Privacy Policy

1. Introduction

Trust Push ("we," "our," or "us") is a web push notification service designed for bloggers, website owners, digital publishers, and businesses. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at trustpush.net.

This Privacy Policy applies to all users who register for an account, manage websites, or interact with our platform. By accessing or using Trust Push, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our service.

2. Information We Collect

We collect information that you provide directly to us and information generated through your use of our service:

• Account Information: When you register, we collect your email address, unique user identifier (UID), and authentication provider details (Google, X/Twitter, or email/password).
• Authentication Data: Information from third-party OAuth providers (Google, X) necessary to authenticate your account, such as your display name and profile identifier.
• Website/Domain Data: Information about the websites and domains you add to your Trust Push account for push notification management.
• Push Subscription Tokens: Browser-generated push tokens are managed by Firebase Cloud Messaging (FCM). We do not store individual subscriber tokens in our database.
• Billing Identifiers: Non-sensitive billing-related identifiers for subscription management through our payment processor.
• Support Communications: Any information you provide when contacting our support team.

3. Information We Do NOT Collect

Trust Push is designed with privacy in mind. We explicitly do not collect:

• Passwords: All password authentication is handled securely by Firebase Authentication. We never have access to your passwords.
• End-User Personal Data: We do not collect personal information about the subscribers who receive push notifications on your websites.
• Browsing History: We do not track or store the browsing history of push notification subscribers.
• Location or Device Details: We do not collect visitors' locations or detailed device information.

4. How We Use Collected Information

We use the information we collect for the following purposes:

• Account Authentication: To verify your identity and provide secure access to your account.
• Service Operation: To operate, maintain, and improve our push notification delivery service.
• Push Delivery: To facilitate the delivery of push notifications to your website subscribers.
• Billing & Subscription Management: To process payments, manage subscriptions, and handle refund requests.
• Customer Support: To respond to your inquiries and provide technical assistance.
• Abuse Prevention: To detect, prevent, and address fraud, spam, security issues, and technical problems.

5. Push Notification Data

Trust Push operates on an explicit opt-in model for push notifications:

• Opt-In Model: Push notifications are only sent to users who explicitly grant permission through their web browser. We never send unsolicited notifications.
• Browser-Level Permissions: The permission to receive notifications is handled entirely by the user's web browser. Users can revoke permission at any time through their browser settings.
• Token Lifecycle: Push tokens are managed by Firebase Cloud Messaging (FCM). Tokens may expire or become invalid when users unsubscribe, clear browser data, or change devices. We do not retain expired or invalid tokens.

6. Cookies & Local Storage

Trust Push uses cookies and local storage for essential functionality:

• Session Cookies: Used to maintain your authenticated session while using our platform.
• Authentication State: Local storage may be used to persist authentication state for a seamless user experience.
• No Tracking Cookies: We do not use tracking, advertising, or third-party marketing cookies.

7. Third-Party Services

We use the following third-party services to operate Trust Push:

• Firebase (Google Cloud): For authentication, push notification delivery via Firebase Cloud Messaging (FCM), and infrastructure.
• Dodo Payments: Our merchant of record for processing payments and managing subscriptions.
• OAuth Providers: Google and X (Twitter) for optional social sign-in functionality.
• Datafa.st: For understanding how users interact with our platform to improve our service.

Each third-party service has its own privacy policy governing their use of your information. We encourage you to review their policies.

8. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our service (as listed above), subject to confidentiality obligations.
• Legal Requirements: When required by law, subpoena, court order, or government regulation.
• Protection of Rights: To protect our rights, privacy, safety, or property, and that of our users or the public.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice provided to affected users.

9. Data Retention

We retain your account information for as long as your account is active or as needed to provide you with our services. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain certain information for legal, tax, or regulatory purposes.

Aggregated, anonymized data that cannot be used to identify you may be retained indefinitely for analytical purposes.

10. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit using TLS/SSL
• Token-based authentication for API access
• Regular security audits and monitoring
• Secure cloud infrastructure provided by Google Cloud

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

11. User Rights (GDPR / CCPA)

Depending on your location, you may have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request that we correct any inaccurate or incomplete personal data.
• Right to Deletion: Request that we delete your personal data, subject to certain legal exceptions.
• Right to Data Portability: Request a copy of your data in a structured, commonly used, machine-readable format.
• Right to Opt-Out: Opt-out of certain data processing activities, including marketing communications.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

12. Children's Privacy

Trust Push is not intended for use by individuals under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information promptly. If you believe we may have collected information from a child, please contact us immediately.

13. International Data Transfers

Trust Push operates on cloud-based infrastructure that may process and store data in various locations worldwide. By using our service, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection laws. We ensure appropriate safeguards are in place to protect your information in compliance with applicable data protection laws.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we may also send you an email notification. Your continued use of Trust Push after any changes indicates your acceptance of the updated Privacy Policy.

15. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through our contact page.