Privacy Policy
Last updated: 2026-08-09
1. Controller and processor
Lampo & Co LLC, 4040 Broadway Street, 2nd Floor, San Antonio, TX 78209 operates TrustWarden. For account data we are the controller. For the data our customers publish and collect through their trust pages — subscriber addresses, gate entries and download logs — we process on the customer's behalf and instructions. Contact: support@trust-warden.com.
2. What we process, and why
| Data | Purpose | Retention |
|---|---|---|
| Account data: email address, password (stored as a scrypt hash, never in plain text), optional company name | Operating your account; authentication; account email such as address confirmation and password reset | Life of the account |
| Page content: your answers, subprocessor list, uploaded documents | Publishing your trust page as you direct | Until you delete it or your account |
| Gate entries and download logs: visitor name, organization, email, timestamps | The access records the page owner collects; processed on their behalf | Until the page owner deletes the page or account |
| Subscriber addresses and notice send logs | Delivering subprocessor notices for the page owner; their notification evidence | Until unsubscribed/removed; send logs kept as part of the record |
| Billing data: plan, subscription status, invoices | Billing. Card details go directly to Stripe; we never see or store card numbers | As required by tax and accounting law |
| Server logs: IP address, request path, timestamp, status | Security, debugging, rate limiting | 30 days |
3. What we do not do
No analytics scripts, no advertising trackers, no third-party cookies, no sale of data. We set strictly necessary cookies only: the session cookie that keeps you logged in, a short-lived form-security cookie on public forms, and — on trust pages with gated documents — the access cookie that remembers a visitor passed the gate.
4. Subprocessors
| Provider | Purpose |
|---|---|
| Stripe, Inc. | Payment processing and subscription billing |
| DigitalOcean, LLC | Hosting infrastructure (servers and backups) |
| Resend, Inc. | Email delivery (account email and subprocessor notices) |
5. Legal bases
Performance of a contract (providing the Service), legitimate interest (security, abuse prevention), legal obligation (billing records), and — for data processed on a page owner's behalf — their instructions under our terms.
6. Your rights
Subject to applicable law (including the GDPR where it applies), you can request access to, correction of, or deletion of your personal data, object to or restrict processing, and request portability. Email support@trust-warden.com. If your data was collected by one of our customers through their trust page (a gate entry or a subscription), we will refer your request to them, as they control that record. You may also lodge a complaint with your supervisory authority.
7. Changes
We will post changes on this page with an updated date; material changes will be flagged in the dashboard.