Last updated: January 07, 2026
This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our website located at https://trustedhumans.ai and related services (the "Service").
The Data Controller responsible for processing your personal data is:
References to "we," "us," "our," or "Trusted Humans" throughout this Privacy Policy shall mean the above-identified entity.
We process your personal data in accordance with:
For the purposes of this Privacy Policy:
When you register for an account, subscribe to our services, or contact us, we may collect:
When you access our Service, we automatically collect certain technical information:
We may receive personal data from third parties, including:
As part of our verification and trust certification services, we scan publicly accessible websites and URLs submitted to our platform. During this process, we may incidentally collect and process personal data that is publicly available on these websites, including:
We process this data based on our legitimate interest (Article 6(1)(f) GDPR) in providing trust verification services that help reduce fraud, increase transparency, and enable informed decisions about AI usage in online content. We have conducted a documented balancing test (legitimate interest assessment) to ensure that our interests do not override the fundamental rights and freedoms of the data subjects.
Our legitimate interest assessment considers the following factors:
Data collected during website scans is retained as follows:
We process your personal data for the following purposes, based on the corresponding legal grounds under Article 6 of the GDPR:
| Purpose | Legal Basis (GDPR Art. 6) |
|---|---|
| Provision and management of the Service | Performance of contract (Art. 6(1)(b)) |
| Processing payments and invoicing | Performance of contract (Art. 6(1)(b)) |
| User account management | Performance of contract (Art. 6(1)(b)) |
| Customer support | Performance of contract (Art. 6(1)(b)); Legitimate interest (Art. 6(1)(f)) |
| Service-related communications | Performance of contract (Art. 6(1)(b)) |
| Marketing communications | Consent (Art. 6(1)(a)) |
| Service improvement and analytics | Legitimate interest (Art. 6(1)(f)) |
| Fraud prevention and security | Legitimate interest (Art. 6(1)(f)) |
| Compliance with legal obligations | Legal obligation (Art. 6(1)(c)) |
| Defense of legal claims | Legitimate interest (Art. 6(1)(f)) |
| Website scanning and AI content verification | Legitimate interest (Art. 6(1)(f)) |
Where we rely on legitimate interests as a legal basis, we have conducted and documented a balancing test (legitimate interest assessment) to ensure that your fundamental rights and freedoms do not override our interests. These assessments are reviewed periodically and updated when our processing activities change. You may request information about our balancing tests by contacting us using the details provided in Section 16.
We use cookies and similar tracking technologies (such as pixels, local storage, and web beacons) to collect and store information about your interactions with our Service. Cookies are small text files placed on your device when you visit our website.
We classify cookies into the following categories: strictly necessary cookies (essential for the Service to function), functional cookies (for enhanced features and personalization), analytics cookies (to understand usage patterns), and marketing cookies (for relevant advertising, placed only with your consent).
In accordance with EU Directive 2002/58/EC (ePrivacy Directive) as transposed by Portuguese Law No. 41/2004, we obtain your consent before placing non-essential cookies on your device. You may manage your cookie preferences at any time through our cookie consent banner.
For comprehensive information about the specific cookies we use, their purposes, durations, and how to manage your preferences, please refer to our Cookie Policy.
We may share your personal data with the following categories of recipients:
Our primary service providers include:
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When such transfers occur, we ensure appropriate safeguards are in place in accordance with Chapter V of the GDPR, including:
You may request a copy of the safeguards we have implemented by contacting us at the address provided below.
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. The retention period depends on the context of the processing and our legal obligations:
Upon expiration of the applicable retention period, personal data will be securely deleted or anonymized.
As a Data Subject, you have the following rights under the GDPR. These rights are not absolute and may be subject to limitations under applicable law:
You have the right to obtain confirmation as to whether we process your personal data and, if so, to access that data along with information about the processing.
You have the right to request correction of inaccurate personal data and to have incomplete data completed.
You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or when you withdraw consent.
You have the right to request restriction of processing in certain circumstances, such as when you contest the accuracy of the data or object to processing based on legitimate interests.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller, where processing is based on consent or contract and carried out by automated means.
You have the right to object to processing based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will cease processing your data for that purpose.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, except where such processing is necessary for a contract, authorized by law, or based on explicit consent.
Where processing is based on consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.
To exercise any of these rights, please contact us using the contact details provided in Section 15. We will respond to your request within one (1) month of receipt. This period may be extended by two (2) further months where necessary, taking into account the complexity and number of requests.
We may request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights).
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, in accordance with Article 32 of the GDPR. These measures include:
Despite our efforts, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security of your personal data.
In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of natural persons, we will notify the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados - CNPD) within 72 hours of becoming aware of the breach, in accordance with Article 33 of the GDPR.
Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay, in accordance with Article 34 of the GDPR, unless one of the exceptions applies.
Our Service is not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and you become aware that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from a child under 16 without verification of parental consent, we will take steps to delete that information.
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by:
We encourage you to review this Privacy Policy periodically. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of your personal data infringes the GDPR.
The supervisory authority in Portugal is:
If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us at:
We will endeavor to respond to all legitimate requests within one (1) month. Occasionally, it may take us longer if your request is particularly complex or you have made multiple requests.