Home

Privacy Policy

Effective date: October 26, 2026

Atrium Works, Inc. (“Atrium Works”, “we”, “us”, or “our”) operates the wiretrust.io website and the WireTrust service (collectively, the “Service”). This Privacy Policy describes how we collect, use, share, and protect information in connection with the Service.

I. Information We Collect

Personal information. When you join our waitlist, create an account, or otherwise interact with the Service, we may collect information such as your email address, name, and payment-related details. When you subscribe, you enter your card or bank account details on pages hosted by Stripe; we receive from Stripe only limited details, such as the card brand, the last four digits and the expiry date, and the status of your payments. As part of identity verification (see Section II), Stripe collects your name, email address, phone number, address, facial images, identity document images, and ID numbers on our behalf.

How you found us. When you join our waitlist, we also record how you reached our website: the domain of the website that linked to us (not the page) and any campaign tags in the link you followed, such as utm_source. We use this only to understand which channels bring people to WireTrust.

Non-personal information. We may collect anonymous usage data, browser and device information, referral URLs, platform type, and aggregated click counts in connection with your use of the Service.

Cookies and Similar Technologies. The Service uses session and persistent cookies and similar client-side storage technologies (such as localStorage) for purposes such as remembering your interface preferences (for example, light or dark theme) and supporting authenticated sessions. You can configure your browser to refuse cookies or clear localStorage; doing so may limit your ability to use some features of the Service.

II. Identity Verification & Biometric Data (Stripe Identity)

We use Stripe to verify your identity. Stripe collects name, email, phone number, address, facial images, identity document images, and ID numbers as well as advanced fraud signals and information about the devices that connect to its services. Stripe shares this information with us and also uses this information to operate and improve the services it provides, including for fraud detection. You may also choose to allow Stripe to use your data to improve Stripe’s biometric verification technology. You can learn more about Stripe and read its privacy policy at https://stripe.com/privacy.

If you publish wiring instructions on WireTrust to receive funds (a “receiver”), our standard verification uses Stripe Identity to check an identity document and compare a selfie with the document photo. WireTrust offers no other way to verify a receiver’s identity.

We record the verification method, completed checks, Stripe report reference, outcome and verification time. WireTrust does not retain copies of ID images or biometric templates; we retain the verification records described above. Verification does not establish bank-account ownership, organizational authority or the correctness of wire instructions.

Stripe retains a copy of all the data provided as part of a verification. You may also have consented to allow Stripe to use your data to improve their technology. When you ask us to delete your information, we ask Stripe to redact your verification data (see Section VIII). You can delete your information from Stripe’s servers or revoke your consent by contacting Stripe using the form at Stripe support: https://support.stripe.com.

Verification starts with a Stripe Identity document check and a selfie. If you do not consent to these checks, you cannot complete identity verification on WireTrust.

III. How We Use and Share Information

We use the information we collect to operate the Service, communicate with you about the Service, provide customer support, and detect and prevent fraud or abuse. We share information with service providers and vendors that perform functions on our behalf, including Stripe (for payment processing and identity verification) and Amazon Web Services (for hosting and infrastructure).

We do not sell personal information for marketing purposes. We may disclose information when required by valid legal process or an enforceable government request, and in connection with a corporate transaction such as a merger, acquisition, or sale of assets.

IV. How We Protect Information

We use commercially reasonable safeguards designed to protect the information we hold, including transport-layer encryption (TLS/HTTPS), network firewalls, and access controls. You are responsible for safeguarding the password used to access your account. No technical control eliminates the risk that information may be accessed by unauthorized parties; you accept these inherent risks in using internet-delivered services.

V. Authentication & Session Usage

The Service uses session tokens to maintain authenticated sessions. Users must be authenticated before being presented with the Stripe Identity verification flow.

VI. Analytics & Cookies

The Service may use first-party and third-party analytics tools to understand aggregate usage of the Service. We do not knowingly use advertising third parties on the Service. Where analytics cookies are used, you may opt out by configuring your browser to reject cookies or by following any opt-out mechanism documented within the analytics provider’s own privacy policy.

The WireTrust web app counts page views by type of page (for example, “a payment request page”). It sets no cookie for this and records neither who viewed the page nor which account, request, or instruction it showed.

Aggregate page-view analytics via Cloudflare Web Analytics. Our website at wiretrust.io uses Cloudflare Web Analytics to measure how many visits each page receives, approximate visitor counts, top referring sites, and browser, operating-system, and country-level information. This data is aggregated and not tied to any identifier we can use to recognize you across visits. According to Cloudflare, it processes the IP address of each request as part of routing the beacon, but does not store it as part of analytics data. See Cloudflare’s privacy policy for details.

VII. Infrastructure Providers

The Service is delivered using the following infrastructure providers, each of which has its own privacy policy:

VIII. Retention

We keep personal information only for as long as we need it for the purposes described in this Privacy Policy. The periods below apply to the Service.

  • Account information. Your account and profile, your sign-in methods and passkeys, your organization and membership records, your wire instructions, and your wire requests are kept while your account is open. We delete or anonymize them 90 days after your account closes. If you ask us to delete your information (Section XI), we do so without waiting for that period. Where a record is shared with another person, such as an organization membership or a wire request, we remove your details from it and keep the rest of the record for the other person.
  • Open disputes and fraud claims. While a payment dispute or a fraud claim involving you is open, we keep the records it concerns, including your identity verification data held by Stripe. When it is resolved, we delete or anonymize them as described in this section.
  • Billing and tax records. Your Stripe customer record and invoices, and our records of your plan, subscription, and billing history, are kept for 7 years from the end of the tax year of your last billed transaction, to meet tax obligations. A deletion request does not shorten this period.
  • Integrity records. Records that show what happened in the Service and that it was not changed afterwards are kept for 7 years from when each record was created, and then deleted. They include our audit log, the signatures on wire instructions, the history of changes to wire instructions, and the record that your identity was verified. Changing them would break their integrity, so a deletion request does not remove them. They do not contain your name or email address. They contain internal identifiers and a keyed hash of your email address, which we treat as personal information.
  • Identity verification data held by Stripe. Stripe keeps the data collected during identity verification under its own retention practices (see https://stripe.com/privacy). When you ask us to delete your information, we ask Stripe to redact your verification data, unless a dispute or fraud claim described above is open.
  • Waitlist. If you join our waitlist, we delete your entry, including how you found us, 12 months after you joined or when you create an account, whichever comes first.
  • Sign-up access. If we add your email address to the list of addresses allowed to create an account, we remove it once your account exists, or after 90 days if it is not used.
  • Short-lived records. Sign-in session records, rate-limiting records (which include your IP address), invitations, notifications, and our copies of payment events from Stripe expire automatically within 90 days.
  • Logs. Our service logs are kept for 90 days. An archive copy of the main service log is kept for 400 days.
  • Backups. Our database backups keep deleted information for up to 35 days after it is deleted.

IX. Children’s Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to us, please contact us at contact@wiretrust.io and we will take reasonable steps to delete that information.

X. Links to Other Websites

The Service may contain links to third-party websites. When you follow a link to a third-party site, the privacy policy of that site applies, and we are not responsible for the privacy practices of those third parties.

XI. Your Rights

Subject to applicable law, you may have the right to request access to, correction of, or deletion of personal information we hold about you. To make such a request, please contact us at contact@wiretrust.io. We will respond within a reasonable time after verifying your identity, as required by applicable law.

XII. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will provide reasonable advance notice by email or by posting a prominent notice on the Service. Non-material changes become effective when posted. You are encouraged to review this page periodically.

XIII. Contact

Questions or requests regarding this Privacy Policy may be sent to contact@wiretrust.io.

Effective date: October 26, 2026