Last Updated: October 30, 2026

Privacy Policy

This Privacy Policy explains how TrustShop Technology Co., Ltd. (“Trust1“, “we“, “us” or “our“) collects, uses, stores, shares and protects personal data when you use our Shopify apps TrustShop (product reviews) and WaSend (WhatsApp marketing), our website trust1.io, and related services (the “Services“).

It applies to three groups of people:

• Merchants: businesses that install our apps, and their staff.
• Customers: shoppers, reviewers and WhatsApp contacts of those merchants’ stores.
• Visitors to trust1.io.

This page also answers the questions merchants most often ask during security and privacy reviews:

• what data we take from Shopify
• where it is stored
• who we share it with
• how we protect it
• how long we keep it
• which permissions we use and why
• what happens if there is an incident

The terms that govern your use of the Services, including our Data Processing Addendum, are in our Terms of Service.

At a Glance

• Only what features need. Our apps read store data only through the Shopify permissions you approve. Optional permissions are requested only when you turn on the feature that needs them. See Section 5.
• Used only to provide the Services. We do not sell or share personal data for advertising, we do not use your Customers’ data for our own purposes, and we do not use it to train AI models.
• Where it lives. TrustShop’s databases are hosted by DigitalOcean in Sydney, Australia, and WaSend’s in San Francisco, United States. Files and storefront services run on Cloudflare. Our team works from Viet Nam. See Section 6.
• Protected. Data is encrypted in transit and at rest, staff access is limited and logged, and our internal tools require multi-factor authentication. See Section 8.
• Deleted when you leave. Shopify sends us a deletion request 48 hours after you uninstall, and we permanently delete your store’s data within 30 days of it. Backups expire within a further 14 days. See Section 9.
• Told quickly. If a breach affects your data, we notify you within 72 hours of confirming it. See Section 10.

1. Who We Are and Our Role

TrustShop Technology Co., Ltd. (Công ty TNHH Công nghệ TrustShop) is a company incorporated in Viet Nam that does business as Trust1.

• Enterprise registration number: 3502535389
• Registered office: 145/3A1 Tien Cang Street, Rach Dua Ward (formerly Thang Nhat Ward, Vung Tau City), Ho Chi Minh City, Viet Nam
• Privacy contact: [email protected]

We play two roles:

• Processor for Customer data. When our apps process Customers’ data on a merchant’s behalf, the merchant is the controller and Trust1 is the processor (or “service provider”). We process that data only on the merchant’s instructions, under the Data Processing Addendum in our Terms of Service. If you are a Customer, please contact the store you bought from to exercise your privacy rights. We will help the store respond.
• Controller for our own data. For merchant account data (for example the store owner’s name and email) and for visitor data on trust1.io, Trust1 is the controller.

2. Information We Collect

2.1 Merchant account information (both apps)

When you install an app, Shopify shares basic information about your store, and we collect more as you use the app:

• Store name, domain, country, currency, time zone and Shopify plan.
• The store owner’s name, email and phone number, as provided by Shopify.
• For WaSend, the staff members who use the app: Shopify staff ID, name, email and avatar.
• Your app settings, plan, usage (such as emails or messages sent) and billing status.
• Your messages to our support team, and how you use the app’s admin pages.

We do not receive or store payment card details. All app charges are processed by Shopify Billing.

2.2 TrustShop: data received from Shopify

2.3 TrustShop: data collected on your storefront

• Reviews and questions. We collect what the reviewer submits and record a few details to detect spam and fake reviews.
  • Submitted: name, email, rating, review or question text, photos and videos.
  • Recorded: whether the reviewer is a verified buyer, their country, IP address, and browser and device type.
  • Voting a review “helpful” or reporting it records the voter’s IP address.
  • Email verification codes record the IP address and browser.
• Published reviews are public. Reviews, together with the reviewer’s display name and media, are published in the store and in Shopify product data. They may also appear in search results and in Google Shopping review feeds. Reviewers choose how their name is displayed (full name, first name, initials or anonymous) where the store allows it. Emails and IP addresses are never published.
• Review request emails. Delivery, open, click, bounce, complaint and unsubscribe events.
• Review rewards (optional). The discount code issued and the reviewer’s email.
• Referrals (optional).
  • The advocate’s name, email and phone, and the referred friend’s name, email and phone.
  • To prevent referral fraud: the friend’s IP address, browser, a device fingerprint and a visitor ID.
• UGC (optional). If you connect Instagram or TikTok, we collect the public posts you choose to show: the author’s name, username, avatar, profile link, country and caption.
• Storefront analytics. Our web pixel records page views, widget impressions, add-to-cart events, checkout starts and completed orders (order ID, totals and items). With each event it records the Shopify client ID, a session ID, the page URL, and the browser and operating system. The pixel does not collect names, emails or phone numbers.

2.4 WaSend: data received from Shopify

2.5 WaSend: data from WhatsApp and your storefront

• WhatsApp account. Your WhatsApp Business Account ID, phone number ID, business phone number, and the access token Meta issues when you connect through Embedded Signup.
• Contacts and consent.
  • The WhatsApp phone number and profile name.
  • The opt-in record: consent status, where and when consent was collected, and the exact consent text shown.
  • Opt-outs and blocks.
• Messages.
  • Messages and templates sent and received, with delivery and read statuses and errors.
  • Media your Customers send, such as images, documents and voice notes.
  • If you turn on reply forwarding, Customer replies are also emailed to you.
• Click-to-WhatsApp ads. For conversations that start from a Meta ad: the ad ID, ad text and media, and click ID. If you connect your ad account, ad performance figures.
• Storefront widgets.
  • The phone-number collector, back-in-stock form and chat button collect the phone number, country and consent.
  • The back-in-stock form also collects name and email.
  • Each submission records the product and page, and a random visitor ID.
  • Widget analytics are recorded only when the shopper’s consent settings allow analytics.
• Web pixel. The WaSend pixel records add-to-cart, remove-from-cart, checkout-started and checkout-completed events. Each event includes cart contents, page URL and browser details. Where the shopper is known or entered them at checkout, it also includes the shopper’s customer ID, email and phone. We use these events to detect abandoned carts and attribute sales to messages.

2.6 Browser extensions

• TrustShop review importer. Imports publicly visible product reviews from marketplace pages you open (such as AliExpress or Amazon) into your TrustShop account, and stores your login to link the extension to your store.
• Trust1 WhatsApp Bulk Messenger (WaSend). Sends messages from your own WhatsApp Web session. WaSend passes it the phone numbers and message text for a send. The extension reports back whether each message was sent.

2.7 Website visitors

• trust1.io uses Google Tag Manager and Google Analytics to measure visits. These tools collect your IP address, device and browser type, pages viewed and referring site.
• If you contact us through a form or by email, we keep your name, email, company and message.
• If you reach us through a Trust1 partner link, a cookie records the referral (see Section 14).

2.8 What we do not collect

• Payment card or bank details of merchants or Customers.
• Customer account passwords, or your Shopify or Meta login passwords.
• Government ID numbers.
• Sensitive data such as health or religious information, unless someone chooses to write it in a review or message. Merchants can archive such reviews, and our Terms prohibit using the Services to collect it.

Providing store data is necessary to use our apps. Without it, the features you turn on cannot work. Customers decide whether to write reviews, opt in to messages, or provide their contact details in widgets.

3. How We Use Information and Our Legal Bases

As a processor, we use Customer data only to provide the features the merchant turns on, to secure and support the Services, and as the merchant otherwise instructs. The merchant determines the legal basis for that processing. Typical examples are consent for WhatsApp marketing and legitimate interests for post-purchase review requests.

As a controller, we use data for the purposes below:

Where Viet Nam’s personal data protection law applies to our own processing, we rely on your consent, given when you install our apps or contact us, or on the other legal grounds that law provides.

AI features (TrustShop). When you use AI features, the relevant data is sent to OpenAI or Google Cloud Translation to generate the result. These features include:

• suggested replies to reviews
• AI answers to questions
• the “write with AI” review helper
• translations
• captions

The data sent is the review text, rating, reviewer first name, product title and, where needed, review images. These providers may not use it to train their models. OpenAI may keep API data for up to 30 days to monitor abuse, and then deletes it. We do not train AI models on your data.

What we do not do:

• We do not sell personal data, and we do not share it for cross-context behavioral advertising.
• We do not use Customer data for our own marketing or for anything other than providing the Services to the merchant who installed our app.
• We do not combine one merchant’s Customer data with another merchant’s, or build profiles of Customers across stores.

4. Data from Meta, Google and Other Platforms

4.1 Meta (WhatsApp, Facebook Login for Business, Instagram)

What we receive and how we use it. When you connect WhatsApp to WaSend, or Instagram to TrustShop, we receive data from Meta’s platforms. This includes:

• your WhatsApp Business Account and phone number details
• message content and statuses
• ad referral data
• the Instagram posts you choose to show

We use this data only to provide the features you turn on. This follows the Meta Platform Terms. We do not sell it, use it for advertising, or transfer it except to the service providers listed in Section 7.

How to delete data received from Meta. You can do any of the following:

1. Disconnect WhatsApp or Instagram in the app’s settings.
2. Uninstall the app from Shopify admin.
3. Remove our app in Meta Business Settings → Integrations → Connected apps.
4. Email [email protected] with the subject “Data deletion”.

We delete the data within 30 days and confirm by email on request. A WhatsApp contact who wants their messages deleted should contact the store they messaged. The store can delete the contact in WaSend or ask us to do it.

4.2 Google

TrustShop can connect to your Google Business Profile to import your Google reviews.

We use Google data only to import and display the reviews you choose. We do not use it for advertising and do not let humans read it except with your consent, for security, or as required by law. You can revoke access at any time at myaccount.google.com/permissions or by disconnecting the integration in TrustShop.

4.3 TikTok

If you connect TikTok to TrustShop’s UGC module, we access the public videos and profile information you choose to display, and store an access token. We use them only to show that content in your store. You can revoke access by disconnecting TikTok in TrustShop or in your TikTok account settings. Stored content is then deleted on the schedule in Section 9.

5. Shopify Permissions We Request

A Shopify app can only read or change store data that the merchant approves through access scopes.

Because our apps read customer names, emails, phone numbers and addresses, Shopify requires us to meet its protected customer data requirements. We comply with those requirements, and Shopify has approved our apps for this access.

5.1 TrustShop

5.2 WaSend

When you connect WhatsApp, Meta asks you to grant WaSend the whatsapp_business_management, whatsapp_business_messaging and business_management permissions. WaSend uses them to manage your phone number and templates and to send and receive messages.

5.3 If you use TrustShop only for reviews

Many merchants use TrustShop only to collect reviews, display them and send review request emails. For those features:

• Used:
  • read_orders, read_all_orders, read_fulfillments, read_customers
  • write_products, read_themes, write_app_proxy
  • write_pixels and read_customer_events, for review analytics
  • the customer_read_* permissions, only if you add the review button to customer accounts
• Not used unless you turn on the related feature:
  • write_discounts: review rewards, Upsells, Referrals.
  • write_metaobjects and write_metaobject_definitions: UGC.
  • read_locales: language recommendations.
  • All optional permissions in the table above.

If those features are off, TrustShop does not create discounts, metaobjects or customer changes in your store.

5.4 Reducing or revoking permissions

• Optional permissions are requested only when you turn on the feature that needs them. You can decline them, and the app keeps working without that feature. To withdraw an optional permission you already granted, turn the feature off and contact us. We will revoke it through Shopify’s API and confirm by email.
• Required permissions are granted by Shopify as one set at install. Shopify does not let a merchant remove them one by one for a single store. Our apps call the related Shopify APIs only when the matching feature is in use.
• Revoke everything at any time by uninstalling the app from Shopify admin → Settings → Apps. Access ends immediately and the deletion schedule in Section 9 starts. For WaSend, you can also remove access in Meta Business Settings (see Section 4.1).

6. Where Data Is Stored and Processed

WhatsApp messages are also processed by Meta, and by 360dialog or Gupshup if your number is connected through them. IP-to-country lookups (ip-api) run on the provider’s servers in several countries. Data from Shopify originates on Shopify’s own infrastructure.

7. Subprocessors and Sharing

We share personal data only with the service providers below. Each one receives only what it needs for its function. Each is bound by a written agreement, such as a data processing agreement or equivalent terms, that requires it to protect the data and use it only to provide its service to us.

Changes to this list. We notify merchants by email or in the app at least 30 days before adding or replacing a subprocessor that processes Customer data. Merchants can object as described in our Terms of Service.

Integrations you choose to connect. Some features send data to services you connect yourself. These services handle data under their own terms:

• Google Business Profile
• Instagram and TikTok
• Google Merchant Center (review feeds that include reviewer display names)
• Shopify Flow
• review apps you import from, such as Judge.me, Loox, Yotpo, Okendo and Stamped

Between our apps. TrustShop and WaSend are both operated by Trust1.

• If you use both, WaSend can include TrustShop review links in your messages.
• We share store-level information (domain, plan and a hashed owner email) between our apps and our partner program to attribute installs.
• We do not move Customer data from one app to the other unless you connect them.

Legal and corporate. We may disclose information in these cases:

• if required by law or a valid legal order, under the safeguards in our Terms
• to protect the rights and safety of our users or others
• to a successor in a merger or acquisition, who remains bound by this Policy

8. How We Protect Data

The measures below are our technical and organizational security measures. They form Annex B of our Data Processing Addendum.

Encryption

• All traffic to our apps, APIs, widgets and webhooks uses HTTPS with TLS 1.2 or higher. TrustShop’s API servers also enforce HSTS.
• Connections to our databases use TLS.
• Databases, backups and file storage are encrypted at rest by our hosting providers.
• OAuth tokens for connected services (Instagram, TikTok and Google Business Profile) are additionally encrypted at the application level with AES-GCM.

Access control and authentication

• Access to production systems is limited to authorized engineers who need it for their role and is removed when they leave.
• Our internal admin console is invite-only, restricted to company accounts, and uses role-based permissions.
• Support staff view a store’s app data only to resolve an issue.
• Multi-factor authentication (authenticator app or passkey) is mandatory for our internal admin console and CRM, and required on our cloud hosting, code repository and company email accounts.
• Staff accounts must use strong, unique passwords stored in a password manager.

Application security

• Every Shopify webhook and app proxy request is verified with Shopify’s HMAC signature, and every admin request with a Shopify session token.
• Requests are rate-limited per store and per IP address.
• Each store’s data is separated, and every request is scoped to the store that made it.

Logging and monitoring

• Changes made by staff through our internal admin console are recorded in an audit log showing who did what and when.
• We keep application, webhook delivery and error logs, and monitor them for errors and unusual activity.

Environments and data loss prevention

• Development, staging and production run on separate infrastructure with separate credentials.
• Production Customer data is not copied to development or test environments.
• Staff do not keep local copies of production data.

Backups and resilience

• Our database provider takes encrypted daily backups, kept for up to 7 days.
• Our internal CRM is backed up nightly, with backups kept for 14 days.

People and process

• Staff are bound by confidentiality obligations and receive security and privacy guidance when they join.
• We apply security updates to our dependencies and infrastructure, and follow a written incident response process (see Section 10).

Certifications

• Trust1 has not yet completed a SOC 2 or ISO 27001 audit.
• Our main infrastructure providers are independently certified: DigitalOcean, Cloudflare and Amazon Web Services all hold SOC 2 Type II and ISO/IEC 27001 certifications.
• We are happy to complete your security questionnaire. Contact [email protected].

No system is perfectly secure, but we work continuously to protect your data and to respond quickly if something goes wrong.

9. Data Retention and Deletion

We keep personal data only as long as needed for the purposes in this Policy.

9.1 Customer data while the app is installed

Customer data is kept while the app is installed, so your reviews, contacts and history stay available. Merchants can delete data sooner:

• Delete imported reviews, questions and contacts in the app at any time.
• Archive reviews written by Customers.
• Ask us to delete specific records.

A Customer can delete their own review from their customer account.

Some technical data is kept for shorter periods:

9.2 After you uninstall

1. Your app access token is revoked, and our web pixel and storefront access are removed.
2. Shopify sends us a store deletion request (shop/redact) 48 hours after you uninstall.
3. Within 30 days of that request, we permanently delete your store’s data from our live systems. This includes reviews, questions, photos and videos, orders, customers, contacts, messages, email logs, settings and storefront analytics.
4. Deleted data remains in encrypted backups until they expire, at most 14 days later. We do not restore deleted data from backups. If we ever need to restore a backup to recover from an incident, we delete the data again before the system goes back into service.

If you reinstall within this window, your data may still be available. After it, you start fresh. You can export reviews from the app, or ask us for an export, before deletion (see our Terms).

9.3 Customer deletion requests

When Shopify sends a Customer deletion request (customers/redact) for your store, we delete that Customer’s personal data within 30 days. This includes their name, email, phone, address, IP address, messages and contact record. Reviews they wrote are anonymized or deleted.

9.4 Our own records (Trust1 as controller)

9.5 Confirmation of deletion

After we delete a store’s data, the store owner can request written confirmation at [email protected]. We reply with the date of deletion and the categories of data deleted.

10. Security Incidents and Breach Notification

We maintain a written incident response process for events that affect the confidentiality, integrity or availability of the data we hold. It defines severity levels, roles and escalation paths.

1. Detect and triage. Alerts, error monitoring, provider notices and reports from merchants or researchers are triaged by our engineering team as soon as they arrive.
2. Contain. We act immediately to stop the incident, for example by revoking credentials, rotating keys, blocking access or disabling the affected feature.
3. Investigate. Using our access and operation logs, we determine what happened, which stores and data are affected, and the root cause. We preserve evidence.
4. Notify. If a personal data breach affects your store’s data, we notify the store owner’s email address on file without undue delay and in any case within 72 hours of becoming aware of it. We send updates as the investigation progresses, and also notify Shopify or Meta where their partner terms require it. Our notice describes:
   • what happened
   • the categories and approximate number of people and records involved
   • the likely consequences
   • what we have done and what we recommend you do
   • a contact person for the incident
5. Recover. Where data was lost or corrupted, we restore it from backups as far as possible, and re-sync from Shopify any data that can be recovered from there.
6. Review. We document the incident and fix the cause. Affected merchants can ask for a summary of the root cause and the remediation.

We help affected merchants meet their own obligations at no extra charge where the incident was caused by us. This includes:

• providing the information needed for notices to regulators or Customers
• answering questions from your security team
• exporting data relevant to your investigation

Security contact. To report an incident or a vulnerability, email [email protected] with “Security” in the subject line. We acknowledge reports within one business day. We welcome responsible disclosure and will not take action against researchers who act in good faith, avoid harming data or users, and give us reasonable time to fix the issue.

11. Automated Decision-Making

Our apps use automated tools to help merchants, and the merchant stays in control of each one:

• Review moderation. Reviews can be published automatically depending on the star ratings the merchant selects, or held for approval if they contain blocked words. A merchant can publish, archive or restore any review manually.
• Spam and fraud checks. Automated checks flag likely spam reviews, risky email addresses and suspicious referrals. A flagged referral reward may be held for the merchant to review.

None of these tools makes decisions that have legal or similarly significant effects on individuals. If you are a Customer and think an automated decision affected you, for example a review that was not published or a reward that was withheld, contact the store. The store can review it manually, and we will help.

12. Your Rights and Choices

Depending on where you live, you may have the right to:

• access your personal data
• correct it
• delete it
• receive a copy in a portable format
• restrict or object to its processing
• withdraw consent at any time

These rights exist in places such as the EEA, the UK, Switzerland, Japan, Australia, Brazil, Viet Nam and several U.S. states.

• Merchants and visitors. Email [email protected]. We respond within 30 days (or sooner where the law requires) and may ask you to verify your identity. You may use an authorized agent where the law allows. If we decline your request, you may appeal by replying to our decision with “Appeal”. We will respond within 45 days.
• Customers of a store. Contact the store, because the store decides how your data is used. You can also email us, and we will forward your request to the store and help it respond. Requests that Shopify sends on a store’s behalf are handled within 30 days:
  • for a data request (customers/data_request), we send the store owner the data we hold about that Customer
  • for a deletion request (customers/redact), we delete it as described in Section 9
• Unsubscribe. Every review request email has an unsubscribe link. WhatsApp contacts can stop marketing messages by replying /unsubscribe or by blocking the store’s WhatsApp number.
• Complaints. You can complain to your local data protection authority. We would appreciate the chance to resolve your concern first.

We will not discriminate against you for exercising your rights.

13. Additional Information for U.S. Residents

This section supplements this Policy for residents of California and other U.S. states with comprehensive privacy laws. It covers personal information Trust1 handles as a business: merchant contacts and website visitors. For Customer data, we act as the merchant’s service provider.

• No sale or sharing. In the past 12 months we have not sold or shared personal information, including for cross-context behavioral advertising. We have no actual knowledge of selling or sharing personal information of consumers under 16.
• Sensitive information. We do not use or disclose sensitive personal information for purposes that require a right to limit.
• Opt-out signals. We honor Global Privacy Control (GPC) signals as a request to opt out of sale or sharing, although we do not sell or share.
• Retention. Retention periods are in Section 9.

14. Cookies and Similar Technologies

• Web pixels. Our web pixels run in Shopify’s sandbox. They follow the consent choices shoppers make in the store’s cookie banner, as reported by Shopify’s Customer Privacy API.
• App admin pages. In the app admin, Crisp, Sentry, Google Analytics, Microsoft Clarity (TrustShop) and Amplitude (WaSend) use cookies or local storage for support chat, error monitoring and product analytics.
• Your choices. Visitors to trust1.io can block or delete cookies in their browser settings, and opt out of Google Analytics with Google’s browser add-on. Shoppers can manage storefront tracking through the store’s cookie banner.

15. International Data Transfers

We are based in Viet Nam, and our infrastructure and subprocessors are in the countries listed in Section 6. Your data may therefore be transferred outside your country.

Where the law requires safeguards for these transfers, we rely on:

• the EU Standard Contractual Clauses (and the UK Addendum), which are incorporated into our Data Processing Addendum
• our subprocessors’ own transfer commitments
• the measures described in Section 8

For merchants in Japan. We take measures equivalent to those required under Chapter IV of the Act on the Protection of Personal Information (APPI) when you entrust us with personal information. Section 6 lists the foreign countries where personal data is stored and accessed. Information about the personal information protection systems of those countries is published by Japan’s Personal Information Protection Commission. On request, we provide the information you need to respond to Customers under Article 28 of the APPI.

16. Children’s Privacy

The Services are designed for businesses and are not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided personal data through a store that uses our apps, contact the store or us and we will help remove it.

17. Changes to This Policy

We may update this Privacy Policy as our Services, subprocessors or legal requirements change. The date at the top of this page shows when it last changed.

• For material changes, including a new subprocessor that will process Customer data, we notify merchants by email or in the app at least 30 days before the change takes effect.
• Previous versions are available on request.

18. Contact Us

TrustShop Technology Co., Ltd.
145/3A1 Tien Cang Street, Rach Dua Ward, Ho Chi Minh City, Viet Nam
Enterprise registration number: 3502535389
Privacy and security requests: [email protected]
Website: trust1.io