Legal

TrustRouting — Privacy Policy

Effective date: 12 January 2026

This Privacy Policy explains how ENQUIRELINK INC. (“Enquirelink”, “TrustRouting”, “we”, “us”, “our”) collects, uses, discloses, and protects information when you use the TrustRouting platform, including:

• the TrustRouting Android application/agent (“App” or “Android Agent”);

• the TrustRouting web interface / admin portal (“Admin Panel”);

• trustrouting.com and related websites, documentation, and services (collectively, the “Platform”).

If you do not agree with this Privacy Policy, do not use the Platform.

  1. WHO WE ARE (CONTROLLER / OPERATOR)

The TrustRouting Platform is owned and operated by:

ENQUIRELINK INC.

Registered in Ontario, Canada

Email: [email protected]

Website: https://trustrouting.com (the “Website”)

  1. IMPORTANT PRINCIPLES

2.1 Bring-your-own device & SIM. TrustRouting does not provide SIM cards, phone numbers, or “test numbers”.

2.2 No synthetic traffic generation. TrustRouting does not generate SMS, voice calls, or RCS traffic. The Platform collects and processes records observed on your linked device(s).

2.3 Dedicated test device recommended. Because the App may collect message and call content/metadata from the linked device, you should use a dedicated test device and SIM if you do not want personal, sensitive, or unrelated communications captured.

  1. INFORMATION WE COLLECT

We collect information in the following categories. Some data is collected automatically when you use the Platform; other data is collected when you provide it or when your device records it.

3.1 Account and identity information

• Email address (used for authentication and account administration)

• Magic-link authentication tokens / session information (to sign you in)

• Optional profile or organization information you provide (e.g., company name)

3.2 Billing and subscription information

• Subscription status, plan type, invoices, payment timestamps, and billing history

• Payment processing is handled by Stripe (or another payment processor). We do not store full payment card numbers. Stripe may collect and process payment details according to its own privacy practices.

3.3 Device, SIM, and app configuration data

• Device identifiers (e.g., Android ID and/or device ID), device model, manufacturer, OS version

• SIM slot information and related carrier/operator indicators available to the device

• App version, settings related to sync, and operational status

• Diagnostic events (e.g., app crashes or error reports), and logs if you choose to upload them for debugging

3.4 Communications records (Customer Data) collected via your linked device(s)

Depending on permissions you grant and device capabilities, the App may collect and transmit records such as:

SMS:

• sender/recipient numbers, timestamps, direction (incoming/outgoing), message text/content

• delivery timing signals such as received_time, sent_time, delivery_delay (where available)

• enrichment fields such as SMSC number, SMSC validity, operator/country inference (where available)

Calls:

• caller/callee numbers, timestamps, direction, duration, call type (e.g., incoming/outgoing/missed)

• related metadata available through call logs (no call audio is recorded)

RCS:

• sender/recipient identifiers, timestamps, direction, message content and related metadata

• attachment indicators/metadata (and, if captured by device/system capabilities, attachment content)

3.5 Website and Admin Panel usage data

• IP address, browser type, operating system, device type, language settings

• pages viewed, timestamps, clicks, navigation and performance metrics

• security logs (login events, access logs, suspicious activity detection)

3.6 Support communications

• messages you send to [email protected]

• information you provide during troubleshooting (screenshots, logs, device details)

  1. HOW WE USE INFORMATION

We use collected information to:

4.1 Provide and operate the Platform (link devices, sync data, display records, run searches, generate exports).

4.2 Provide enrichment and processing features (e.g., SMSC/operator signals where available).

4.3 Provide XLSX exports and allow you to retrieve your own data for reporting.

4.4 Maintain security, prevent fraud, enforce access controls, and investigate abuse or prohibited conduct.

4.5 Provide customer support and troubleshooting, including responding to your requests.

4.6 Improve the Platform (performance, reliability, bug fixes, new features).

4.7 Comply with legal obligations and respond to lawful requests.

  1. LEGAL BASES (IF GDPR/UK GDPR APPLIES)

Where applicable, we process personal data under one or more of the following bases:

• Contract: to provide the Platform you request and manage your subscription.

• Legitimate Interests: to secure, operate, and improve the Platform; prevent abuse; and protect our rights.

• Consent: where required (e.g., certain cookies/trackers) or where you actively provide optional data.

• Legal Obligation: to comply with laws and lawful requests.

  1. HOW WE SHARE INFORMATION

We do not sell your personal information. We may share information as follows:

6.1 Service providers (processors). We may share data with vendors that help us run the Platform, such as:

• hosting and infrastructure providers;

• database/search and monitoring tools;

• email and authentication delivery providers (for magic links and notices);

• payment processors (e.g., Stripe) for billing and subscription management;

• customer support and incident response tools.

These providers are authorized to process data only as needed to perform services for us.

6.2 Legal and safety. We may disclose information if we believe it is reasonably necessary to:

• comply with law, regulation, legal process, or governmental request;

• enforce these Terms or protect rights, property, or safety of Enquirelink, customers, or the public;

• detect, prevent, or address fraud, abuse, security, or technical issues.

6.3 Business transfers. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction (subject to applicable law).

  1. DATA RETENTION

We retain information as long as necessary for the purposes described above, including:

• while your account is active and you use the Platform;

• for legitimate business needs such as security, fraud prevention, backup, and service integrity;

• for billing, tax, and accounting compliance;

• to resolve disputes and enforce agreements.

If you want deletion of your account or stored data, contact [email protected] (see Section 11). We may retain limited information where required by law or for legitimate purposes (e.g., security logs, billing records, dispute resolution).

  1. SECURITY

We use reasonable administrative, technical, and organizational safeguards to protect information, including access controls, encrypted transport where appropriate, and least-privilege internal access. However, no method of transmission or storage is 100% secure. You are responsible for securing your devices, credentials, and exported files.

  1. YOUR CHOICES AND RIGHTS

Depending on your location, you may have rights to:

• access, correct, or delete certain personal data;

• object to or restrict certain processing;

• receive a copy/portability of certain data;

• withdraw consent where processing is based on consent.

To exercise rights, contact [email protected]. We may request verification of identity and account ownership.

  1. INTERNATIONAL DATA TRANSFERS

We are based in Canada and may process or store data in Canada and other countries where our service providers operate. These countries may have different data protection laws than your jurisdiction. We use reasonable safeguards for cross-border transfers where required by law.

  1. DELETION REQUESTS AND ACCOUNT CONTROL

To request deletion of account data or device data, email [email protected]. We will process requests in accordance with applicable law and our operational requirements (including retention for security, billing, and legal compliance).

Unlinking a device stops new collection from that device going forward, but previously stored data may remain until deleted per request and retention rules.

  1. CHILDREN

The Platform is not intended for children and must not be used by anyone under the age of majority in their jurisdiction.

  1. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will post the updated version on the Website with a new effective date. Your continued use of the Platform after the effective date means you accept the updated policy.

  1. CONTACT

Privacy questions and requests: [email protected]

ENQUIRELINK INC.