Privacy Policy — TrustFusion

Web City Lab (“we”, “our”, “us”) operates the TrustFusion WordPress plugin and its supporting relay service at reviews.webcitylab.com (the “Relay”). This policy explains what data TrustFusion and the Relay access, process, and store, and applies whether you use TrustFusion’s default no-login review display or its optional Google Business Profile (GBP) connection.

1. Google API Services User Data Policy Compliance (Limited Use)

TrustFusion’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell, trade, or transfer your Google user data to third-party tools, platforms, or advertising networks.

2. How TrustFusion Works — Two Data Paths

TrustFusion can display your business’s Google reviews in two ways, and this policy covers both:

• Public review lookup (default, no Google login required). You search for your business and select it; TrustFusion, through the Relay, retrieves your business’s publicly visible Google review data by its Place ID. No Google account access is requested or granted for this path.
• Official Google Business Profile connection (optional). You may choose to connect your GBP account via Google OAuth, which grants read access to reviews and profile data you manage. This is entirely optional and is described in Sections 3–4 below.

3. Data We Access via Google OAuth (Optional Connection)

• Scope: https://www.googleapis.com/auth/business.manage (single scope).
• Purpose: To read your own GBP reviews and business profile data so you can display them on your website.
• Data accessed: Business profile metadata (name, address, phone, website, timezone, verification status, rating summary) and public review content (reviewer name, reviewer profile photo, rating value, comment text, timestamps, and review IDs).
• Restrictions: TrustFusion does not read, access, or interact with Gmail, Drive, Contacts, or any other unrelated Google account data.
• Alternative to OAuth: Instead of granting OAuth access, you may add our Relay’s Google account as a Manager directly within your own Google Business Profile settings (“People and access”). This grants the same read access to your reviews without an OAuth consent screen, and can be revoked by you at any time from within your own Google Business Profile settings.

4. Data Processed via the TrustFusion Relay

Independent of whether you connect via OAuth, the plugin communicates with our Relay (reviews.webcitylab.com) to operate the service you’ve licensed. This includes:

• License verification: your license key and website domain, sent whenever the plugin checks license status, activates, or deactivates a site.
• Review/search requests: the Google Place ID(s) of businesses you look up or display reviews for, and your website’s domain (used to enforce your plan’s site limit and, for certain paid features, to confirm entitlement to full review data).
• Abuse-prevention data: the requesting server’s IP address may be briefly recorded (up to one hour) purely to rate-limit anonymous requests and protect the service from abuse. This is not linked to your identity beyond that hour and is not retained afterward.

We do not use this data for advertising, and it is not shared with third parties except where necessary to operate the Relay itself (e.g., our hosting provider) or as required by law.

5. Google Business Profile OAuth Tokens — Storage

If you use the optional official OAuth connection (Section 3), your Google access and refresh tokens are encrypted and stored on our Relay server (reviews.webcitylab.com) — not in your own WordPress database — tied to your license, your website’s domain, and the specific business location you connected. This lets the Relay refresh your token and fetch reviews on your behalf without exposing any Google credentials to your website’s public frontend or database.

6. Local WordPress Database Storage

Your own WordPress installation stores the following, entirely within your own database:

• wp_trustfusion_profiles — business profile and summary info for each connected location.
• wp_trustfusion_reviews — your synced reviews. The number stored depends on your plan: up to 10 reviews per business on the free tier, or your business’s full available review history on a paid plan.
• wp_trustfusion_sync_log — sync diagnostics (timestamps, success/error status) for troubleshooting.

Frontend security: All review rendering on your website is served directly from your own local WordPress database. Your site’s public frontend never calls Google APIs directly, and no API keys, license keys, or tokens are ever exposed to a visitor’s browser.

7. Places API Use

The Google Places API is used, either by your own API key or via the Relay’s shared key, solely to resolve a business name or a copy-pasted Google Maps URL into a standard Place ID, and to retrieve publicly available business/review data. We do not collect, stream, or store end-user location history, background tracking, or device GPS data.

8. License and Account Data

To provide and support your subscription, we retain: your license key, the email address associated with your purchase, your order reference, your plan/site-limit tier, and which website domain(s) have activated the license. This data is retained for the duration of your license plus a reasonable period afterward for support, billing, and fraud-prevention purposes.

9. Legal Basis for Processing

• Where you connect your Google Business Profile via OAuth, our processing of that data is based on your explicit consent, given when you initiate the connection.
• Where we process your license key, website domain, and account data, this is based on the necessity of performing the contract formed when you purchased and activated a TrustFusion license.

10. Data Retention

• OAuth tokens: retained until you disconnect within the plugin, revoke access from your Google Account (or Business Profile Manager list), or your license is cancelled.
• Reviews and profile data: remain in your own local database until you delete them or uninstall the plugin.
• License/account data: retained per Section 8.
• Rate-limiting IP data: auto-expires within one hour and is never persisted longer.

11. Your Choices and Data Deletion

• Disconnecting: Click “Disconnect” inside the plugin dashboard at any time to remove a business connection. If you used the OAuth path, this also instructs the Relay to stop using the associated token.
• Revoking Google access directly: You may revoke TrustFusion’s OAuth access at any time from your Google Account’s Security settings, or remove our Relay account as a Manager from your Google Business Profile’s “People and access” settings.
• Deletion requests: You can remove stored profile and review data directly from the plugin’s settings menu, or email us at support@webcitylab.com for deletion assistance, including deletion of license/account data described in Section 8.

12. Your Privacy Rights

Depending on your location, you may have rights to access, correct, export, or request deletion of your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact us at support@webcitylab.com — we will respond within a reasonable timeframe.

13. Security

All sensitive credentials — Google OAuth tokens, license keys in transit — are encrypted and handled server-side. No client secrets or authorization tokens are exposed in frontend scripts. You remain responsible for securing your own WordPress site’s administrative access, hosting environment, and database backups.

14. International Data Transfers

Our Relay and hosting infrastructure may process data in a country different from your own. Where this occurs, we take reasonable steps to ensure your data continues to receive an appropriate level of protection consistent with this policy.

15. Children’s Data

TrustFusion is intended for businesses and web developers. It is not directed to children under the age of 13, and we do not knowingly process children’s personal data.

16. Policy Changes

We may update this policy periodically. The latest version will always be published at this URL with a revised “Last Updated” date.

17. Contact & Corporate Details

• Company Name: Web City Lab
• Support Email: support@webcitylab.com
• Address: MM Tower, Rajjak Khan Shorok, Nothulladbad, Barisal Sodor, Bangladesh