Terms of service
Last updated: October 9, 2026
These terms govern your use of TrustPlug: our plugins, our website and related services (together, the "Service"). The Service is operated by TrustPlug, which you can reach at [email protected]. By using the Service you agree to these terms.
They describe the Service as it stands today. Our plugins are in development, so they also say what is not available yet.
1. The Service & our plugins
TrustPlug publishes plugins for Framer. Today:
- Testimonials — displays the Google reviews of a business as a widget, in 23 layouts.
- Social Feed — displays the posts of a public Instagram account as a grid.
- Gatekeeper — allows or blocks content by visitor country, with an optional VPN check.
- Pathfinder — redirects visitors, or suggests a page, by country, language or device.
- Standby Mode — puts your site behind a maintenance screen, with a countdown and an IP whitelist.
- Landmark — shows an interactive Google Map of your address.
- Open Hours — shows whether your business is open, closed or closing soon, from your hours or your Google Business Profile.
- Feedback — a popup, button or side drawer that collects ratings, problems and ideas.
- FAQ — an accordion, card, table, carousel or tabbed list of questions.
We are not affiliated with, endorsed by or sponsored by Google, Instagram, Meta, Apify, Framer or Cloudflare. NASA's public Instagram account and a Paris bookshop's public Google data appear on our demo pages as examples only; neither is affiliated with TrustPlug.
2. Where the Service stands today
Our plugins are in development. Nothing is for sale yet, there are no accounts yet, and the prices shown on this website are indicative, not an offer. The "Join the waitlist" buttons open an email to us; they do not create an account or a commitment on either side. Before accounts or paid plans open, we will update these terms — and our Privacy policy — and say so on this page.
Each plugin's page describes what it does and what it needs. Where a feature depends on something that is not switched on yet (for example VPN detection or Google Calendar sync), the page says so, and we do not promise it before it works.
3. Your account (once accounts open)
You will need a valid email address and must keep your credentials secure. You are responsible for all activity under your account. You must be at least 16, or the age of digital consent in your country, and use the Service for business or professional purposes. You may only connect Google places, Instagram accounts, calendars, domains and sites that you own or are authorized to represent.
4. Plans, billing & refunds
- Every plugin is planned with four plans: Free, Starter, Pro and Lifetime. What each plan includes is listed on the plugin's page and on the Pricing page.
- Free is permanent, not a trial, within its limits (for example the number of reviews, posts, rules or countries, and the layouts available).
- Starter and Pro are billed monthly or yearly, and renew automatically until you cancel. Starter covers one site and Pro up to five. Access continues until the end of the paid period, after which that site goes back to the limits of the Free plan.
- Lifetime is a single payment, with no renewal, that gives you the Pro plan, on up to five sites, with the updates we release for that plugin. "Lifetime" means the lifetime of the plugin, not of a person: if we ever stop offering a plugin, we will give reasonable advance notice.
- We intend to offer a 7-day money-back guarantee on a first purchase. The final conditions, the payment processor and the way taxes are shown will be published here before anything is sold.
- We may change prices with at least 30 days' notice. A change never applies to a billing period that has already started.
5. Acceptable use
You agree not to: show reviews or social content that is not genuinely associated with your business, or fabricate, manipulate or misrepresent ratings; use Gatekeeper or Pathfinder to deny or divert access in a way that breaks the law (including anti-discrimination, consumer-protection, data-protection, sanctions and export-control or accessibility rules); use Feedback or FAQ votes to collect data you are not allowed to collect, or to send spam to a person or a service; circumvent plan limits; resell or sublicense the Service without our authorization; reverse-engineer or disrupt the Service or our API; or use it for unlawful, deceptive or harmful purposes. We may suspend access that violates these rules.
6. Reviews, opening hours & calendar (Testimonials, Open Hours)
We retrieve only publicly available information — a place's reviews and opening hours from Google, and the events of a Google Calendar its owner made public — through Google's interfaces, using our own keys, and cache it temporarily (24 hours for reviews, 6 hours for opening hours, 5 minutes for calendar events). Review content belongs to its authors and to Google. You are responsible for making sure your display of it complies with Google's terms. We cannot guarantee that a given review will stay available, that Google will return every review (it can return only a limited number), or that the opening hours Google holds are correct: check them in your Google Business Profile.
The widget is served, not frozen. A widget on your published site loads its content from our API each time the page is viewed, so it shows current information rather than a copy frozen when you inserted it. It therefore needs our service to be reachable to display that content.
7. Instagram (Social Feed)
- Public content only. We retrieve the public posts of the Instagram account you connect, through a third-party service (Apify). We never ask for your Instagram password and never log in as you.
- Your rights to the content. You may only connect an account you own or are authorized to represent. You are responsible for having the rights to display its posts, captions and images on your site, and for complying with Instagram's and Meta's terms.
- Not real-time. Posts are cached for 24 hours, so your site may lag behind Instagram.
- Availability. Instagram offers no public interface for this and may change or restrict access at any time. We cannot guarantee that any account, post or image will remain retrievable, and an interruption caused by such a change is not a defect in the Service.
- Images and videos are loaded by your visitors' browsers directly from Instagram's servers; we do not host them. Their links can expire, in which case the picture may stop showing until the next refresh.
8. Maps (Landmark)
Landmark displays a Google Map. The map, its data and its behavior belong to Google and are governed by Google's terms. We cannot guarantee that an address will be found or located precisely. If the embed cannot load, the plugin falls back to a plain link to Google Maps.
9. Gatekeeper & Pathfinder: accuracy, fail-open & your responsibility
- Best-effort accuracy. Locating a visitor from their connection is inherently imperfect and can produce false positives and false negatives. We do not guarantee a visitor's true location, nor that every VPN or proxy will be detected. VPN detection is an option that is not switched on yet.
- Fail-open. If a check cannot complete (an outage, a blocked request), the visitor is let through (Gatekeeper) or not redirected (Pathfinder), so your site is never locked out. Blocking and redirecting are therefore not guaranteed at all times, and you accept this default.
- Not a security solution. These plugins steer and filter traffic; they run in the visitor's browser and are not a firewall. A determined visitor can get around them.
- Your responsibility. You are solely responsible for the rules you configure and for making sure they, and any notice you owe your visitors, comply with the laws that apply to you and to them.
10. Standby Mode
Standby Mode shows a maintenance screen, or redirects, to visitors who are not on your whitelist. It runs in the visitor's browser, so it is a courtesy screen and not an access barrier. If the check of a visitor's IP address cannot complete, that visitor — you included — sees the maintenance screen; if its optional remote switch cannot be reached, it keeps using the settings in your page. You are responsible for keeping the whitelist valid: if your IP address changes you may need to add the new one to see your site again. The whitelist is part of your published page's code, so only list addresses you are comfortable having there.
11. Feedback & FAQ
Feedback and FAQ votes are delivered to the webhook address you enter — Slack, Discord, Microsoft Teams, Zapier, Make, n8n or a Google Sheet. You are responsible for that destination service, for what you do with the answers, and for telling your visitors what you collect and why. Delivery depends on that service being reachable, and we cannot guarantee it. Our spam protection (a hidden field and a limit of 6 submissions per 10 minutes) is best-effort. Questions and answers you write in FAQ remain yours; you are responsible for their accuracy.
12. Data protection & your visitors
Our handling of personal data is described in our Privacy policy, which forms part of these terms. For data about your own site's visitors that a plugin processes (for example the location check, or a Feedback answer), you are the data controller and TrustPlug acts as your processor. You are responsible for having a lawful basis and for giving any privacy notice your jurisdiction, including the GDPR, requires. A data-processing addendum is available on request at [email protected].
13. Intellectual property
The TrustPlug software, plugins, branding and website are our property. We grant you a non-exclusive, non-transferable, revocable license to use the plugins on sites you own or manage, while you respect these terms. Content you supply, and review or social content, remains yours or its authors'.
14. Availability & disclaimer
The Service is provided "as is" and "as available". It depends on third parties — Google, Apify, Instagram and Meta, Framer, Cloudflare and the destinations you choose for Feedback — and we cannot guarantee uninterrupted availability or that those providers will not change or restrict their interfaces. To the maximum extent permitted by law, we disclaim all warranties, express or implied.
15. Limitation of liability
To the maximum extent permitted by law, we are not liable for indirect, incidental or consequential loss, lost profits or lost data, and our total liability for any claim is limited to the amounts you paid us in the 12 months before the claim. Nothing in these terms excludes liability that cannot be excluded by law, including your statutory consumer rights.
16. Termination
You may stop using the Service at any time and, once accounts exist, delete your account by writing to [email protected]. We may suspend or end access for a breach of these terms, with notice where reasonable. When access ends, your license ends; the Privacy policy governs what happens to data.
17. Changes & governing law
We may update these terms as the Service evolves; changes are posted here with an updated date, and significant ones are announced by email to people who have written to us. Using the Service after a change means you accept it. These terms are governed by French law. The mandatory consumer-protection rules of your country of residence still apply, and consumers may use the dispute-resolution routes available in their country.
18. Contact
TrustPlug — [email protected]