Privacy Policy

Trustro (“Trustro”, “we”, “us”, or “our”) is an influencer-marketing marketplace connecting Indian brands with Instagram Business and Creator account holders. Our platform lets creators share API-verified Instagram analytics with brands, replacing unverified screenshots with authenticated data pulled directly from the Instagram Graph API.

Trustro is a unit of Zevnix AI Private Limited (CIN U62013UP2025PTC228705, GST 09AACCZ6939J1ZM), registered in India. Contact email: privacy@trustro.in.

Account data

When you create a Trustro account we collect: your full name, email address, WhatsApp phone number (used for OTP verification), and a hashed password. Brands may also provide a company name and business category.

Instagram Platform Data (creators only)

Creators who choose to connect their Instagram account grant Trustro access via Instagram’s OAuth flow. We collect and store the following data from the Instagram Graph API, with your explicit consent:

• Instagram user ID, username, and profile name
• Account type (Business or Creator — Personal accounts are rejected)
• Follower count and following count
• Media count and public media metadata (post type, timestamp, like/comment counts)
• Audience demographics (age ranges, gender breakdown, top cities/countries)
• Content insights (reach, impressions, engagement rate) for your own posts
• A short-lived access token (encrypted at rest) used to fetch your data

Usage data

We collect standard server logs (IP address, browser type, pages visited, and timestamps) for security and performance monitoring. We do not use third-party advertising trackers.

Trustro is an influencer-marketing marketplace connecting Indian brands with Instagram Business and Creator account holders. We use Instagram Platform Data in two ways:

1. Verified creator profiles: Creators connect their Instagram account via OAuth and we use their profile data, follower count, and content insights to build a verified analytics profile on our marketplace, so brands see authenticated metrics instead of unverified screenshots.
2. Brand discovery and campaign tracking: Brands use Trustro to discover creators, view verified Instagram analytics, place campaign orders, and track sponsored post performance.

Platform Data is used solely to provide this marketplace service — it is not sold, shared with third parties, or used for advertising targeting.

• Consent-gated access: We access only the data of creators who have explicitly connected their own Instagram account through the OAuth permission screen. We never access data of users who have not consented.
• Sole purpose: Instagram Platform Data is used exclusively to operate the Trustro marketplace — specifically to build and display verified analytics profiles to interested brands.
• No selling or ad-targeting: We do not sell Instagram Platform Data, share it with third-party data brokers, or use it for any advertising or profiling purpose outside of our service.
• Deauthorization honored:If a creator removes Trustro from their Instagram app permissions, we receive a deauthorization webhook from Meta and will stop using that creator’s Instagram data within 24 hours.
• Deletion honored:If a creator submits a data-deletion request (via the in-app settings, the data-deletion page, or Meta’s callback), all Instagram Platform Data associated with that account is deleted from our systems within 30 days, or sooner upon request.
• Security: Access tokens are encrypted at rest using AES-256 encryption and are transmitted only over TLS.

Your data is retained only as long as necessary:

• Instagram Platform Data (profile, insights, tokens) is deleted when you disconnect your Instagram account from Trustro, close your account, or submit a deletion request.
• Deauthorization via Meta’s Instagram app permissions triggers automatic deletion of your Platform Data within 24 hours.
• Account data (name, email, phone) is deleted when you close your Trustro account or submit a data-deletion request, subject to any legal retention obligations (e.g. tax records).
• Server log data is retained for up to 90 days for security purposes and then purged.

To delete your data, see our Data Deletion page or email privacy@trustro.in.

We implement appropriate technical and organisational measures to protect your data. Instagram access tokens are encrypted at rest (AES-256) and in transit (TLS 1.2+). Passwords are hashed using bcrypt. We regularly review our security practices and will notify affected users of any confirmed data breach as required by applicable law.

Trustro uses the following third-party services to operate the platform:

• Meta / Instagram Graph API:Creator account data is fetched directly from Meta’s official API under Meta’s Platform Terms.
• Cloud hosting (India region): Our servers and database are hosted on a cloud provider with data residency in India.
• WhatsApp Business API: Used to send OTP verification messages during signup. Your phone number is transmitted to the API provider solely for this purpose.
• Payment processor (forthcoming):When escrow-based payments launch, we will use a regulated payment processor. That processor’s privacy policy will govern payment data. We will update this policy before payments go live.

We do not sell data to, or share data with, any third party for commercial or advertising purposes.

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your personal data
• Disconnect your Instagram account at any time (creators)
• Object to or restrict certain processing
• Withdraw consent at any time (this will not affect processing already done)

To exercise any of these rights, email privacy@trustro.in or use the in-app account settings.

Trustro is intended exclusively for users aged 18 and above. We do not knowingly collect personal data from anyone under 18. If we become aware that a user is under 18, we will delete their account and data promptly. If you believe we have collected data from a minor, please contact privacy@trustro.in.

This Privacy Policy is governed by the laws of India, including the Information Technology Act, 2000, and applicable rules thereunder. Any disputes will be subject to the exclusive jurisdiction of the courts of India.

We may update this Privacy Policy from time to time. If we make material changes we will notify you by email or by a prominent notice on the platform. Continued use of Trustro after changes are posted constitutes your acceptance of the updated policy.