Privacy Notice

This Privacy Notice explains how Traustis, LLC, a Washington limited liability company (“Traustis,” “we,” “us,” or “our”), collects, uses, discloses, and otherwise processes personal information when you visit our websites, contact us, use our products and services, attend an event, or otherwise interact with us (collectively, the “Services”).

If you use the Services for an organization, that organization may be the controller or business for information it submits to the Services. In that case, we generally process that information as a service provider or processor under the organization’s instructions and applicable agreement. Direct privacy requests about Customer Data should first be sent to the relevant organization.

1. Scope and roles

This Notice applies to personal information processed by Traustis as a controller or business—for example, website visitor, prospect, account-administrator, and support-contact information. It does not replace any data processing agreement (“DPA”), customer contract, or other written terms that govern Traustis’s processing of Customer Data. If there is a conflict, the DPA or applicable customer agreement controls.

2. Information we collect

Category	Examples	Why it may be collected
Contact and account information	Name, business email, employer, role, phone number, account credentials	Provide accounts, respond to inquiries, administer subscriptions, and support users.
Customer-provided service data	Supplier or entity names, search inputs, uploaded documents, investigation notes, and authorized user activity	Deliver requested investigations, scores, monitoring, and related service functionality.
Usage and technical information	IP address, device/browser details, pages or features used, log records, timestamps, and diagnostic data	Secure, operate, troubleshoot, and improve the Services.
Communications	Messages, surveys, feedback, support tickets, and meeting information	Respond to you, improve our Services, and maintain business records.
Marketing preferences	Newsletter subscription, event registration, and communication preferences	Send requested communications and measure engagement.

3. Sources of information

We may collect information directly from you, from your organization and its authorized users, automatically through the Services, from service providers, and—where the Services support entity research—from public records and third-party data providers.

4. How we use information

We use personal information to: provide, maintain, personalize, and support the Services; authenticate users and prevent fraud or misuse; conduct requested supplier or entity diligence; communicate about accounts, security, changes, and support; process transactions; comply with law and enforce agreements; analyze service performance; and send marketing communications where permitted.

5. Legal bases for processing

Where a data-protection law requires a legal basis, we process personal information as necessary to perform a contract; to comply with legal obligations; for our legitimate interests in operating, securing, and improving the Services; with consent where required; or as otherwise permitted by law.

We may disclose personal information to service providers that help us host, secure, analyze, support, communicate about, and operate the Services; to data providers and integration partners as necessary to deliver the requested Service; to your organization and authorized users; to professional advisers; in connection with a corporate transaction; and to government authorities or other parties where required by law or necessary to protect rights, safety, and security.

7. AI and automated processing

Some Services use automated systems, including artificial intelligence, to organize information, identify patterns, summarize material, prioritize review, or generate scores and findings. These tools support business due diligence; they are not intended to make solely automated decisions that produce legal or similarly significant effects about individuals. Customers must use appropriate human review before acting on Outputs.

We may use de-identified, aggregated, or otherwise non-identifying service telemetry to maintain, secure, and improve the Services, subject to applicable law and our contracts.

8. Cookies and analytics

We and our service providers may use cookies, pixels, SDKs, local storage, and similar technologies to remember preferences, keep the Services secure, understand website performance, and—if enabled—measure marketing. You can manage certain cookies through your browser settings and, where available, our Cookie Settings. Blocking some technologies may affect functionality.

9. Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Notice, including to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, and maintain security records. Retention depends on the nature of the information and our legal and operational requirements.

10. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information. No system is completely secure, and we cannot guarantee absolute security. You are responsible for using strong credentials, protecting access to your account, and notifying us of suspected unauthorized activity through our Contact page.

11. International transfers

Traustis may process information in the United States and other countries where we, our affiliates, or service providers operate. Those locations may have data-protection laws that differ from the laws where you reside. Where required, we use recognized transfer mechanisms and safeguards for international transfers.

12. Your privacy rights

Depending on where you live and our role, you may have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent; to opt out of certain processing; and to complain to a privacy regulator. To exercise a right, submit a request through our Contact page and identify it as a “Privacy Request.” We may need to verify your identity and authority before responding. Authorized agents may submit requests where permitted by law.

For Customer Data processed on behalf of a Customer, we will assist the Customer as required by the applicable agreement and law. If you are in the EEA or UK, you may also complain to the supervisory authority where you live or work, or where you believe an infringement occurred.

13. Children

The Services are not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact us through our Contact page so we can take appropriate action.

14. Changes and contact

We may update this Notice from time to time. We will post the updated version and revise the “Last updated” date; for material changes, we will provide additional notice when required by law.

For questions or privacy requests, contact Traustis, LLC through our Contact page or by mail at Bellevue, Washington, United States.

This Notice should be read with the Terms of Use, Cookie Settings, applicable order form, and any executed DPA.