TrustScore

Privacy Policy

Last updated: September 3, 2026 · WYN Ai LLC · operations@wynai.net

Scope: two very different kinds of information

This Privacy Policy explains how WYN Ai LLC ("WYN Ai", "we", "us") handles information in connection with TrustScore at trustscore.online and the TrustScore applications (the "Service"). It is incorporated into our Terms of Service. TrustScore involves two distinct categories of people, and the rules are different for each: • YOU, THE SEARCHER. The person who creates an account and uses the Service. We collect information about you to run your account, bill you, secure the Service, and support you. We do not sell your account information or your search history. • THE SUBJECT. The person whose information appears in a search result. We did not collect that information from the subject directly, and the subject usually has no relationship with us. It comes from public records and from licensed third party data providers. Because we make that information available for a fee, we may be a "data broker" under state law and our handling of subject information may be treated as a "sale" or "sharing" of personal information under some state privacy laws. Wherever this policy says "searcher information" it means the first category; "subject information" means the second. Read section 11 if you are a subject and want your information suppressed or deleted. Last updated dates and material changes are handled under section 12.

Information we collect about you, the searcher

• Account information: name, email address, password credentials or third party sign in identifier (for example Apple or Google), and any profile details you add. • Search activity: the names, locations, dates of birth, phone numbers, emails, and other terms you submit; the reports you open; the certifications you make at each search; and the timestamps, account identifier, and IP address associated with them. We retain this to enforce our Terms, respond to legal process, investigate misuse, and comply with our data provider obligations. • Subscription and billing information: plan, billing history, and partial payment card details. Full card numbers are collected and stored by our third party payment processor, not by us. • Content you submit: photos or images you upload, support messages, and feedback. • Device and usage information collected automatically: IP address, approximate location derived from IP, browser and device type, operating system, device identifiers, referring pages, pages viewed, feature usage, crash and diagnostic logs, and cookie identifiers. • Communications: emails you send us and our replies, and your notification and marketing preferences. We do not intentionally collect Social Security numbers, financial account numbers, precise geolocation, biometric identifiers, or health information from searchers, and you should not send them to us.

Information about the people who are searched

Subject information available through the Service may include: full name, aliases and prior names, approximate age or date of birth, current and prior addresses and address history, telephone numbers, email addresses, possible relatives, associates, and neighbors, property records and affiliations (including ownership, purchase and assessed values, and parcel identifiers where available), business and corporate affiliations and officer roles, employment and workplace history (such as past or present employers, job titles, and approximate dates), campaign-finance records (such as political contributions, contribution amounts, recipient committees, and the donor’s stated employer and occupation) drawn from public election-commission filings, professional and occupational licensing information, and publicly available online, news, and reputation signals. Where a source makes them available, results may also include adverse or derogatory record indicators -- such as criminal-record, judgment, lien, bankruptcy, eviction, foreclosure, and debt indicators, counts of court documents and dockets that mention the name, news headlines that read as adverse, and sentences from encyclopedic biographies (such as Wikipedia) that describe arrests, charges or convictions -- which we may surface, together with a proprietary TrustScore rating, per-category ratings, and a score breakdown, in a "Trust Concerns" summary and elsewhere in a report. We do not obtain this information from the subject and we do not verify it. It is licensed or compiled from the sources described in the "Where subject information comes from" section and is republished, scored, and summarized by us subject to the accuracy limits stated in our Terms and Disclaimer. Records -- and especially adverse indicators, court-document mentions, employment history, campaign-finance records, and news items -- are matched to a name probabilistically and by name alone, so an item shown for a name may belong to a different person entirely and is not proof of any wrongdoing, guilt, beliefs, or current status. The TrustScore rating and any category rating are our subjective, automated opinion, not a statement of fact about the subject. We apply suppression to subject information when we receive a valid opt out, when a record indicates a person under 18, and where required by address confidentiality, judicial privacy, or protected persons laws such as Daniel’s Law. Suppression is maintained on an ongoing basis, including against later re ingestion of the same record. We do not knowingly display information about minors, and we do not sell, license, or make available subject information for use in employment, tenant, credit, insurance, education, licensing, or other FCRA regulated decisions.

Where subject information comes from

Our sources are: • Enformion, LLC (which also operates as Endato), a licensed third party data provider that supplies identity, address history, telephone, email, and relative and associate data, and, retrieved on a per record basis, property records, business and corporate records, employment and workplace records, and adverse-record indicators. Enformion is not a consumer reporting agency for these purposes and its data is not furnished as a consumer report. • Government and public records, including United States court and civil filings retrieved through services such as CourtListener, U.S. Securities and Exchange Commission filings and investment-adviser records (EDGAR and IAPD), the Federal Register, federal spending and award records (USASpending), federal campaign-contribution records (OpenFEC), health-care provider registries (the HHS NPI registry), property and assessor records, corporate, UCC, and business filings, professional and occupational licensing registries, and other public registries where permitted by law. • Publicly available online sources, including encyclopedic and open reference data such as Wikipedia and Wikidata, worldwide news and media coverage (including through Google News and the GDELT project), publicly visible web pages, business listings, review and directory sites, and publicly visible social profiles. How we surface social profiles and links to news is described in the section "Possible social profiles and links to third-party content". • Commercially available directory and marketing data, and information individuals have voluntarily made public or self reported. We may add, change, or remove providers at any time, and any particular source may be queried or omitted for a given search. We do not control what these sources contain, when they update, or whether they are accurate. To correct information at the source, you generally must contact the source agency or provider directly; we will identify the upstream provider on request so you can also submit a request to them.

How we use information

We use searcher information to: create and administer your account; authenticate you and secure the Service; deliver the features and reports you request; process subscriptions, renewals, and refunds; provide customer support; send transactional messages such as receipts, renewal notices, security alerts, and policy updates; personalize and improve the Service; measure performance and debug; detect, investigate, and prevent fraud, abuse, prohibited use, and security incidents; enforce our Terms and our data provider agreements; and comply with legal obligations, including responding to lawful requests and preserving records. We use subject information solely to provide the search and reporting features of the Service. This includes retrieving and compiling records that match the identifiers you submit; computing and displaying the proprietary TrustScore rating, the per-category ratings, and the score breakdown; surfacing adverse or derogatory record indicators, court-document mentions, and adverse news headlines in a "Trust Concerns" summary and elsewhere in a report; and linking to publicly available profiles and news. All such matching is probabilistic and based on the name and other identifiers you provide, may return information about a different person, and does not establish that any record, profile, or article concerns the subject. We also use subject information to operate our suppression and opt out systems and to comply with law. We may use aggregated or de identified information, which cannot reasonably be used to identify any individual, for analytics, research, and product development; we will not attempt to re identify it. We do not use your search queries to build advertising profiles about you, and we do not disclose to any subject that you searched for them, except where required by law or legal process. We do not use subject information, and do not permit anyone else to use it, to train third party machine learning models.

Possible social profiles and links to third-party content

As part of a report we may search public platforms for profiles that could belong to the subject and display them as possible matches only. These currently include candidate profiles from public sources such as Bluesky and GitHub, shown alongside links that let you search for the name on other public platforms and links to publicly available news coverage. A name is not an identity: the profiles and articles we surface are located by name alone, and parody, unrelated, automated, or same-named accounts and stories routinely appear. We link to this public content; we do not sign in to any platform, we do not scrape, copy, or store the contents of these profiles or articles, and we do not evaluate, rate, or draw any conclusion about the subject from what those profiles or articles contain. Whether a profile or article actually concerns the subject is for you to determine, and you must verify it before relying on it. If a profile that appears is yours and you do not want it surfaced, you can usually make it private or restrict it on the platform itself; you may also contact us at operations@wynai.net, although we cannot remove content hosted by another platform.

Photos and visual analysis

Where a photo feature analyzes a face to produce its impressionistic output, that analysis runs in your browser on your device; we do not receive the image, we do not extract or retain a faceprint, face geometry template, or any other biometric identifier from it, we do not use it to identify or verify any person, and the transient measurements used to generate your result are discarded when analysis ends and are never stored, sold, or used to train models. We do not intend for this feature to create biometric identifiers or biometric information as defined by the Illinois Biometric Information Privacy Act, the Texas CUBI statute, the Washington My Health My Data Act, or comparable laws, and it must not be relied upon as facial recognition, biometric identification or verification, or age verification. Do not upload an image of anyone under 18, an image you lack the right to use, or an image of anyone who has not agreed to be analyzed.

Voice input and spoken results

The Service offers optional voice features: you can speak a name to start a search, and you can have a result read aloud. These features use the speech-recognition and speech-synthesis capabilities built into your browser, device, or operating system. Depending on the browser you use, audio captured by your microphone when you use voice search may be transmitted to and processed by your browser or operating-system provider under that provider’s own terms and privacy policy, which we do not control; WYN Ai does not record, store, transcribe for any other purpose, sell, or use your voice recordings, and we use the recognized text only to run the search you requested. Spoken results are a convenience only. They are generated from the same non-verified information as the on-screen report, carry all of the same limitations and disclaimers, are not a finding of fact about any person, and must never be used for any FCRA-regulated decision. You control microphone access through your browser and device settings, and voice features work only where your browser permits them.

Premium read-aloud voice (optional). If you choose the premium voice, the spoken summary of a report (the name you searched and the report’s findings, up to 3,000 characters) is sent to xAI, LLC (x.ai) solely so that its Grok voice service can generate the audio; xAI acts as our service provider under its API terms, and we do not send your account details, your voice recordings, or any other information to xAI. The app asks for your permission before the first premium read-aloud and defaults to your device’s built-in voice, which sends nothing; you can switch voices at any time in Settings › Voice.

Search history stored on your device

If you turn on history, the Service saves a limited record of your recent searches directly in your browser’s local storage on your own device -- not on our servers -- so you can return to a prior search. Each entry may include the name you searched and the generated score, rating, and any date of birth, city, or sex you entered. Because these entries include generated estimates about other people, you should keep your device secure and be aware that anyone with access to your browser could view them. You can turn history off, and you can clear it, at any time from Settings; clearing it deletes these entries from your browser. Clearing your browser’s site data or storage also removes them. This on-device history is separate from the search logs we keep for compliance, which are described above.

How we share information, and what we do not sell

WE DO NOT SELL OR RENT SEARCHER ACCOUNT INFORMATION OR SEARCH HISTORY, AND WE DO NOT SHARE IT FOR CROSS CONTEXT BEHAVIORAL ADVERTISING. We share information only as follows: • Service providers and processors that operate the Service under contract and may use the information only for us, including hosting and cloud infrastructure, payment processing, email delivery, customer support tooling, analytics, error monitoring, fraud and abuse prevention, and identity providers you choose to sign in with. • Data providers, to the extent our agreements require us to report compliance, audit results, or misuse, and to route your opt out upstream. • Legal and safety, when we believe in good faith that disclosure is required by law, subpoena, court order, or other legal process, or is necessary to enforce our Terms, protect the rights, property, or safety of any person, or investigate suspected fraud or abuse. Where lawful and practicable we will notify you before disclosing your information in response to legal process. • Business transfers, in connection with a merger, financing, acquisition, reorganization, or sale of assets, or in bankruptcy, subject to this policy or notice of any material change. • With your direction or consent, including when you choose to share a report. Subject information is made available to searchers who pay for or access the Service, which some state privacy laws characterize as a "sale" or "disclosure for valuable consideration" of the subject's personal information. Subjects may opt out as described in section 11.

Cookies, analytics, and tracking

We use cookies and similar technologies for: strictly necessary purposes such as keeping you signed in, remembering your plan, load balancing, and security and fraud prevention; functional purposes such as remembering preferences and language; and analytics to understand feature usage and improve the Service. We do not use third party advertising cookies to build cross site advertising profiles of you, and we do not sell or share cookie identifiers for cross context behavioral advertising. If that ever changes, we will update this policy, provide notice, and offer the opt out mechanisms the law requires. You can control cookies through your browser settings; blocking strictly necessary cookies will break sign in and other core functions. We honor the Global Privacy Control (GPC) and other recognized opt out preference signals as an opt out of sale and sharing for the browser transmitting the signal, as required by California and other state laws. We do not otherwise respond to Do Not Track signals, as there is no common standard.

Retention and security

Retention. We keep account information for as long as your account is active and for a limited period afterward. When you delete your account we delete or de identify searcher information within 90 days, except where we must retain it to comply with law, resolve disputes, enforce agreements, complete billing and tax obligations, or maintain security and abuse records. We retain search logs and certification records for up to 24 months for compliance, audit, and misuse investigation, then delete or de identify them. Opt out and suppression records are retained indefinitely, in the minimum form necessary, so that we can continue honoring the opt out. Subject information is retained only while it is licensed to us or lawfully available, and is refreshed or removed as our sources change. Security. We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including encryption in transit, encryption at rest for stored account data, access controls and least privilege, credential hashing, logging and monitoring, vendor diligence, and periodic review. Payment card data is handled by a PCI DSS compliant processor. No system is completely secure, and we cannot guarantee absolute security. If a breach affecting your personal information occurs, we will notify you and the relevant regulators as required by applicable law. Keep your password confidential and notify us at operations@wynai.net of any suspected compromise.

Your rights as a user of TrustScore

Regardless of where you live, you may: access and update your account information in settings; download a copy of your account information and search history by request; delete your account and associated searcher information; unsubscribe from marketing email using the link in any such email or by contacting us (you will still receive transactional messages); cancel your subscription at any time in settings; and set browser level privacy controls. Depending on your state, you may also have rights to know what personal information we process about you, to correct inaccuracies, to delete it, to obtain it in a portable form, to opt out of sale, sharing, targeted advertising, and profiling that produces legal or similarly significant effects, and to limit the use of sensitive personal information. To exercise these rights, email operations@wynai.net or use the privacy request link in the footer. How we handle requests: we verify your identity using information already associated with your account, acknowledge within 10 business days, and respond within 45 days, with one 45 day extension where permitted and with notice. Requests are free, subject to limits on repetitive or manifestly unfounded requests. Authorized agents may submit requests with written permission and verification. If we deny a request, we will explain why, and you may appeal by replying with the subject line "Privacy Appeal"; we will decide the appeal within 45 days and, if we deny it, tell you how to contact your state attorney general. WE WILL NOT DISCRIMINATE OR RETALIATE AGAINST YOU FOR EXERCISING ANY PRIVACY RIGHT.

Your rights as the subject of a search: opt out, suppression, and deletion

If your information appears in TrustScore, you may ask us to suppress or delete it, whether or not your state gives you a statutory right. How to request: email operations@wynai.net with the subject line "Opt Out Request", or use the opt out link in the footer of trustscore.online. Include your full legal name and any prior names, current address, prior addresses if known, year or date of birth, and a contact email, plus a link to the record if you have one. We may ask for limited verification solely to confirm identity and locate the correct records, and we use and retain that verification information only for that purpose. Requests are free, and we will never require you to create an account, subscribe, or purchase anything to opt out. Our commitment: we acknowledge within 10 business days and complete verified requests within 45 days. Suppression is ongoing and survives data refreshes. We will also direct our service providers and contractors to delete the information where the law requires, and we will identify our upstream provider so you can submit a request to them as well. California Delete Act and DROP: California residents may submit one deletion directive to all registered data brokers through the state's Delete Request and Opt out Platform (DROP), operated by the California Privacy Protection Agency at privacy.ca.gov. WYN Ai registers as a data broker where required and, once registered, accesses DROP at least once every 45 days and processes matching deletion directives within the statutory period. California residents also have CCPA and CPRA rights to know, delete, correct, and opt out of sale and sharing. Other state laws: residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, and other states with comprehensive privacy laws have rights to access, correct, delete, opt out, and appeal, which we honor on the timelines above. Vermont, Texas, Oregon, and California residents may also consult their state data broker registries. Protected persons: if you are a judicial officer, law enforcement officer, prosecutor, child protective services worker, or other individual covered by Daniel's Law or a comparable address confidentiality, judicial privacy, or safety at home program, mark your email "PROTECTED PERSON TAKEDOWN" and we will process the removal on the expedited statutory timeline, currently 10 business days under Daniel's Law, and apply permanent suppression. What we cannot do: we cannot delete or amend the underlying records held by courts, agencies, or other companies, and suppression on TrustScore does not remove information from other websites.

Children, international users, changes, and contact

Children. The Service is intended solely for adults 18 and older. We do not knowingly collect personal information from anyone under 18, we prohibit searches concerning minors, and we apply technical controls intended to block such searches and suppress records indicating a minor. If you believe a person under 18 has provided us information, or that information about a minor appears in the Service, contact operations@wynai.net and we will delete or suppress it promptly. We do not sell the personal information of anyone under 16. International users. The Service is offered from and intended for use in the United States, and information is processed and stored in the United States, which may not provide the same protections as your jurisdiction. Do not use the Service if you are located where our processing would be unlawful. Changes. We may update this policy. We will change the "Last updated" date and, for material changes, give at least 30 days advance notice by email to your account address and by notice in the Service. Continued use after the effective date constitutes acceptance. Contact. WYN Ai LLC, operator of TrustScore. Privacy, opt out, and data subject requests: operations@wynai.net. We will respond to every request we receive at that address, and requests are handled by a person, not only automation. If you are not satisfied, you may contact your state attorney general or the Federal Trade Commission.