Draft — not yet reviewed by a lawyer; it may change.
Privacy Policy
1. Purposes
- Identity checks (email codes), creating and running teams, billing and payment, support, statutory records, service emails.
2. Data we process
This clause changed on 2026-10-31. A lawyer has not reviewed it yet.
- Required: email, contact name, company name, account type, access records (IP, time).
- When paying: order data (plan, amount, order number, payment status). The business registration number is optional. Card and other payment data go to Polar Software, Inc., the seller, under its own privacy policy, not to us.
- Optional: consent to news about features and offers.
- Chats and files inside a team are the customer’s data; we process them as a processor on the customer’s instructions.
3. Retention
This clause changed on 2026-10-31. A lawyer has not reviewed it yet.
- Payment, contract and consent records 5 years; support and dispute records 3 years; operator access records 2 years; IPs in access records 1 year; application logs 30 days.
- Team data is destroyed 30 days after cancellation (14 days for a team canceled during the 14-day trial). A free team that is not used for 90 days is destroyed then (Terms, section 2).
4. Destruction
- Data is erased irrecoverably after retention ends; deleting the backup keys (crypto-shredding) makes remaining backups unreadable.
5. Processors and transfers abroad
This clause changed on 2026-10-31. A lawyer has not reviewed it yet.
- The current list is always on the "Processors and transfers abroad" page.
- Team files and the primary database and its replica are stored on servers in the AWS Seoul region (ap-northeast-2). Encrypted off-site backups of teams on a paid plan or on the 14-day trial are kept in Cloudflare R2, whose location is not guaranteed (Asia-Pacific location hint). Content needed to produce AI answers is sent to the AI company the customer connects (United States).
6. Your rights
- You may ask for access, correction, deletion or suspension of processing at support@trina.app. You can withdraw marketing consent anytime.
7. Privacy officer
- Name: to be added · Contact: privacy@trina.app to be added
8. Cookies
- Only a login session cookie and a language cookie. No advertising or tracking cookies.
9. Security measures
- TLS in transit, envelope encryption of sensitive values (AES-256-GCM), encrypted backups (age), least privilege, approved/recorded/audited operator access, breach notice within 72 hours.