TrustViews Data Processing Agreement (DPA)
Last updated: January 3, 2026
This Data Processing Agreement ("DPA") is between Trustviews ("TrustViews", "we", "us") and you, the customer. It forms part of our Terms of Service and governs how we handle personal data on your behalf.
1. Key terms (plain English)
- Controller – That's you. You decide what data to collect and why (your website, your traffic).
- Processor – That's us, TrustViews. We only process data to provide you with our service.
- Subprocessor – Vendors we use to help deliver TrustViews (e.g., hosting / infrastructure providers like Laravel Cloud).
2. Scope of processing
- When you use TrustViews, we only record whether a website (or specific page) was loaded and then increase a simple counter (+1) for that load. We do not collect any user analytics with this.
- TrustViews does not collect visitor-level personal data or behavioural information such as IP address, browser, device, user agent, or identifiers.
- TrustViews does not use cookies, localStorage, fingerprinting, or any other tracking technology on visitors' devices.
- Data is processed solely to provide you with aggregated counts and historical statistics in your TrustViews dashboard.
- We do not use your data for our own marketing, profiling, or to build advertising audiences, and we do not sell or share your data with third parties, except subprocessors necessary to run the service.
3. Data retention
- Your account-related data (e.g., your email, workspace, and project configuration) is stored as long as your account is active, or as required for legitimate business or legal purposes.
- Aggregated counters and related metrics are retained for historical purposes in your dashboard so you can see long-term trends over time.
- You can request deletion of your account and associated data at any time, and we will delete or irreversibly anonymise data where legally and technically possible, subject to any retention obligations we may have.
4. Subprocessors
- To provide TrustViews, we currently use Laravel Cloud as infrastructure / hosting provider. Laravel Cloud may in turn rely on its own subprocessors to deliver hosting and related services.
- These subprocessors only process data to the extent necessary to provide infrastructure and related services to TrustViews.
- If we add or replace subprocessors in a way that materially affects personal data processing, we will update this page or our legal pages accordingly.
5. International data transfers
- TrustViews is operated in a way that does not require transferring EU/EEA visitors' personal data outside the EU/EEA, because TrustViews does not collect visitor-level personal data.
- To the extent any account-related personal data (e.g., your login email) is processed or stored using infrastructure in other countries, we will ensure adequate safeguards are in place in line with applicable data protection law (such as GDPR).
6. Security measures
TrustViews implements appropriate technical and organisational measures to protect data, including:
- Encryption in transit via HTTPS to protect data between your browser and our servers.
- Access controls so only authenticated users can access their own dashboards and projects.
- Logical separation of customer data in our systems.
- Regular backups of critical systems to reduce the risk of accidental data loss.
- Use of reputable hosting and infrastructure providers (such as Laravel Cloud) with their own security and compliance practices.
7. Roles and responsibilities
Your responsibilities (Controller):
- Ensure you have a lawful basis under applicable law (e.g., GDPR) to use TrustViews on your websites.
- Inform your users appropriately in your privacy policy about the use of TrustViews (including that it uses a simple load counter without cookies or visitor profiles).
- Handle data subject requests that you receive from your users (access, deletion, etc.), and inform us if you need our reasonable assistance.
Our responsibilities (Processor):
- Process data only to provide TrustViews and only in accordance with your documented instructions (this DPA and our Terms).
- Keep data secure and confidential, and ensure persons authorised to process data are under appropriate confidentiality obligations.
- Assist you, where reasonably possible, with data protection impact-related needs (e.g., responding to data subject requests that involve the data we process for you).
- Notify you without undue delay in case of any data breach affecting data processed for you, and cooperate as reasonably required by law.
8. Governing law
This DPA is governed by the laws of France, and any disputes arising out of or in connection with it will be subject to the exclusive jurisdiction of the competent courts in France.
By using TrustViews, you agree to this DPA as part of our Terms of Service.
Questions about this DPA? Contact: [email protected]
