Privacy Policy
Last updated: September 2026
Who we are
VisibleTrust operates getvisibletrust.com. For customer account data we act as a controller. For data about companies and business contacts in customer workspaces, we collect public business information and make it available to customers, who use it under their own legal basis.
Account data
We store your email address, optional name, workspace memberships, sign-in times, IP address and browser type for security, and billing details handled by Stripe (we never see full card numbers). We use this to run and secure the service, bill you, and contact you about your account.
Business contact data
Our crawler reads public company websites and respects robots.txt. It may record business contact details that companies publish, such as a team member's name and job title or a published work email, together with the page it came from and when. We don't scrape LinkedIn profiles, buy contact lists, or infer personal details. Customers can only see contact details after revealing a company in a campaign.
AI processing
To draft an ICP or suggest companies we send the customer's own homepage text and ICP to an AI provider (Google Gemini or Anthropic) under their API terms. We do not send revealed contact details to AI providers, and model output is never stored as a fact about a company.
Sharing
We use processors to run the service: hosting, email delivery (Resend), payments (Stripe) and AI providers. We don't sell account data.
Retention
Account data is kept while your workspace is active and deleted within 30 days of closure, except where we must keep records (for example invoices). Sign-in links expire after 15 minutes; sessions after 14 days of inactivity.
Your rights
You can access, correct, export or delete your data. If your details appear in our index because a company published them and you want them removed, email privacy@getvisibletrust.com with the page URL and we will suppress them.
Security
Data is encrypted in transit. Workspaces are isolated at the database level with row-level security, and access to personal data is logged.