Privacy Policy & Security Standards
Our principles on data privacy, local-first browser computing, client confidentiality, and compliance with the Digital Personal Data Protection Act (DPDP) 2023 and GDPR.
Effective Date: January 1, 2026 • Last Reviewed: October 2026
1. Scope & Organization Identity
This Privacy Policy applies to the official digital platform of Trustoryx (accessible at https://www.trustoryx.digital) and all related sub-platforms, browser utilities, and client services operated by Trustoryx.
Data Controller: Trustoryx, Sector 44, Gurugram, Haryana 122003, India.
Privacy Officer Contact: [email protected].
2. Information We Collect and Process
We adhere to strict data minimization principles under the Indian Digital Personal Data Protection (DPDP) Act 2023 and the General Data Protection Regulation (GDPR):
- Direct Inquiries: When you contact us via direct email, telephone, or verified WhatsApp messaging, we collect your name, contact identifier, company details, and project scoping notes strictly to respond to your request.
- Technical Website Logs: Basic server access logs (IP address, user agent, requested URL, response timestamp) collected by our secure edge infrastructure (Cloudflare / Netlify) for DDoS mitigation and operational uptime monitoring. These logs are purged automatically on rolling cycles.
- No Invasive Advertising Trackers: We do not employ third-party advertising pixels, behavioral tracking scripts, or cross-site fingerprinting mechanisms.
3. Local-First Browser Utilities Architecture
Trustoryx engineers standalone productivity utilities including SafeTools.space and the Trustoryx SEO Analyzer Chrome Extension.
These tools operate under an uncompromising Local-First Execution Contract:
- Document manipulation, PDF compression, image encoding, and cryptographic hashing take place entirely within the user's local web browser via WebAssembly and Web Crypto APIs.
- Files and analyzed DOM elements are never uploaded to Trustoryx servers. Zero bytes of your analyzed content are persisted remotely.
4. Client Confidentiality & Intellectual Property
In all professional engagements (including custom web development, mobile applications, cybersecurity audits, and AI workflows):
- Default Bilateral NDA: All client communications, architecture documents, database schemas, and commercial strategies are treated as confidential.
- 100% IP Ownership: Upon settlement of contracted deliverables, the client retains sole intellectual property rights over source code, design systems, and digital assets.
- Dedicated Repositories: Code is committed directly to client-controlled GitHub, GitLab, or Bitbucket organizations.
5. Search Engine Notifications (IndexNow Protocol)
To accelerate indexing of new public content, updates, and research publications, Trustoryx participates in the open IndexNow protocol. When public website URLs are published or updated, automated build hooks transmit the canonical URL and cryptographic key to participating search engines (Microsoft Bing, Yandex, Seznam.cz, Yep). No private, unauthenticated, or client-confidential data is ever communicated via IndexNow.
6. Individual Data Rights
Depending on your jurisdiction, you have the right to request access, correction, deletion, or restriction of processing of any personal information held by Trustoryx. To exercise any of these statutory rights, submit an email to [email protected]. Requests are resolved within 30 days without fees.
7. Application & Extension-Specific Privacy Policies
For Google Play Store and Chrome Web Store regulatory disclosures regarding specific standalone software products, please refer to their dedicated documentation:
Have questions about data privacy or security compliance?
Our security engineering team reviews inquiries directly. Reach out via email or verified WhatsApp.