Privacy at TRST

Free, with limits

TRST is a free public-interest tool paid for by one person. Each account can start 30 investigations per rolling 30 days. The platform also has a monthly capacity and image-analysis budget. New work may pause without advance notice when either is exhausted. Existing reports remain available. We would rather say this now than fail you quietly.

What we ask for

We ask for your name, email, organization if you have one, and what you want to use TRST for. This helps us manage access and understand who uses the tool. We do not sell this information or share it for advertising, mailing lists or marketing by others.

Account information and access records remain while your account is open, unless you ask us to delete them. Email confirmation is required. Access can be revoked for abuse; new registrations using disposable addresses or an already registered Gmail alias may be refused. Contact us if a block is mistaken.

Files and reports

TRST stores uploaded files, retrieved reference copies, optional context, extracted metadata, evidence, findings, reports and feedback. Files become eligible for automatic deletion 60 days after the investigation was created. Further collection and file previews stop at that point. A daily job removes eligible files; an outage or backlog can delay removal. Deletion cannot be undone.

The investigation, report, file SHA-256 and findings remain until you request deletion. Findings can contain information extracted from your image, including device details, timestamps, location or declared metadata. Deleting the image file does not erase that information. References already published elsewhere are outside our control.

Who processes the data

TRST uses Supabase for accounts, database and file storage; Vercel for hosting; and Resend for account email and notifications to the owner. Sightengine and Google Cloud Vision receive image data for analysis. Anthropic receives selected evidence descriptions and any context you submit to write the narrative. These providers process data to deliver the service; this is not a promise that your data never leaves TRST.

The 60-day deletion job covers TRST's stored working files. It does not delete a provider's independent logs or backups. Provider retention and backups are subject to their own terms and configuration. Do not submit confidential source material unless this processing is acceptable to you.

Request deletion

Email contact@trst.center from your registered address. Say whether you want an investigation deleted or your account and all its data deleted. We may ask you to confirm ownership, but never ask for your password. The owner processes these requests and confirms completion or explains a delay.

Account deletion removes your stored files, investigations, findings, reports, feedback and account profile from the active service. Unlinked operational counters may remain to reconcile spending and enforce platform capacity. Copies in provider backups may persist under the provider's backup policy; we do not promise immediate erasure from every backup.

Questions

Write to contact@trst.center. No lawyer has reviewed this notice. It describes how TRST operates; it is not a claim of legal certification or compliance.