Privacy Policy

• Account data: email address and login credentials (including basic information provided via third-party Google sign-in).
• Analysis data: the brand name, website URL, industry, and keywords you enter, used to run visibility analyses.
• Usage data: activity logs, number of analyses, device and browser information, IP address, and other technical records.
• Payment data: subscription and transaction records (card numbers are handled by the payment processor; we do not store full card numbers).

• to provide, maintain, and improve the Service and analysis reports;
• to process subscriptions, payments, and customer support;
• to send service notices and necessary billing messages;
• to perform de-identified statistical analysis to optimize the product.

We do not sell your personal data to third parties, nor do we use it to train our own models. Legal bases for processing: core service features rely on performance of our contract with you (GDPR Art. 6(1)(b)); optional features such as marketing rely on your consent (Art. 6(1)(a)) or our legitimate interests (Art. 6(1)(f)), and you may withdraw or object at any time. The Service generates visibility reports through automated AI processing; these are advisory and do not produce legal or similarly significant effects on you, and you may request human review. We retain data only for as long as needed to provide the Service and to meet legal requirements (generally for the life of your account and a reasonable period thereafter), after which it is deleted or anonymised.

To provide the Service, we transfer necessary data to the following third-party processors, whose respective privacy policies also apply. In particular, OpenAI and Google process data on servers in the United States and other countries, which involves an international transfer of personal data outside your region; we rely on appropriate safeguards under the GDPR (such as the EU–US Data Privacy Framework where the recipient is certified, or Standard Contractual Clauses) and, where required, your consent, and you may withdraw consent or object at any time:

• OpenAI, Google: running AI platform queries and analysis (sending query prompts and brand names);
• Supabase: database and account authentication services (storing your account and analysis data);
• Stripe: payment and subscription processing (handling transactions and card information).

We use cookies and local storage (localStorage) to maintain your login state, language preference, and basic experience. You can manage or disable cookies through your browser settings, but some features may not work properly as a result.

We retain your data only for as long as necessary to provide the Service and to comply with legal requirements, and we take reasonable technical and organizational measures to protect data security. After an account is deleted, we will delete or de-identify the related data within a reasonable period.

Where the EU/UK GDPR applies, you have the rights of access, rectification, erasure (‘right to be forgotten’), restriction, data portability, objection, and withdrawal of consent, and may lodge a complaint with a supervisory authority. Where the California CCPA/CPRA applies, you have the right to know, delete, correct, opt out of ‘sale’/‘sharing’, limit use of sensitive data, and to non-discrimination for exercising these rights. We do not sell your personal data. To exercise any right, email service@triloai.org; we respond within the period required by law.

This section supplements the above and applies to California residents under the California Consumer Privacy Act, as amended by the CPRA. In the preceding 12 months we have collected the following categories of personal information, from you directly and automatically through your use of the Service, for the business purposes described in Section 2 (providing and securing the Service, billing, and support):

Categories of personal information collected

• Identifiers: email address, account/login identifiers, and IP address.
• Commercial information: subscription plan, credits, and transaction records (card numbers are handled by Stripe; we do not store them).
• Internet or network activity: activity logs, number of analyses, and device/browser information.
• Content you submit: brand names, website URLs, industry, and keywords you enter to run analyses.

Your California rights

• Right to know / access the categories and specific pieces of personal information we have collected about you;
• Right to delete personal information we hold, subject to legal exceptions;
• Right to correct inaccurate personal information;
• Right to opt out of the ‘sale’ or ‘sharing’ of personal information — note we do not sell or share your personal information, and do not use it for cross-context behavioral advertising;
• Right to limit the use of sensitive personal information — we do not collect sensitive personal information beyond what is necessary for your account;
• Right to non-discrimination for exercising any of these rights.

To exercise any of these rights, email service@triloai.org. We will verify your identity before responding and will respond within the timeframe required by law (generally 45 days). You may use an authorized agent to submit a request on your behalf, subject to verification. We do not sell your personal information, so no ‘Do Not Sell or Share My Personal Information’ opt-out is required; you may still contact us with any request.

If you have any questions about this Privacy Policy or your personal data, please email service@triloai.org.