Privacy Policy — TrustFusion

Web City Lab (“we”, “our”, “us”) operates the TrustFusion WordPress plugin. This policy explains how TrustFusion accesses and uses data when you connect your own Google Business Profile (GBP).

1. Google API Services User Data Policy Compliance (Limited Use)

TrustFusion’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell, trade, or transfer your Google user data to third-party tools, platforms, or advertising networks.

2. Data We Access via Google

• Scope: https://www.googleapis.com/auth/business.manage (single scope).

• Purpose: To read your own GBP reviews so you can display them on your website.

• Data Accessed: Business profile metadata (name, address, phone, website, timezone, verification status, rating summary) and public review content (reviewer name, reviewer profile photo, rating star value, comment text, timestamps, and review IDs).

• Restrictions: TrustFusion does not read, access, or interact with Gmail, Drive, Contacts, or any other unrelated Google account data.

3. Tokens, Encryption, and Storage

• Tokens: OAuth access and refresh tokens are stored server‑side only in your secure WordPress database options.

• Database Tables:

  • wp_trustfusion_profiles — Stores profile and business summary info.

  • wp_trustfusion_reviews — Stores up to 10 reviews per connected profile.

  • wp_trustfusion_sync_log — Stores sync diagnostics.

• Frontend Security: All review rendering is loaded directly from your local WordPress database. The public frontend of your website never calls Google APIs directly, ensuring your client API credentials remain completely hidden.

4. Places API Use

We utilize the Google Places API server‑side solely to convert a copy-pasted Google Maps URL into a standard Place ID. We do not collect, stream, or store end‑user location history, background tracking, or device GPS data.

5. Legal Basis for Processing

Our processing of your Google Business Profile data is based strictly on your explicit consent when you click to connect your GBP account to TrustFusion.

6. Data Retention

• Tokens: Tokens persist in your environment until you manually click disconnect or revoke app access.

• Reviews and Profile Data: Reviews and cached profile data remain inside your local database until you delete them or completely uninstall the plugin.

7. User Choices and Data Deletion

• Disconnecting: You can click Disconnect Google Business Profile inside the plugin dashboard at any time to instantly wipe your active OAuth tokens.

• Deletion: You can purge stored profile text and downloaded reviews directly from the plugin settings menu, or email us at support@webcitylab.com for setup and deletion assistance.

• Account Revocation: You may also immediately revoke TrustFusion’s access permissions directly from your Google Account Security settings panel at any time.

8. Security

We strictly follow WordPress coding standards and store all sensitive credentials server‑side. No client secrets or authorization tokens are exposed on the frontend scripts. You remain responsible for securing your own WordPress site administrative access, hosting environment, and database backups.

9. Children’s Data

TrustFusion is intended for businesses and web developers. It is not directed to children under the age of 13, and it does not knowingly process children’s personal data.

10. Policy Changes

We may update this policy periodically. The latest version will always be published at this URL with a modified revision date.

11. Contact & Corporate Details

Company Name: Web City Lab

Support Email: support@webcitylab.com

Address: MM Tower, Rajjak Khan Shorok, Nothulladbad, Barisal Sodor, Bangladesh