Privacy Policy

TrustMilestone is built around transparency and trust.

Our goal is to help SaaS founders turn real business data into credible, verifiable proof without exposing the underlying data unnecessarily.

This Privacy Policy explains what information TrustMilestone collects and processes, why we use it, how we protect it, and the choices and rights available to you.

a. Account Data

When you create or use a TrustMilestone account, we may process information such as:

• Your name
• Your email address
• Authentication and account information
• Information about your startup or project that you choose to provide

We use this information to create and manage your account and provide the TrustMilestone service.

b. Connected Stripe Data

When you connect your Stripe account, TrustMilestone accesses only the data necessary to provide the features you enable.

TrustMilestone uses read-only access. Connecting TrustMilestone does not allow us to create charges, issue refunds, transfer funds, modify subscriptions, or otherwise move money through your Stripe account.

Depending on the metric being verified, TrustMilestone may process Stripe data such as:

• Revenue and payment information
• Subscription information
• Aggregated customer or business metrics
• Account information required to establish and maintain the connection

Some verification calculations may require TrustMilestone to process underlying Stripe records. We use those records only as necessary to calculate or verify the relevant metric and do not publish the underlying records as part of your proof.

TrustMilestone stores verification results and related information necessary to establish that a proof was generated from connected Stripe data.

Free verification does not require access to your Stripe customer profiles.

You can disconnect TrustMilestone from Stripe at any time. Disconnecting Stripe prevents TrustMilestone from retrieving new data from that connection, although previously generated verification records may be retained as described in this Policy.

c. Additional Features and Permissions

Some future or optional TrustMilestone features may require access to additional data.

For example, features designed to establish customer relationships, identify renewals or upgrades, or request verified customer proof may require read-only access to customer-related information.

If a feature requires additional Stripe permissions or additional categories of personal data, we will explain this before you enable the feature and request the necessary authorization.

We do not use additional permissions simply because they are available.

d. Content You Provide

You may provide information such as:

• Milestone descriptions
• Startup information
• Context or commentary about your results
• Links and other content associated with your proof

You control what content you choose to provide and publish, subject to our Terms of Service.

e. Public Proof

TrustMilestone allows you to make selected information publicly available.

Depending on the features you use, this may include:

• Verified metrics or metric ranges
• Milestone information
• Verification status
• Verification date or freshness information
• Startup information
• Descriptions, context, and other content you choose to publish

TrustMilestone is designed to turn selected facts into public proof without making the underlying Stripe data publicly available.

You are responsible for deciding what information you choose to publish.

f. Usage and Technical Data

We may process limited technical and usage information necessary to operate, secure, and improve TrustMilestone, such as:

• Page views and interactions
• Browser and device information
• Technical logs
• Security and abuse-prevention information

We aim to minimize the collection of this information and do not use it to build advertising profiles.

We process information where necessary to:

• Create and manage your account
• Connect TrustMilestone with services you authorize
• Calculate and verify business metrics
• Generate and display verified proof
• Maintain the integrity and credibility of verification records
• Operate, maintain, and improve TrustMilestone
• Diagnose technical problems
• Protect the platform against fraud, abuse, and security threats
• Communicate with you about the service
• Comply with applicable legal obligations

We do not sell your personal data.

We do not use your Stripe data for advertising.

We do not use your Stripe data to build advertising profiles.

Where the GDPR applies, we process personal data under one or more of the following legal bases:

Performance of a contract — where processing is necessary to provide TrustMilestone and the features you request.

Legitimate interests — where necessary to operate, secure, prevent abuse of, and improve TrustMilestone, provided those interests are not overridden by your rights and interests.

Consent — where we specifically ask for your consent, such as for certain optional communications or technologies where consent is required.

Legal obligations — where processing is necessary to comply with applicable law.

Where processing relies on consent, you may withdraw that consent at any time.

For personal data associated with your TrustMilestone account, our own website and the operation and security of the service, TrustMilestone generally acts as a Data Controller.

Where TrustMilestone processes personal data on your behalf solely to provide a feature you have requested, TrustMilestone may act as a Data Processor and you may act as the Data Controller.

The applicable role depends on the specific processing activity.

We use a limited number of service providers to operate TrustMilestone, which may include providers for:

• Hosting and infrastructure
• Database services
• Authentication
• Email delivery
• Analytics and performance monitoring
• Security and error monitoring

These providers process information only as necessary to provide their respective services and are subject to appropriate contractual and security obligations where required.

When you connect a third-party service such as Stripe, data is accessed according to the permissions you authorize and that service’s applicable terms and privacy practices.

We aim to keep our data infrastructure and third-party dependencies limited.

TrustMilestone is designed to help you publish business proof.

Information you intentionally publish through TrustMilestone may therefore be accessible to anyone on the internet and may be indexed by search engines, shared, copied, or referenced by third parties.

If you use an available privacy or anonymous publishing option, certain identifying information may be hidden from the public presentation. This does not necessarily make the underlying account or processing anonymous to TrustMilestone.

Do not publish confidential, sensitive, or personal information that you do not want to make public.

Removing content from TrustMilestone does not guarantee that copies previously made by search engines or third parties will immediately disappear.

We may send service-related communications necessary to operate your account, such as security, verification, account, or important product notices.

Where you choose to receive optional marketing or product communications, we may also send information about TrustMilestone features, updates, or related content.

You can unsubscribe from optional marketing communications at any time.

Unsubscribing from marketing communications does not prevent us from sending essential service-related messages.

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including providing the service, maintaining security and verification integrity, resolving disputes, and complying with legal obligations.

In general:

• Account data is retained while your account is active and for a limited period afterward where necessary.
• Published content is retained while you choose to keep it published or until your account or content is deleted, subject to applicable legal and technical requirements.
• Stripe connections: When you disconnect Stripe, TrustMilestone stops using that connection to retrieve new Stripe data. TrustMilestone does not store a separate Stripe access token for each connected account. We may retain limited information about the previous connection where necessary to preserve verification history, security, and audit integrity.
• Verification records may be retained after a Stripe connection is disconnected where necessary to preserve the history and integrity of previously generated proof, prevent fraud or misuse, or comply with legal obligations.

Disconnecting Stripe does not necessarily delete previously generated verification records.

Where data is no longer necessary, we delete or anonymize it, subject to applicable legal, security, backup, and fraud-prevention requirements.

If the GDPR or similar privacy legislation applies to you, you may have the right to:

• Access personal data we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your personal data
• Request restriction of processing
• Object to certain processing
• Request portability of your data
• Withdraw consent where processing is based on consent
• Lodge a complaint with the competent data protection authority

These rights may be subject to limitations or exceptions under applicable law.

To exercise your privacy rights, contact us at hello@trustmilestone.co.

We may need to verify your identity before completing certain requests.

We aim to use privacy-friendly analytics and minimize tracking technologies.

TrustMilestone does not use your Stripe data for advertising or cross-site advertising profiles.

Where cookies or similar technologies are strictly necessary to provide the service, they may be used without consent where permitted by law.

Where applicable law requires consent for a technology we use, we will request that consent before activating it.

We implement appropriate technical and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

Our approach includes limiting access to connected services, using restricted permissions where possible, and minimizing the data we process and retain.

No internet-based service can guarantee absolute security.

You are responsible for maintaining the security of your own account credentials.

TrustMilestone and some of our service providers may process data in countries outside the European Economic Area.

Where personal data is transferred internationally, we use appropriate safeguards where required by applicable law, such as adequacy decisions or approved contractual safeguards.

TrustMilestone is intended for business and professional use and is not designed for children.

We do not knowingly collect personal data from children through the service.

We may update this Privacy Policy from time to time to reflect changes to TrustMilestone, our data practices, or applicable law.

If we make material changes, we will provide appropriate notice where required.

The effective date at the top of this Policy indicates when the latest version became effective.

For questions about this Privacy Policy or to exercise your privacy rights, contact:

TrustMilestone
Email: hello@trustmilestone.co