights in the event of death or incapacity, as allowed by Indian law.
• Complain to the Data Protection Board of India if you are not satisfied with our response.

Write to privacy@trustfield.dev and we will respond within 30 days.

We use one essential session cookie to keep you signed in, and browser local storage for your theme choice and the open/closed state of the sidebar. We do not run advertising or cross-site tracking cookies. Clearing your browser storage signs you out.

Trustfield is business software for adults. It is not intended for anyone under 18, and we do not knowingly collect data from children.

If we change this policy materially we will update the date at the top and, for active paid workspaces, notify the owner by email. Questions? privacy@trustfield.dev.