Privacy policy
Last updated: November 14, 2026
TrustFill lets a business text a caller a link, so the caller can type or autofill their own contact details while they're on the phone. This policy explains what personal information TrustFill handles, why, and the choices you have. It covers this website (trustfill.com), the TrustFill app used by businesses, and the form callers fill in.
TrustFill is a service of Fieldtest Labs LLC, a Minnesota limited liability company ("TrustFill", "we" or "us"). Where TrustFill decides how personal information is used, as described below, Fieldtest Labs LLC is the company responsible for it. You can reach us at support@trustfill.com or by mail at Fieldtest Labs LLC, 842 Woodlawn Ave, Saint Paul, MN 55116.
Two roles
- For callers' details, TrustFill works for the business. When you fill in a form a business sent you, the business decides what to ask and what to do with your answers. TrustFill stores and processes them on the business's behalf, as its service provider. To ask about or delete those details, contact the business; we help them do it.
- For everyone else, TrustFill decides. That covers people who visit this website or apply for early access, and the business owners and staff who use TrustFill.
What we collect
When your business uses TrustFill
Business users' names, email addresses and roles; the business's name, phone number, address and website, which we use to verify it; and how the app is used, so we can run and improve it.
When you fill in a business's form as a caller
The answers you give and your phone number, held for the business. If you choose to save your details with a PIN, so you can reuse them with another business, that saved profile is yours, kept apart from any business's records.
How we protect it
- Callers' details and saved profiles are encrypted when they're stored, and each business's records have their own key.
- Phone numbers are stored as one-way codes wherever we only need to look them up.
- Our logs record events, not your details.
- Payment card numbers never reach TrustFill.
Texts
TrustFill texts a caller only after they say yes on the call, and records that yes for 4 years, with the number as a one-way code. Reply STOP to any text from TrustFill to stop them all. Phone numbers, and anyone's agreement to get texts, are never sold or shared with anyone for their marketing. How texts from TrustFill work.
Analytics and IP addresses
We use our own analytics service, which forwards usage events to Amplitude. For website visitors whose choices allow it, and for signed-in business users, this includes the IP address, so location and bot filtering work. We never send callers' IP addresses, device IDs or answers to any analytics service. What we learn from callers' sessions is limited to counts and timings, such as how many fields were autofilled, with nothing that identifies the caller.
We send account email, such as confirmations, invitations and sign-in notices, through Postmark. Product news goes through Loops, and only to people who've agreed or, in the US, who didn't untick the box. Every news email has a one-click unsubscribe.
Who we share it with
We never sell personal information, and callers' details are never used for advertising. We use these service providers (subprocessors), each under a written agreement:
| Provider | What for | What they handle |
|---|---|---|
| Cloudflare | Hosting, the database, spam protection on forms (Turnstile) and sign-in for TrustFill staff | Everything TrustFill stores, encrypted where described below; IP addresses in access logs |
| WorkOS | Sign-in for business users | Business users' names and email addresses |
| Postmark | Account email, such as application updates, invitations and sign-in notices | Applicants' and business users' names and email addresses |
| Twilio | Text messages to callers and checks on business phone numbers | Callers' phone numbers and the text sent; business phone numbers |
| Google Workspace and Sheets (reviewing applications), Analytics, Tag Manager and Ads (this website, with your consent where required) and Places (business address suggestions) | Applicants' answers; website usage; the addresses businesses type | |
| Amplitude | Product analytics | Usage events with opaque IDs, device and location context, and IP addresses of website visitors and business users (never callers') |
| Loops | Product news email, only for people who've agreed to it | Names, email addresses and application choices such as trade and region |
These providers may process information in the United States and other countries.
How long we keep it
- Early-access applications: 12 months, unless you become a customer.
- Callers' details held for a business: until the business deletes them, or 30 days after it closes its account.
- A caller's saved profile: until you delete it, or 24 months after it was last used.
- Records of email consent: 3 years after the consent ends, as proof.
- Records of a caller's yes to a text: 4 years, as proof. Numbers that replied STOP: until they reply START.
Your choices and rights
Depending on where you live, you can ask to see, correct or delete your personal information, and to stop analytics or marketing. Browsers that send a Global Privacy Control signal are treated as opting out of marketing. To make a request, email support@trustfill.com. If you're a caller, we'll pass your request to the business that holds your details.
Contact
Questions about this policy: support@trustfill.com, or by mail to Fieldtest Labs LLC, 842 Woodlawn Ave, Saint Paul, MN 55116.