PrivacyPolicy

Introduction

Trust Corners (“Trust Corners”, “we”, “us”, or “our”) operates the trustcorners.sa website, the Trust Corners mobile app, and the Trust Corners Scanner app for iOS and Android (together, the “Services”). Trust Corners is a licensed digital verification and authentication platform, approved by the Saudi Ministry of Commerce under Commercial Registration No. 7014339019, providing verification services for websites, social media accounts, businesses, and other electronic accounts.

This Privacy Policy explains what personal data we collect through the Services, how we use and share it, how long we keep it, and the rights you have over it. By creating an account, submitting a verification request, or otherwise using our Services, you agree to the practices described in this Policy.

Information We Collect

We only collect the information necessary to operate the Services, verify accounts, and process payments. Depending on how you use Trust Corners, this may include:

• Account information: first name, last name, father's and grandfather's name (where applicable), username, email address, mobile number, country and city, and password (protected using industry-standard security measures).
• Verification and business data: Commercial Registration (CR) number, bank account/IBAN details, the electronic account(s) you are verifying (website, social media handle, phone number, email, or bank account), and any information you submit describing that account.
• Identity verification documents: a copy of your national ID or passport, a live selfie captured with your device camera for identity matching, national address documents, and, where you act on behalf of an owner, an authorization letter and the authorized person's details.
• Payment information: your chosen payment provider (Noon Payments or Moyasar), plan, amount, and a payment token used to process and, if you opt in, auto-renew your subscription. We do not store your full card number or CVV — these are collected and tokenized directly by our licensed payment processors.
• Communications: your name, email, nationality, and mobile number when you contact us through our Contact Us form.
• Technical data: device and browser information, IP address, pages visited, and app usage statistics, collected automatically through Google Analytics and similar tools.

Camera & Device Permissions (Mobile App)

Our iOS and Android apps may request the following device permissions. We only use them for the purpose described, and only while you actively use the related feature:

• Camera: to capture a live selfie during identity verification, and to scan Trust Corners QR codes where this feature is available in the app.
• Photos / file access: to let you upload identity documents, business certificates, or a company logo from your device.
• Push notifications (where enabled): to notify you about verification status updates, subscription renewals, and account activity.

We do not access your device location, contacts, or microphone.

Trust Corners Scanner App

Trust Corners Scanner is a separate, companion app that lets you scan a Trust Corners QR code, or a link, to instantly check whether it belongs to a verified account on the Trust Corners platform. It collects far less information than the main Trust Corners app:

• No account or sign-in is required to use the Scanner app.
• Scanned content: the QR code, link, or account identifier you scan or enter is sent to Trust Corners' servers only to check its verification status.
• Camera: used only to scan a QR code or capture an image of a link on your screen at the moment you use the scan feature — it does not run in the background and does not access your photo library.
• We do not keep a scan history tied to your identity. We may retain anonymized, aggregated logs of scan volume and results for a limited period for security, fraud prevention, and service improvement.

How We Use Your Information

We use the personal data described above to:

• Create and manage your Trust Corners account.
• Verify the identity of applicants and the authenticity of the electronic accounts, businesses, and documents submitted for authentication.
• Process payments and manage subscriptions, including optional auto-renewal.
• Issue and display the Trust Corners verification badge and QR code for approved accounts.
• Respond to enquiries submitted through our Contact Us form.
• Maintain the security of our Services, prevent fraud, and comply with legal and regulatory obligations, including those of the Saudi Ministry of Commerce.
• Analyze aggregated usage data to improve the website and mobile apps.

Legal Basis for Processing

We process personal data on the following legal bases, consistent with the Saudi Personal Data Protection Law (PDPL): your consent (for example, when you submit identity documents); the necessity to perform our contract with you (creating an account, verifying an electronic account, processing a subscription); and our legitimate interest or legal obligation, including compliance with Ministry of Commerce licensing requirements.

How We Share Your Information

We do not sell your personal data. We share information only where necessary, with:

• Payment processors — Noon Payments and Moyasar — to process transactions. Card details are submitted directly to these providers and are never stored on Trust Corners servers.
• Analytics and security providers — Google Analytics for usage analytics, and Cloudflare Turnstile to protect our forms from automated abuse.
• Service providers who host our infrastructure and store files/documents on our behalf, under confidentiality obligations.
• Government and regulatory authorities, including the Saudi Ministry of Commerce, where required by applicable law or a valid legal request.
• Other users, only to the extent you choose to make information public — for example, a verified account's name, rating, and QR code are shown publicly on its business profile page. You may opt in or out of publicly displaying your mobile number.

Cookies & Similar Technologies

We use a small number of cookies and local storage entries to operate the Services: an authentication session cookie, a subscription-status flag, and your language/theme preference. We also use Google Analytics cookies to understand how the Services are used.

You can control cookies through your browser settings. Disabling cookies may limit some features, such as staying signed in.

Data Retention

We keep your account information for as long as your account remains active, and for a reasonable period afterwards to comply with legal, accounting, and regulatory requirements.

Identity verification documents (ID, passport, selfie, and national address files) are permanently deleted 7 days after your electronic account is approved.

Payment card data is never stored by us; only a non-sensitive payment token is retained by our processor to support optional auto-renewal, which you may cancel at any time.

Data Security

We apply administrative, technical, and physical safeguards to protect your personal data, including encrypted transmission (HTTPS/TLS), access-controlled authentication sessions, and tokenized payment processing. No method of transmission or storage is completely secure, and we encourage you to use a strong, unique password.

Your Rights

Subject to applicable law, including the Saudi PDPL, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data, subject to our legal retention obligations.
• Withdraw consent at any time.
• Object to or restrict certain processing of your data.

To exercise any of these rights, contact us using the details in the Contact Us section below. We will respond within the timeframe required by applicable law.

Children's Privacy

Our Services are intended for individuals who have the legal capacity to enter into binding agreements under Saudi law. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

International Data Transfers

Some of our service providers (such as our payment processors, analytics, and security providers) may process data on servers located outside the Kingdom of Saudi Arabia. Where this occurs, we require appropriate safeguards to protect your data in line with applicable law.

Third-Party Links & Verified Accounts

Trust Corners verifies websites, social media accounts, and other electronic links belonging to third parties. Once you leave our Services to visit a verified account or external link, that party's own privacy policy applies — we are not responsible for the privacy practices of third-party websites or accounts.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated version on this page, and where changes are material, we will notify you through the Services.