Last updated: August 27, 2026
Privacy Policy
This policy describes how Trusgent, operated from Hong Kong SAR, handles your personal data as a Trust Layer for AI, consistent with the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486). This summary is provided for transparency and does not by itself constitute legal advice for your specific situation.
1. Introduction
This Privacy Policy explains how Trusgent ("we", "us"), operated by HONG KONG METAAGENT TECHNOLOGY LIMITED (香港虛影科技有限公司, CR No. 76375164) from the Hong Kong Special Administrative Region, collects, uses, discloses, and protects personal data when you use our Trust Layer for AI (Agent Cards, verification, APIs, facades, and related features). The China entity 苏州虚影科技有限公司 (USCC 91320506MACLQWKA6E; ICP 苏ICP备2023032170号) supports mainland operations. We handle personal data in accordance with the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) and, where applicable, other data-protection laws relevant to our global users.
2. Personal data we collect
We collect: (a) account data (name, email, password hashes, locale, currency); (b) business and identity data you add to an Agent Card (company name, profile fields, links); (c) verification data (for example domain ownership or identity / licence documents you submit for human review); (d) Hong Kong register claim and linkage data when you claim an official open-data record; (e) reviews and proof files; (f) optional matching, messaging, or AI-visibility inputs you submit; (g) payment data processed by Stripe when applicable; (h) API usage and security logs; and (i) technical data such as IP address, device, and audit logs (including aggregated crawler / bot hit statistics on public pages).
3. Purposes of processing
We process personal data to: create and operate accounts and Agent Cards; run verification and scoring; publish structured trust and register data for people and partner AI systems; provide APIs and MCP tools; facilitate optional payments, verification fees, and escrow; secure the Service; prevent fraud and abuse; measure public-page reach by AI crawlers in aggregate; comply with legal obligations; communicate with you; and improve the Service. Where we rely on consent (for example non-essential cookies), you may withdraw it at any time.
4. AI processing
Some features use AI models (for example to help complete profiles, extract data from documents you upload, or power optional assistants). Content you submit to these features may be processed by AI model providers acting on our behalf under confidentiality terms. We do not use your private documents to train public models. Partner large language models that call our public APIs receive only the public fields you choose to publish.
5. How we share data
We share personal data with service providers (sub-processors) who process it on our behalf, including Stripe (payments and escrow), Qiniu Cloud (file storage), Neon (database hosting), email providers (transactional email), and AI model providers. We may also disclose data to comply with law, enforce our Terms, protect rights and safety, or in connection with a corporate transaction. We do not sell your personal data.
6. International transfers
We operate globally and our providers may process data in jurisdictions outside your own, including outside Hong Kong. Where we transfer personal data, we take steps intended to ensure an appropriate level of protection consistent with applicable law and our agreements with providers.
7. Cookies & analytics
We use strictly necessary cookies to operate the Service and, subject to consent where required, functional and analytics cookies (for example Google Analytics) to understand usage. See our Cookie Policy for details and choices.
8. Data retention
We retain personal data for as long as needed to provide the Service, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. Audit logs and transaction records may be retained longer for security and compliance. When data is no longer required, we delete or anonymize it.
9. Security
We use technical and organizational measures including encryption in transit, access controls, encryption of stored provider secrets, signed time-limited URLs for private files, and audit logging. No method of transmission or storage is perfectly secure, but we work to protect your data and to respond to incidents.
10. Your rights
Subject to applicable law, you may request access to, correction of, or deletion of your personal data, object to or restrict certain processing, and request portability. Hong Kong residents have rights under the Personal Data (Privacy) Ordinance, including data-access and correction requests. To exercise your rights, contact [email protected]; we may need to verify your identity.
11. Children's privacy
The Service is not directed to children under 18, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.
12. Direct marketing
We will not use your personal data for direct marketing without your consent where consent is required. You can opt out of marketing communications at any time using the unsubscribe link or by contacting us. Transactional and service messages are not marketing.
13. Third-party links
The Service may link to third-party sites and embed third-party content (such as Stripe Checkout). Their privacy practices are governed by their own policies, and we are not responsible for them.
14. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be notified through the Service or by email where appropriate, and the "last updated" date will be revised.
15. Contact & complaints
For privacy questions, requests, or complaints, contact [email protected]. Hong Kong users may also contact the Office of the Privacy Commissioner for Personal Data (PCPD) if they believe their rights under the Ordinance have not been respected.