trustSYSTEM Privacy Policy

Application: trustSYSTEM (https://trust.iqwyk.com)
Organization: QWYK iSoft, a dba of IWYNO Finworks LLC (https://iqwyk.com)
Last Updated: August 25, 2026
Live URL: https://policy.iqwyk.com/trustsystem/privacy-policy

This Privacy Policy describes how trustSYSTEM ("we", "us", or "our"), operated by QWYK iSoft, accesses, collects, uses, stores, shares, transfers, discloses, protects, retains, and deletes Google user data and other personal information when you use trustSYSTEM, including when a business owner connects a Google or YouTube account.

trustSYSTEM uses YouTube API Services. By connecting your Google or YouTube account to trustSYSTEM, you agree to:

This page also includes the trustSYSTEM Acceptable Use Policy.

What Google User Data Is Accessed by trustSYSTEM

Your privacy policy must state what Google user data is accessed by the app. trustSYSTEM accesses only the Google user data needed to connect a YouTube channel and publish approved customer video reviews:

Google OAuth credentials: access tokens and refresh tokens required to authenticate YouTube Data API requests on your behalf.
YouTube channel metadata: channel ID, channel title, and channel URL so we can link the correct channel to your trustSYSTEM business profile.
Video upload permission: authorization to upload approved customer video review files to your connected YouTube channel when you enable that publishing flow.

Requested Google OAuth scopes:

https://www.googleapis.com/auth/youtube.readonly — to read YouTube channel information and verify account linkage.
https://www.googleapis.com/auth/youtube.upload — to publish approved customer video reviews to your connected channel when you direct us to do so.

We do not access Gmail, Google Drive, Google Contacts, Google Calendar, Google Photos, or Google Business Profile data through this OAuth connection.

How trustSYSTEM Uses Google User Data

Your privacy policy must state how the app uses Google user data. We use Google user data only to provide and improve the user-facing YouTube features you authorize:

Connect and verify your YouTube channel with your trustSYSTEM business profile.
Keep the connection authenticated with OAuth access tokens and refresh tokens.
Upload approved customer video reviews to your connected YouTube channel when you choose that publishing flow.
Display channel linkage status in your trustSYSTEM dashboard.
Maintain, troubleshoot, and secure the YouTube integration.

We do not:

Sell Google user data to third parties, advertising networks, or data brokers.
Use Google user data for targeted, personalized, interest-based, or retargeted advertising.
Use Google user data to train generalized, non-personalized, or commercial AI or machine-learning models.
Use Google user data to determine creditworthiness or lending eligibility.
Use Google user data for any purpose other than providing and improving the YouTube connection and upload features described above.

trustSYSTEM's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Your privacy policy must state with whom you share, transfer, or disclose Google user data. We do not sell, rent, or disclose Google user data for independent commercial purposes.

Google user data is shared, transferred, or disclosed only as follows:

YouTube / Google: We send authorized API requests and, when you enable publishing, customer video review files to YouTube using your connected Google account.
Essential infrastructure providers: Hosting, database, backup, and security providers that process data solely on our behalf to operate trustSYSTEM, under confidentiality and security obligations.
Authorized trustSYSTEM users for your business: Account owners and managers who administer the connected YouTube integration for that business.
Legal or safety disclosures: When required by law, legal process, fraud prevention, security response, or enforcement of our terms.

We do not share Google user data with advertisers, data brokers, or unrelated third-party apps.

Security and Data Protection Mechanisms for Sensitive Data

Your privacy policy must specify data protection mechanisms for sensitive data. We use administrative, technical, and organizational safeguards to protect Google user data and other sensitive information against unauthorized access, loss, misuse, and disclosure:

Encryption in transit: All communications between users, trustSYSTEM, and Google APIs use HTTPS/TLS.
Encryption at rest: Google OAuth access tokens and refresh tokens are stored encrypted using AES-256.
Access controls: Access to Google user data is restricted to systems and personnel needed to operate the YouTube integration.
Secure transmission of uploads: Video files sent to YouTube are transmitted over encrypted connections.
Logging and monitoring: We log access and security events to detect unauthorized use.
Least-privilege OAuth scopes: We request only the YouTube scopes required for channel linkage and video upload.

No system is perfectly secure. You are responsible for protecting your trustSYSTEM credentials, connected Google account, and authorized users.

Retention and Deletion of Google User Data

Your privacy policy must include information around the retention or deletion of Google user data. Google user data obtained through Google OAuth and the YouTube Data API is personal information. We retain it only while needed to operate the YouTube connection, then delete it as described below.

| Google user data | Retention and deletion | | --- | --- | | OAuth access tokens and refresh tokens | Kept while the YouTube connection is active. Permanently deleted within 7 days of disconnect, Google access revocation, or trustSYSTEM account closure. | | YouTube channel ID, title, and URL | Kept while connected. Permanently deleted within 7 days of disconnect or account closure. | | Temporary upload processing files | Deleted after the YouTube upload workflow completes or fails and is no longer needed. | | Published YouTube videos | Stored on YouTube under your Google account and governed by YouTube policies. trustSYSTEM does not keep a duplicate of the uploaded video after publish unless another enabled feature expressly requires it. |

You may request deletion of Google user data at any time by:

Disconnecting YouTube in your trustSYSTEM dashboard at https://trust.iqwyk.com.
Revoking trustSYSTEM access in your Google Account at https://security.google.com/settings/security/permissions.
Emailing [email protected] with the subject Google User Data Deletion Request (include your business name and account email).
Requesting closure of your trustSYSTEM business account by emailing [email protected].

After disconnect, revocation, account closure, or a completed deletion request, we delete or destroy Google user data we store (OAuth access tokens, refresh tokens, and YouTube channel linkage) from our production systems as soon as possible and within 7 days, unless a longer period is required for legal, security, fraud-prevention, or dispute reasons.

Other Personal Information

We also collect account, business profile, review, usage, and device information needed to operate trustSYSTEM. We do not sell personal information. We may share submitted reviews with the reviewed business and display public content you choose to publish. For questions or privacy requests, email [email protected].

trustSYSTEM Acceptable Use Policy

trustSYSTEM is built to help real businesses collect and share useful customer feedback. This Acceptable Use Policy explains what is and is not allowed when you use trustSYSTEM, whether you are a business using trustSYSTEM or a reviewer submitting feedback about a business.

This policy works together with the trustSYSTEM Business Terms, the trustSYSTEM Reviewer Terms, and this Privacy Policy.

1. Review Integrity

Reviews must reflect genuine first-hand experiences. Do not post, request, buy, sell, trade, or arrange fake reviews. Do not use trustSYSTEM to manipulate ratings, hide meaningful negative feedback, or mislead customers.

You may ask customers to leave reviews, but any incentive must be lawful, modest, and clearly disclosed. You may not require a positive review, offer a reward only for positive feedback, punish customers for negative reviews, or make a review removal part of a refund, discount, or settlement unless required by law and handled transparently.

When a business asks a customer to provide feedback through trustSYSTEM, the request must be clear that the customer is providing feedback to the business being reviewed and to trustSYSTEM as the technology platform. Do not imply that feedback is private, anonymous, internal-only, or unavailable to the business unless the specific review flow clearly says so.

When a reviewer submits feedback through trustSYSTEM, the reviewer must follow the trustSYSTEM Reviewer Terms and should understand that the feedback may be shared with the reviewed business and used as described in the review flow.

2. Respectful Conduct

Do not use trustSYSTEM to harass, threaten, shame, stalk, discriminate against, or abuse another person or business. Do not post hate speech, explicit content, threats of violence, private information, or content intended mainly to provoke or intimidate.

3. Accurate Business Information

Business owners and managers must keep profiles accurate and up to date. Do not misrepresent ownership, identity, licenses, certifications, locations, hours, prices, services, affiliations, endorsements, awards, or customer relationships.

4. Prohibited Content

You may not upload, publish, request, or distribute content that is:

False, deceptive, defamatory, or misleading.
Illegal, unsafe, exploitative, discriminatory, threatening, or abusive.
Spam, repetitive content, gibberish, malware, phishing, or credential-harvesting content.
Private, confidential, or sensitive personal information shared without permission.
Infringing or unauthorized use of someone else's copyright, trademark, likeness, name, image, voice, or other rights.
Advertising, solicitation, or promotional content outside the areas where trustSYSTEM expressly allows it.

5. Videos, Media, and Third-Party Platforms

If you upload, request, approve, or publish photos, audio, or video, you are responsible for obtaining all rights and consents needed from people who appear or are heard in that media. This includes consent for recording, uploading, publishing, and sharing where required by law.

If you invite customers to submit video, audio, photos, testimonials, or similar media, you must make sure the customer understands that the media may be received and used by the reviewed business and may be displayed, published, embedded, shared, or sent to third-party platforms when the customer chooses a flow that allows that use.

If trustSYSTEM publishes content to YouTube or another third-party platform, that platform's own terms, community rules, copyright process, and privacy policy also apply.

6. Platform Security

Do not attempt to bypass, probe, overload, reverse engineer, scrape, automate, abuse, or interfere with trustSYSTEM, its APIs, review systems, ranking systems, moderation systems, accounts, OAuth connections, or third-party integrations.

Do not use stolen credentials, shared accounts without authorization, fake identities, bots, or automated review activity.

7. Enforcement

We may review, label, remove, limit, suspend, or terminate content, accounts, profiles, reviews, integrations, or features when we believe this policy has been violated or when action is needed to protect users, businesses, platform integrity, legal compliance, or QWYK iSoft.

We may also preserve or disclose information when required by law or when needed to investigate fraud, abuse, security incidents, or policy violations.

8. Contact

Questions, privacy requests, Google user data deletion requests, or reports about trustSYSTEM content can be sent to [email protected].

QWYK iSoft dba IWYNO FINWORKS LLC
Austin, Texas
Application: https://trust.iqwyk.com
Organization: https://iqwyk.com