Privacy Policy

What’s new in this version. This policy now applies globally, with a supplement for each country whose law adds requirements — see Section 15. It also adds website analytics and advertising measurement: trustaige.com now uses Google Analytics and Google Ads conversion measurement, each only if you allow it. Nothing changes for the Trustaige Identity Platform, the device trust agent, or the Envoy app, none of which contain analytics or advertising code. See Section 13.

1. About us (data controller)

Trustaige Limited (“we”, “our”, “us”) is the data controller responsible for your personal data.

• Legal Name: Trustaige Limited
• Address: Spacepad Building, KM 18 Lekki-Epe Expressway, Lagos, Nigeria
• Email: shield@trustaige.com
• Phone: 0816 381 6789

We operate the Trustaige Identity Platform (“Platform”) and the website at trustaige.com. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website and services, wherever you are.

Where the law of your country gives you additional rights or requires us to tell you more, a country supplement also applies to you — see Section 15. If a supplement and this policy differ, the supplement applies to people in that country.

2. Information we collect

Website visitors

When you visit trustaige.com, our servers and hosting provider receive the technical information any website receives — such as your IP address, browser type, and the page requested — to deliver the site and protect it from abuse.

If you allow analytics, we also collect the following through Google Analytics:

• Usage data: pages viewed, the page that referred you, time on page, scrolling, clicks on links and file downloads, which of our sign-up, demo, and sign-in buttons you pressed, and whether you submitted a sign-up or demo form (but never what you typed into it)
• Device and browser information: device category, browser, operating system, screen resolution, and language
• Approximate location: country, region, and city, estimated by Google from your IP address
• A pseudonymous identifier: a randomly generated ID stored in the _ga cookie, used to recognize repeat visits from the same browser

If you allow marketing, we also measure through Google Ads whether our ads lead to sign-ups:

• Ad click details: if you arrive by clicking one of our Google ads, the click identifier Google adds to the link, and when the click happened
• Conversions: whether that visit went on to a sign-up or demo request (but never what you typed into the form)
• A pseudonymous identifier: a randomly generated ID stored in the _gcl_au cookie, used to connect an ad click to a later sign-up from the same browser

If you don’t allow analytics or marketing, or haven’t chosen yet, none of this data is collected. Section 13 explains how this works and how to change your choice.

Event pages

When you open an event page on trustaige.com, or start or complete a registration, the page tells our own events service, which runs on Trustaige’s servers and not Google’s, which event it was, the campaign tags in the link you followed (such as utm_source=linkedin), and the name of the site that sent you (such as linkedin.com, never the full address). We use this to count which of our posts and emails bring people to our events, and we store the campaign tags with your registration. To count visitors without a cookie, we combine your IP address and browser type with a secret that changes every day and keep only the result. We never store the IP address, and once the day’s secret is deleted the result can’t be linked back to you.

If you allow analytics, the page also sends a random ID from our ta_vid cookie, so we can tell that a registration came from the same browser as an earlier visit, including a visit to another event. This ID is never sent to Google.

Sign-up and demo requests

When you create an organization or book a demo through our website, we collect:

• Contact information: your name, business email address, and phone number
• Organization information: organization or company name, and approximate team size (demo requests)

We use this information to provision your organization, schedule your walkthrough, and follow up on your enquiry. Phone numbers are used by our sales team for direct contact only — they are not enrolled in any marketing automation or shared with third parties for marketing purposes. The contents of these forms are never sent to Google Analytics, Google Ads, or any other analytics or advertising service.

Partner introductions

When you ask to be introduced to a partner through our partner directory, we collect your name, work email, phone number, company, region, the products you’re interested in, roughly how many people would sign in, and any message you add. With your consent, we pass these details to one Trustaige partner, or to our own team, so they can contact you about your enquiry.

Platform users

When your organization uses the Trustaige Identity Platform, we process:

• Account information: email address, display name, and organizational role
• Authentication data: WebAuthn public key credentials (public keys only — private keys never leave your device)
• Session data: device type, browser, operating system, IP address, geographic location (derived from IP), and session timestamps
• Audit logs: authentication events, profile changes, administrative actions, and security events

Device trust agent

When your organization enables device trust and you install the Trustaige agent on your device, the agent collects and reports the following to your organization’s Trustaige instance:

At enrollment (one-time):

• Device hostname and hardware serial number
• Operating system platform and version
• An Ed25519 public key generated locally for device attestation (the private key never leaves your device)

At regular intervals:

• Disk encryption status (enabled or disabled)
• Firewall status (enabled or disabled)
• Screen lock status (enabled or disabled)
• Operating system version and update status
• Agent software version

What the agent does NOT collect:

• Personal files, documents, or media
• Browsing history or web activity
• Application usage or installed software lists
• Keystrokes or screen content
• Location data (beyond IP-derived geolocation on the server side)
• Biometric data

The agent displays a consent notice before enrollment and provides in-app transparency about what data is reported. You can view this at any time via the “What We Collect” menu item in the agent’s tray menu.

Mobile device management (MDM)

When your organization manages a mobile device with Trustaige MDM (for example an iPhone or iPad enrolled through the Trustaige Envoy app), enrollment installs a management profile that you review and approve on the device. The Envoy app itself sends exactly one thing: the enrollment token you enter, used to fetch your organization’s enrollment profile. After you approve the profile, the device’s operating system reports the following to your organization’s Trustaige instance through the platform’s built-in device management protocol:

• Device name, model, and operating system version
• Hardware identifiers (serial number and UDID)
• Security posture (whether a passcode is set and storage is encrypted)
• The device identity certificate issued at enrollment and its validity
• Inventory and status of the apps and configuration your organization installs

Your organization’s administrators can also take remote actions on a managed device — delivering or removing organization configuration and apps, and locking, restarting, or erasing a device that is lost, stolen, or offboarded. Every such action is restricted to the device’s own organization, permission-gated, and audit-logged.

MDM does not collect your messages, email, photos, browsing history, keystrokes, or location. The Envoy app contains no analytics, tracking, or third-party SDKs, and it presents a data-collection disclosure screen that you must accept before any enrollment profile is downloaded or installed. No MDM data is collected without your consent, and removing the management profile stops collection.

3. Google Workspace data

When your organization connects Trustaige to Google Workspace, a Google Workspace Super Admin authorizes Trustaige to read and write certain directory data through Google APIs (the Google Admin SDK Directory API and the Cloud Identity API). Trustaige acts as your source of truth: administrators manage users and groups in Trustaige, and Trustaige provisions those records into your Google Workspace. This section describes specifically how Trustaige accesses, uses, stores, and shares that Google user data.

This integration is entirely separate from our use of Google Analytics and Google Ads on trustaige.com (Section 13). Google Workspace data is never sent to Google Analytics or Google Ads, and website analytics and advertising data is never combined with your organization’s Platform data.

Google user data we access

• User accounts: user names, primary and alias email addresses, and account status — Trustaige creates, updates, and deactivates user accounts in your Google Workspace to match the directory your administrators manage in Trustaige.
• Groups and memberships: group names, group email addresses, and group memberships — Trustaige creates and updates groups and their members in your Google Workspace from the groups defined in Trustaige.
• Organizational units: your org-unit structure — read to assign single sign-on to the correct organizational unit.
• Verified domains: the domains verified in your Google Workspace — read during setup.
• Single sign-on configuration: the SAML SSO profiles and assignments Trustaige creates and manages on your behalf.

Trustaige does not access the contents of Gmail, Google Drive files, or Google Calendar.

How we use Google user data

We use this access solely to provide and improve the Trustaige Identity Platform’s features for your organization, specifically to:

• Create, update, and deprovision users and groups in your Google Workspace so they match the directory your administrators manage in Trustaige.
• Configure and maintain SAML single sign-on between Trustaige and Google Workspace.
• Apply your organization’s access policies and produce audit records of access decisions.

We do not use Google user data for advertising or for any purpose unrelated to the features above.

How we store and protect Google user data

Google Workspace data is stored within your organization’s Trustaige instance and protected by the controls described in Section 9. Data is encrypted in transit using TLS 1.2 or higher, and at rest using AES-256 encryption. The OAuth tokens Trustaige uses to call Google APIs are held in an encrypted secret vault in which each organization’s data is encrypted with its own dedicated, rotatable encryption key — so one organization’s tokens can never be read with another organization’s key.

How we share Google user data

We do not sell, rent, or transfer Google user data to third parties for advertising or any unrelated purpose. We share it only as described in Section 7 — with infrastructure sub-processors strictly to operate the Platform on our instructions — or where required by law, or to protect against imminent security threats.

Retention and deletion of Google user data

Google Workspace data is retained as “Platform identity data” described in Section 10. When your organization disconnects the Google Workspace integration or terminates its subscription, the associated Google user data and OAuth tokens are deleted in line with that schedule. Your organization may also request deletion at any time through the rights process in this policy.

Limited Use

Trustaige’s use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular, Trustaige:

• limits its use of Google user data to providing or improving user-facing features that are prominent in the Trustaige application;
• does not transfer or sell Google user data to serve advertisements; and
• does not allow humans to read Google user data unless we first obtain your consent to view specific data, it is necessary for security purposes or to comply with applicable law, or the data has been aggregated and anonymized for internal operations.

4. How we use your information

We use collected information to:

• Provide and maintain the Trustaige Identity Platform
• Process sign-up requests and communicate with prospective customers
• Introduce you to a partner, when you ask us to
• Authenticate users and manage sessions
• Generate audit logs for security and compliance purposes
• Detect and prevent unauthorized access and security threats
• Improve our services and user experience
• Understand, with your consent, how visitors use trustaige.com, so we can improve its content and navigation
• Measure, with your consent, whether our ads lead to sign-ups and demo requests
• Respond to support requests
• Comply with legal obligations

5. Legal basis for processing

We process your personal data on the following lawful bases. Your country supplement sets out the specific legal provisions that apply where you are.

Where we rely on legitimate interest, we have conducted a balancing assessment to ensure our interests do not override your rights and freedoms. Where we rely on consent, you can withdraw it at any time; withdrawal does not affect processing carried out before it.

6. What we never collect

Trustaige is designed with privacy at its core:

• Private keys: WebAuthn private keys are generated and stored on your device’s secure element. They never leave the device and are never transmitted to our servers.
• Biometric data: Biometric verification happens locally on your device. We never receive, store, or process biometric data.
• Passwords: Trustaige is a passwordless platform. We do not store passwords or shared secrets.
• Personal files or activity: The Trustaige device agent and Trustaige MDM do not access, scan, or transmit personal files, messages, photos, browsing history, keystrokes, or screen content.
• Form contents in analytics or advertising: What you type into our sign-up, demo, and partner forms — name, email, phone number, company — is never sent to Google Analytics, Google Ads, or any other analytics or advertising service.
• Analytics or advertising inside the product: The Platform, our sign-in pages at id.trustaige.com, the device trust agent, and the Envoy app contain no analytics, advertising, or tag-management scripts. The Google tag runs only on our public website.

7. Who we share data with (third-party recipients)

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Mobile device management data. Data collected through our mobile device management services — everything described under “Mobile device management (MDM)” in Section 2 — is never sold, used by, or disclosed to third parties for any purpose. It is processed solely to provide device management to the organization that manages the device, and we do not use third-party analytics in our MDM apps. This commitment is mandated by Apple policy (App Store Review Guideline 5.5) and we apply it to MDM data on every platform.

We may share data with the following categories of recipients, solely for the purposes described:

We configure Google Analytics without Google signals or advertising features, and we turn off sharing of analytics data with Google for its own products and services. We use Google Ads only to measure conversions: ad personalization is off, we do not build remarketing audiences, and we never send Google your name, email address, or phone number.

Google processes Google Analytics data as our service provider under its data processing terms. For Google Ads measurement, Google acts as an independent controller for some of the data under its controller terms, and Google’s Privacy Policy applies to that processing.

All third-party processors are bound by data processing agreements that require them to process personal data only on our instructions and implement appropriate security measures.

8. International data transfers

Your data may be processed outside the country where you are by our cloud infrastructure and service providers. This includes Google, which processes website analytics and advertising data in the United States and other countries where it operates. Where such transfers occur, we ensure appropriate safeguards are in place, including:

• Data processing agreements with all sub-processors
• Verification that the receiving jurisdiction provides adequate data protection, or
• Implementation of appropriate safeguards such as standard contractual clauses

Your country supplement sets out the transfer rules that apply where you are.

9. Data storage and security

• All data is encrypted in transit using TLS 1.2 or higher
• Data at rest is encrypted using AES-256
• Highly sensitive secrets — including OAuth tokens for connected services such as Google Workspace — are held in an encrypted vault using per-organization data encryption keys (envelope encryption), so each organization’s secrets are cryptographically isolated and the keys can be rotated
• Sessions are managed through a secure, server-side session store with strict TTL enforcement
• Content Security Policy (CSP) with per-request nonces protects against injection attacks
• HTTP Strict Transport Security (HSTS) is enforced in production
• The Google tag runs only on our public website, never on the Platform or sign-in pages, and only after you allow it; access to our Google Analytics and Google Ads accounts is limited to named staff
• Access to production systems is restricted and audited
• We conduct regular security reviews of our infrastructure and application

10. Data retention

We retain personal data only for as long as necessary for the purposes for which it was collected:

When data is no longer required, it is securely deleted or anonymized.

11. Your rights

Depending on where you are, you have some or all of the following rights regarding your personal data. Your country supplement lists the rights you have under local law and the legal provisions behind them.

• Access: You may request a copy of the personal data we hold about you.
• Rectification: You may request correction of inaccurate or incomplete personal data.
• Erasure: You may request deletion of your personal data, subject to legitimate retention requirements and a 30-day grace period.
• Withdraw consent: Where we rely on consent, you may withdraw it at any time. For website analytics and advertising, use Cookie settings in the website footer.
• Object: You may object to processing based on legitimate interest.
• Data portability: You may request your data in a structured, commonly used, machine-readable format (JSON).
• Complain to a regulator: You may complain to the data protection authority in your country. Your country supplement names it.

Website analytics and advertising data is held under random cookie IDs, not your name or email, so we usually cannot link it to you. If you send us the ID stored in your _ga cookie, we will delete the analytics data associated with it.

How to exercise your rights

You can exercise your data subject rights through:

• Self-service: Use the data export and identity management features in the Platform settings.
• Email: Send your request to dpo@trustaige.com with the subject line “Data Subject Request”.
• Response time: We will acknowledge your request within 72 hours and fulfill it within 30 days, or sooner where your country supplement requires, or inform you if an extension is necessary and permitted.

Before we process your request, we may ask you to sign in with your passkey or otherwise confirm the request comes from you. We will not charge a fee for processing reasonable requests.

12. Data Protection Officer

We have designated a Data Protection Officer (DPO). You may contact the DPO for any inquiries regarding data protection:

• Email: dpo@trustaige.com

The DPO is responsible for monitoring our compliance with data protection law, advising on data protection obligations, and serving as the point of contact for data subjects and data protection authorities.

13. Cookies, website analytics and advertising measurement

The Trustaige Platform uses only strictly necessary session cookies. Our public website, trustaige.com, also uses Google Analytics and Google Ads conversion measurement — but only if you allow them. We do not show ads on our website, run remarketing, or use tracking pixels.

Nothing loads before you choose

On your first visit, a cookie banner at the bottom of the page explains what we’d like to do and offers Accept all and Reject all with equal prominence, and Manage settings, which lets you allow Analytics and Marketing separately. You can keep using the site without choosing, and the banner stays until you do. Until you allow a purpose, nothing for it loads, no cookies are set for it, and no request for it is sent to Google. If your browser sends a Global Privacy Control signal, Accept all leaves Marketing off; you can still turn it on with its own switch.

What each tool does

• The Google tag is the script, served from googletagmanager.com, that loads Google Analytics and Google Ads measurement. It loads only after you allow at least one of them. Once it loads, Google receives the standard technical details of the request, such as your IP address and browser type.
• Google Analytics 4 measures how visitors use the site — the data listed under “Website visitors” in Section 2 — and reports it to us in aggregate.
• Google Ads conversion measurement tells us whether a visit that started with a click on one of our ads went on to a sign-up or demo request, so we can see which ads work.

How we have configured it

• No Google signals, remarketing, or personalized advertising
• Sharing of analytics data with Google for its own products and services turned off
• No User-ID, and no enhanced conversions: we never send your name, email, phone number, company, or Trustaige account ID to Google
• Form fields excluded: we record that a form was submitted, never what it contained
• Analytics event- and user-level data deleted after 14 months
• Google states that it uses your IP address in Google Analytics only to estimate coarse location and filter spam, then discards it

Cookies on trustaige.com

Once you allow marketing, Google may also read or set cookies on its own domains (such as google.com) under Google’s Privacy Policy.

Changing your mind

Use Cookie settings in the website footer at any time to allow or withdraw Analytics and Marketing separately. When you withdraw, we stop loading the Google tag for that purpose and delete its cookies from trustaige.com. You can also block cookies in your browser settings or install Google’s Analytics opt-out browser add-on. For more detail, see our Cookie Policy.

14. Changes to this policy

We may update this Privacy Policy and its country supplements from time to time. We will notify you of significant changes by posting the updated policy on this page with a revised effective date. Where required by law, we will seek your consent to material changes. If we change how we use analytics or advertising in a way that affects what you agreed to, we will ask for your consent again through the cookie banner.

15. Country supplements

The following supplements add what local law requires. Each applies to people in that country, together with this policy:

• Nigeria: Nigeria Privacy Supplement — the Nigeria Data Protection Act 2023 (NDPA) and the General Application and Implementation Directive (GAID) 2025

16. Contact

For privacy-related inquiries:

• Data Protection Officer: dpo@trustaige.com
• General inquiries: shield@trustaige.com
• Support: support@trustaige.com
• Address: Spacepad Building, KM 18 Lekki-Epe Expressway, Lagos, Nigeria