Privacy Policy

Who we are

SignificanTRUST is a fraud detection technology company currently registered in Armenia, with a Delaware C-Corporation registration in progress. We operate the SignificanTRUST Certainty Engine — a real-time fraud detection API serving fintech, iGaming, eCommerce, crypto, and trading platforms globally.

This policy explains what personal data we collect when you visit our website or sign up for our service, how we use it, and what rights you have over it. It applies to users worldwide including those in the European Economic Area (GDPR) and California, USA (CCPA).

We will update this policy with our US registered address and entity details as soon as our Delaware incorporation is complete.

What data we collect

When you sign up for a free trial or contact us, we collect:

• Work email address
• Your name
• Company name

We do not collect payment information at the free trial stage. We do not collect sensitive personal data. We do not collect data from children.

How we use your data

We use the information you provide solely to:

• Provision your API key and free trial access
• Send you onboarding and technical documentation
• Follow up about your trial results and answer technical questions
• Send product updates where you have given consent

We do not sell your data. We do not share your data with third parties for marketing purposes. We do not use your data for automated decision-making or profiling.

Legal basis for processing

We process your data on the following legal bases under GDPR:

• Contract performance — to deliver the trial and service you requested
• Legitimate interests — to follow up on your trial and provide technical support
• Consent — for any marketing communications, which you can withdraw at any time

Third party tools we use

We use a small number of tools to operate the service. Each handles your data in accordance with their own privacy policies:

• Plausible Analytics — privacy-first website analytics. No cookies. No personal data collected. No cross-site tracking. Data is aggregated and anonymised. See plausible.io/privacy
• Email provider — used to deliver your API key and onboarding emails. We use a GDPR-compliant provider. Your email address is stored only for the purpose of sending you transactional and service communications.
• CRM — used to manage trial signups and follow-up. Data held in our CRM is limited to name, work email, and company. It is not shared with any other party.

Free trial — what happens to your API data

When you run a free trial, you send transaction events to the SignificanTRUST API for analysis. Here is exactly what happens to that data:

• Events are processed in real time — your transaction data is analysed by the Certainty Engine and a fraud decision is returned within 30ms
• Events are not stored beyond the trial period — we do not retain your transaction data after your trial ends
• Your data is never used to train models — the VLS-Markov model is research-derived and peer-reviewed. We do not train on customer data.
• Your data is never shared with third parties — transaction events sent during the trial are processed solely to return a fraud decision to you
• Aggregate performance metrics are retained — after 1,000 events, we generate a False Positive and Recall report for your session. This report contains aggregate statistics only — no individual transaction data

If you have specific data handling requirements for your trial — for example, you operate in a regulated environment and need a Data Processing Agreement — contact us at privacy@significantrust.com before starting your trial.

How long we keep your data

We retain your contact data for as long as your account is active or as needed to provide the service. If you request deletion, we will remove your data from all systems within 30 days. Anonymised analytics data may be retained indefinitely as it cannot be linked back to you.

Cookies

We use Plausible Analytics, which is cookieless. We do not use advertising cookies, tracking pixels, or third-party cookies of any kind. If we introduce cookies in future we will update this policy and request consent where required.

Your rights

Under GDPR you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict how we process your data
• Withdraw consent for marketing at any time
• Request a copy of your data in a portable format

To exercise any of these rights, email us at privacy@significantrust.com. We will respond within 30 days.

Data security

We take the security of your data seriously. All data is transmitted over encrypted HTTPS connections. Access to personal data is restricted to team members who need it to deliver the service. We review our security practices regularly.

California residents — your CCPA rights

If you are a resident of California, the California Consumer Privacy Act (CCPA) gives you specific rights over your personal information:

• Right to know — you can request details of what personal information we collect, use, disclose, and sell
• Right to delete — you can request that we delete personal information we have collected from you
• Right to opt out — we do not sell personal information. There is nothing to opt out of.
• Right to non-discrimination — we will not discriminate against you for exercising any of these rights

To exercise your CCPA rights, email us at privacy@significantrust.com. We will respond within 45 days as required by law.

International data transfers

SignificanTRUST operates from Armenia and is establishing a US entity (Delaware C-Corporation). Your data may be processed in Armenia, the United States, or other countries where our service providers operate. Where we transfer data outside your home country, we ensure appropriate safeguards are in place including standard contractual clauses where required under GDPR.

Changes to this policy

We may update this policy from time to time. When we do, we will update the date at the top of this page. If changes are material, we will notify active users by email. We will update this policy with our US entity details as soon as our Delaware registration is complete.