Privacy Policy

1. Introduction

TrelliOS, Inc. ("TrelliOS," "we," "our," or "us") is a Delaware corporation that operates the TrelliOS Platform — an AI Workforce Operating System that helps businesses build, govern, and scale AI-powered teams. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you visit our website at trellios.ai, use our platform, or otherwise interact with us.

Please read this policy carefully. By accessing or using our services, you acknowledge that you have read and understood these practices. If you do not agree, please do not use our services.

2. Information We Collect

Information you provide directly

We collect information you provide when you create an account, contact us, or use the TrelliOS Platform. This includes:

• Name, email address, and contact details when you register or request access
• Company name, job title, and company size when you complete onboarding
• Payment and billing information when you subscribe to a paid plan
• Communications you send us, including support requests and feedback
• Content you create, upload, or otherwise submit through the platform

Information collected automatically

When you use our website or platform, we automatically collect certain technical information:

• Log data including IP address, browser type, pages viewed, and referring URLs
• Device information such as operating system, hardware model, and unique device identifiers
• Usage data including features accessed, actions taken, and session duration
• Performance data including error reports and latency metrics
• Cookies and similar tracking technologies (see Section 7)

Information from third parties

We may receive information about you from third-party services that you connect to the TrelliOS Platform, such as OAuth integrations, CRM platforms, or communication tools. The scope of that information depends on the permissions you grant when connecting those services.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, maintain, and improve the TrelliOS Platform
• Process transactions and manage your account
• Authenticate your identity and prevent unauthorized access
• Send transactional communications, including account notifications and security alerts
• Respond to your questions and provide customer support
• Send product updates, feature announcements, and marketing communications (with your consent where required by law)
• Analyze usage patterns to understand how our platform is used and to improve it
• Train and improve AI models used in the TrelliOS Platform, in accordance with our data processing agreements
• Comply with legal obligations and enforce our terms of service
• Detect, investigate, and prevent fraud, abuse, and security incidents

4. Legal Bases for Processing

Where applicable law requires a legal basis for processing personal data, we rely on the following:

• Contract performance: Processing necessary to provide the services you have requested or entered into a contract to receive
• Legitimate interests: Processing necessary for our legitimate business interests, such as improving our platform and preventing fraud, where those interests are not overridden by your rights
• Consent: Processing based on your specific consent, such as for certain marketing communications
• Legal obligation: Processing required to comply with applicable laws and regulations

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

Service providers

We share information with third-party vendors and service providers that help us operate our business and deliver the TrelliOS Platform, including cloud infrastructure providers, payment processors, analytics services, and customer support tools. These vendors are contractually obligated to use your information only as directed by us and in accordance with this policy.

Business transfers

If TrelliOS is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of company assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

Legal requirements

We may disclose your information when we believe in good faith that disclosure is necessary to comply with applicable law or a valid legal process, protect the rights, property, or safety of TrelliOS, our users, or others, or detect, prevent, or address fraud, security, or technical issues.

With your consent

We may share your information in other ways when you direct us to or give us your explicit consent.

6. Subprocessors and Third-Party Services

The TrelliOS Platform relies on third-party subprocessors to provide core functionality. Our current subprocessors include, but are not limited to:

• Anthropic / OpenAI: Large language model inference and AI capabilities
• Google Cloud: Cloud infrastructure, compute, and storage
• Cloudflare: Network security, CDN, and edge delivery
• Stripe: Payment processing and billing

We maintain a current list of subprocessors and will provide updates to customers upon request. Enterprise customers may request a copy of our subprocessor agreements by contacting legal@trellios.ai.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to operate our website, understand how you use it, and improve your experience. The types we use include:

• Strictly necessary cookies: Required for authentication, session management, and core platform functions. These cannot be disabled without affecting functionality.
• Analytics cookies: Help us understand how visitors interact with our website by collecting and reporting information anonymously.
• Preference cookies: Remember your settings and choices to personalize your experience.

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our website and platform. Where required by law, we will obtain your consent before placing non-essential cookies.

8. Data Security

We implement technical and organizational measures designed to protect your information against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit and at rest, access controls, network security monitoring, and regular security assessments.

No method of transmission over the internet or electronic storage is completely secure. While we work to protect your information, we cannot guarantee absolute security. If you believe your account or information has been compromised, please contact us immediately at legal@trellios.ai.

9. Data Retention

We retain personal information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. When determining retention periods, we consider the nature of the data, the purposes for which it was collected, and applicable legal requirements.

When you close your account, we will delete or anonymize your personal information within a commercially reasonable period, except where retention is required by law or legitimate business necessity. Account closure requests should be submitted to legal@trellios.ai.

10. Your Privacy Rights and Choices

Depending on where you reside, you may have certain rights regarding your personal information, including:

• Access: Request a copy of the personal information we hold about you
• Correction: Request that we correct inaccurate or incomplete information
• Deletion: Request that we delete your personal information, subject to certain exceptions
• Portability: Request that we provide your personal information in a structured, machine-readable format
• Objection: Object to our processing of your personal information in certain circumstances
• Restriction: Request that we restrict processing of your personal information

To exercise any of these rights, please contact us at legal@trellios.ai. We will respond to verified requests within the timeframe required by applicable law. We may need to verify your identity before fulfilling your request.

You may opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email we send, or by contacting us directly.

11. California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with specific rights regarding your personal information.

In the past 12 months, we have collected the categories of personal information described in Section 2 of this policy. We use this information for the business purposes described in Section 3. We do not sell or share personal information for cross-context behavioral advertising.

California residents have the right to know, delete, correct, and opt out of the sale or sharing of their personal information, and the right to non-discrimination for exercising their privacy rights. To submit a California privacy request, contact us at legal@trellios.ai. For requests submitted through an authorized agent, we may require additional verification.

12. EEA, UK, and Swiss Residents

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) or equivalent local laws may apply to our processing of your personal information. Our legal bases for processing are described in Section 4.

You have the right to lodge a complaint with your local data protection authority if you believe our processing of your personal information violates applicable law. We are committed to working with you to resolve any concerns before you contact a supervisory authority.

For cross-border transfers of personal data from the EEA or UK to the United States, we rely on approved transfer mechanisms including Standard Contractual Clauses. For information about our transfer mechanisms, contact legal@trellios.ai.

13. Children's Privacy

The TrelliOS Platform is designed for business use and is not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected information from a child under 16, please contact us at legal@trellios.ai and we will take prompt steps to delete that information.

14. International Data Transfers

TrelliOS is headquartered in the United States, and we process and store data on servers located in the United States and other countries. If you are located outside the United States, your information will be transferred to, processed, and stored in the United States and other jurisdictions where our service providers operate. By using our services, you acknowledge that your information may be transferred to countries with different data protection laws than your own.

15. Third-Party Links and Integrations

Our website and platform may contain links to third-party websites and may integrate with third-party services. This Privacy Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you connect to the TrelliOS Platform.

16. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last updated" date at the top of this policy and, where appropriate, by providing additional notice such as an in-platform notification or an email to the address associated with your account. Your continued use of our services after any changes take effect constitutes acceptance of the revised policy.

17. Contact Us

If you have questions about this Privacy Policy or how we handle your personal information, please contact our privacy team:

TrelliOS, Inc.
Attn: Legal / Privacy
legal@trellios.ai

We will respond to all legitimate inquiries within a reasonable timeframe.