Data Controller: CripeHub Solutions LLC, United States
1. Data Collected
Account/Profile: Name, email, business details, IP address. Content: Support messages, claim and profile submissions. Technical: Cookies, device info, browser type, analytics. No sensitive data (race, health, biometrics). We do not host user-submitted reviews — Trust Duck Scores are calculated from publicly available external signals (external review platforms, LinkedIn, web presence).
2. Legal Bases (GDPR)
- Contract performance (profile claims, support)
- Legitimate interests (fraud prevention, analytics, sanctions compliance)
- Consent (non-essential cookies)
3. Purposes
- Provide Services (scoring, profile claims, support)
- Fraud and abuse detection
- Legal compliance (sanctions, FTC, counter-terrorism)
- Analytics improvement
4. Sharing
Service Providers (U.S.-based): Vercel, Cloudflare, Google Analytics. Legal: Courts, regulators, law enforcement. No data sales.
5. International Transfers (GDPR)
EU/UK data transfers to the U.S. use Standard Contractual Clauses (SCCs) per Art. 46 GDPR.
6. Your Rights
Access, correction, deletion, portability, and objection. Submit via legal inquiry. Response within 30 days. CCPA: no sales; opt-out honored. EU DPO: contact here.
7. Security & Retention
AES-256 encryption. Account and profile data retained permanently unless deletion is requested. Breaches notified per GDPR and CCPA.
8. Children
COPPA and GDPR-K compliant. No data collection from users under 16.