Home / Privacy policy
Privacy policy
This policy explains what data we collect through the website, and how we use and protect it.
Last updated: 6 November 2026 · النسخة العربية
Data we collect
- Contact and consultation forms: your name, phone number, e-mail (required only if you choose to be contacted by e-mail), business name, request type, main and sub-service, business activity if you choose it, a description of your need, and your preferred contact method.
- Financial health check: your answers and score are calculated in your browser and are not sent to us, unless you ask for the detailed plan; then we receive your name, WhatsApp number, business name, activity and score.
- Client account: your name, phone number, e-mail, business name and activity, and your choice about marketing messages. Your password is stored encrypted and no one at TRUST can see it.
- Financial analyses: the calculator runs in your browser, and none of your figures are saved unless you click “Save to my account”.
- Uploaded financial files: the file itself (Excel, CSV or PDF up to 8 MB) with your contact details, the period and the report type.
- Requests from your account: the service type, subject, details and status of the request.
- Visit source: when you send a request we save with it, if present, the campaign tags in the link (such as utm_source), the site you came from and the page you entered on. This information contains no personal data.
- Initial-session questionnaire: completed on Tally and also subject to Tally’s privacy policy.
How we use data
Contact needed for your request: we use your data to reply to your request, contact you about it, prepare the offer, analysis or report, and manage our relationship with you as a client. This contact is part of providing the service.
Optional marketing messages: we send tips or offers only if you explicitly choose this in a form or when creating your account. This consent is not a condition for using the site, the account or any service, and you can withdraw it at any time by messaging us.
We record requests in an internal client follow-up system that only the TRUST team can see. We do not sell your data or share it with any third party for marketing.
Who processes data on our behalf
- Cloudflare: hosts, delivers and protects the website and counts visits in aggregate, processing technical data such as IP address and browser type.
- Supabase: the database for accounts, analyses, requests and the client record, and private storage for uploaded files. Files are not public and only the TRUST team can download them through a temporary link. Access rules prevent any client from seeing another client’s data.
- Resend and Meta (WhatsApp Business platform): when a new request arrives, a summary (name, phone, requested service and source) is sent to the TRUST team’s e-mail through Resend and to the team’s WhatsApp through Meta’s WhatsApp Business platform so we can reply quickly. File contents and financial data are not sent to them, and we do not message you through them.
- Anthropic (Claude model): through the TRUST AI service on Cloudflare, processes the pages of PDF files and images in the financial & credit analysis tool to extract figures, and summary figures in the Smart CFO when AI commentary is switched on.
- jsDelivr: serves the sign-in library on account pages.
- Tally and WhatsApp: only when you open the questionnaire or contact us on WhatsApp yourself.
These services run on servers outside Palestine and encrypt data in transit. Within TRUST, only the team members assigned to your work can see your data and files.
Digital tools: Smart CFO and financial & credit analysis
- Smart CFO: your files and company figures are stored in your browser on this device only and are not uploaded to TRUST servers. They do not move to another device or browser and are lost if browser data is cleared; keep your original files. If you switch on AI commentary, summary figures (company name, period, totals and ratios) are sent to write the commentary.
- Financial & credit analysis: files are read inside your browser and are not stored on the site or in browser storage; they disappear when you close the page or clear the data. Excel files built on the template and the official Word bureau report are read without AI. For PDF files and images, their pages are sent to the TRUST AI service to extract the figures. The credit bureau report can be uploaded only after you confirm the data subject’s consent.
- What we keep for both tools: your account, access status, and usage and AI-reading counts.
- Payment: we do not collect card details. Payment is by bank transfer or e-wallet, and we keep proof of payment for accounting purposes.
How long we keep data
We keep request data and files for as long as needed to provide the service and follow up our relationship with you, and as required by professional and legal rules for accounting work. We delete what is no longer needed when the need ends or when you ask.
Your rights and how to ask for correction or deletion
At any time you can ask to see your data, correct it, download a copy, withdraw your consent to marketing messages, or delete your account with all related analyses, requests and files. Write to us from your registered e-mail at info@trustfins.org or on WhatsApp 0599371188, and we will carry out your request within 14 days.
What we never ask for
We never ask for your TRUST account password, card numbers or bank account passwords — not on the website, by phone or on WhatsApp. If you receive a message asking for this in TRUST’s name, do not respond and let us know.
Browser storage and analytics
The site stores in your browser what is needed to keep you signed in, and stores for the session only the visit source described above. We use Cloudflare Web Analytics to see the number of visits, the most-read pages and the sites visitors came from, in aggregate only. It uses no cookies, does not track you across sites and does not build a profile of you. We use no advertising tracking, and we send no names, phone numbers, e-mails, financial data or files to the analytics tool.
Changes to this policy
We may update this policy when our services or providers change. The date of the last update appears at the top of the page, and we will tell account holders about any material change by e-mail.