TrustCookie
Legal Document

Privacy Policy

Last Updated: January 1, 2025

This Privacy Policy describes how MDXTech LLC ("we," "us," or "our") collects, uses, and protects your personal information when you use TrustCookie, our cookie consent management service.

We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

1. Information We Collect

1.1 Information You Provide

  • Account Information: Email address, name (if provided), and password
  • Business Information: Company name, website domain, and business contact details
  • Payment Information: Processed securely by Stripe (see Section 1.3)

1.2 Automatically Collected Information

  • Usage Data: Pages visited, features used, time spent on service
  • Device Information: Browser type, operating system, IP address
  • Cookies and Similar Technologies: For authentication and service functionality

1.3 Payment Information

Important: All payment processing is handled by Stripe, our secure payment processor. We do not store your credit card information on our servers. Stripe's Privacy Policy governs the collection and use of payment information: https://stripe.com/privacy

2. How We Use Your Information

We use collected information for the following purposes:

  • ✓ To provide and maintain our service
  • ✓ To process your subscription and payments
  • ✓ To communicate with you about service updates and support
  • ✓ To improve and optimize our service
  • ✓ To detect and prevent fraud or abuse
  • ✓ To comply with legal obligations

3. Information Sharing and Disclosure

We do not sell your personal information. We may share your information with:

3.1 Service Providers

  • Stripe: Payment processing
  • Hosting Providers: Infrastructure and data storage
  • Analytics Services: Service improvement (anonymized data)

3.2 Legal Requirements

We may disclose your information if required by law, court order, or government regulation.

4. Data Security

We implement industry-standard security measures to protect your personal information, including:

  • • SSL/TLS encryption for data transmission
  • • Encrypted data storage
  • • Regular security audits and updates
  • • Access controls and authentication

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Your Rights (GDPR & CCPA)

5.1 GDPR Rights (EU Users)

If you are in the European Economic Area, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Restriction: Limit how we process your data
  • Data Portability: Receive your data in a machine-readable format
  • Objection: Object to our processing of your data
  • Withdraw Consent: Revoke previously given consent

5.2 CCPA Rights (California Residents)

California residents have the right to:

  • • Know what personal information is collected
  • • Know whether personal information is sold or disclosed
  • • Say no to the sale of personal information
  • • Access your personal information
  • • Request deletion of personal information
  • • Non-discrimination for exercising CCPA rights

To exercise your rights: Contact us at privacy@mdxtech.com

6. Data Retention

We retain your personal information for as long as necessary to:

  • • Provide our services to you
  • • Comply with legal obligations (e.g., tax records: 7 years)
  • • Resolve disputes and enforce agreements

When you delete your account, we will delete your personal information within 30 days, except where retention is required by law.

7. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers, including:

  • • Standard Contractual Clauses approved by the European Commission
  • • Adequacy decisions for countries with adequate protection

8. Children's Privacy

Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • • Posting the updated policy on our website
  • • Sending you an email notification
  • • Displaying a prominent notice in our service

Your continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

MDXTech LLC

Email: privacy@mdxtech.com

Support: support@trustcookie.com

Address: [INSERT BUSINESS ADDRESS]