Privacy Notice

Effective September 17, 2026

Trusteed ("we") is an AI marketing system for local businesses, operated from Gilbert, Arizona. This notice explains, in plain language, what we collect and what we do with it.

What we collect

• Early-access list. If you request access, we store your email address.
• Account information. If you have an account, we store your email, name, and sign-in credentials (managed by Google Firebase Authentication).
• Business content you provide. Photos and videos you upload, business details you enter, and content drafts the system generates for you.
• Connected accounts. If you connect a marketing account (Facebook, Instagram, Google Business Profile, Google Ads, Google Search Console, Google Analytics, or your website's blog), we store the access credentials for that connection, encrypted, along with the performance data those services report about your own business (for example, how many people saw a post or clicked an ad).
• Service data. Error reports and basic usage diagnostics so we can fix problems (via Sentry).
• Device tokens. If you install the mobile app and allow notifications, we store the push token Apple issues for your device so we can notify you when a draft is ready.

How we use it

• To provide the service: generating, checking, publishing, and measuring your marketing content.
• To contact you about early access or your account.
• To improve the product.

We do not sell your data. We do not run ads. We do not share your information with anyone except the service providers below, who process it on our behalf.

Connected accounts, in detail

Connections exist for exactly two purposes: reading how your marketing is performing, and publishing content you have personally approved. Trusteed never posts anything, changes any ad, or spends any money on a connected account without your explicit approval of that specific item. You can disconnect any account at any time from the Connections page, and we delete the stored credentials when you do.

Facebook and Instagram data. When you connect a Facebook Page (and the Instagram account linked to it), we store the Page name and ids, the Facebook user id of the person who connected it, encrypted access tokens, and the follower, reach, and engagement numbers Meta reports for your own Page and posts. There are three ways to have all of it removed:

• Open Connections in Trusteed and disconnect Facebook. The tokens are deleted immediately.
• Remove Trusteed from your Facebook settings (Settings and privacy, then Apps and websites). Meta sends us a deletion request, and we automatically delete the tokens and the cached Facebook and Instagram metrics for every business you connected, mark the connection as disconnected, and return a confirmation code with a status page you can check.
• Email hello@trusteed.app and we will do it by hand.

Trusteed's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

AI processing

Content you submit is processed by our AI provider (Anthropic) to generate and check your drafts. It is used to provide the service to you, not to train AI models.

Service providers

• Google Firebase (authentication, database, and file storage)
• Vercel (website hosting)
• Anthropic (AI processing of the content you submit)
• Sentry (error reporting)
• Resend (transactional email)
• Cloudflare (DNS and email routing)
• Apple (push notifications for the mobile app)
• Meta and Google (only as the platforms you choose to connect, under their own terms)
• Inngest (runs our background jobs; job payloads can include the text of a post you are editing)
• Jina Reader, Google Places, and Yelp (during setup we read your public website and public business listing to learn your services and voice; only the public address of your site or listing is sent)

Retention and deletion

Your business data stays as long as your account is open. When you delete your account in the app (Account, then Delete my account), your login is removed immediately, every connected account is disconnected and its stored credentials are deleted immediately, and no further posts or emails go out. Thirty days later a scheduled job removes the rest: posts, photos, the writing profile, and setup notes. We keep a short record that the business existed and was deleted, and our security audit log, which may include the email address used on the account, for up to one year.

Children

Trusteed is a tool for business owners and is not directed to children under 13. We do not knowingly collect information from children.

California residents

You can ask what personal information we hold about you, ask us to delete it, and you will not be treated differently for asking. We do not sell personal information. Email hello@trusteed.app.

Your choices

Want your account and everything in it deleted, or have a question? Email hello@trusteed.app and we'll take care of it. Connected-account data can also be removed on its own, as described above.

Changes

If this notice changes, we'll update this page and the effective date above.