Privacy Policy

What TrustRails does

TrustRails provides a product search API for UK electronics. Our API is used by AI assistants (such as ChatGPT and Claude) to help users find and compare electronics products across UK retailers.

What data we collect

When an AI assistant uses TrustRails for you, it sends us only the inputs for the search or product lookup, never your conversation. Our request logs hold:

• The endpoint called and, for API requests, the search terms and filters sent. For the MCP server we log only that a request was made, not the tool inputs
• Your IP address and your browser or app user agent string
• The time of the request
• For buy-link clicks: the offer clicked, whether it was redirected or blocked, the referring page, your approximate country, your browser language and standard browser request headers

We do not collect names, email addresses, accounts, payment details or chat conversations. Rate limiting uses your full IP address, and a session identifier if your assistant sends one, in short-lived counters that expire within about an hour. Our hosting provider's own runtime logs for buy-link clicks may include your IP address, and are kept under the provider's retention rules.

How we use this data

We use this data to:

• Monitor service health and performance
• Understand usage patterns and improve the service
• Prevent abuse and enforce rate limits

Who receives it

Our hosting, database and rate-limiting providers process this data on our behalf. Retailers only receive your visit when you click a buy link, sometimes through an affiliate network. We do not sell or rent your data.

Purchase links

Product purchase links redirect to third-party retailer websites. When you click a purchase link, you leave TrustRails and are subject to that retailer's privacy policy. Some links include affiliate tracking parameters.

How long we keep it

We keep request and click logs for 90 days, then delete them automatically. Rate-limit counters expire within about an hour. Our hosting provider's runtime logs are kept under its own retention rules. You can also ask us to delete data linked to you, as described below.

Your choices and rights

There are no accounts and no cookies, so there is nothing else stored per user. Our logs are not tied to a name, so we may not be able to find data about you. You can email us to ask what we hold or to request deletion. Under UK GDPR you can also ask for access, correction or erasure, and complain to the Information Commissioner's Office.

Cookies

The TrustRails API does not set cookies. The TrustRails website does not use tracking cookies or analytics scripts.

Contact

If you have questions about this privacy policy, contact us at hello@trustrails.app.