Privacy Policy
LAST UPDATED: 27 MAY 202601. What this policy covers
This policy describes how Triopia handles data you provide when you create a triopia.me handle, communicate through the workspace, and use connected tools such as the inbox, calendar, contacts, video, and documents.
02. You own your content
You retain ownership of the messages, files, contacts, calendar entries, video recordings, and other content you upload or generate inside your Triopia workspace. Triopia does not claim rights over your content.
03. Data we collect
We collect the information you provide to create and operate your account: your handle, email address, billing details, and the content you create or send through Triopia. We also collect basic technical information such as IP address, browser, and timestamps required to run the service.
04. Authentication is passwordless
Triopia uses passwordless sign-in. You access your workspace through one-time email magic links. We do not store passwords, which removes one of the most common attack surfaces in software.
05. Encryption in transit
Traffic between your device and Triopia is encrypted using TLS over HTTPS, terminated at Cloudflare. We do not accept unencrypted connections to the application.
06. Encryption at rest
Data at rest is encrypted using AES-256, the default encryption applied by Cloudflare D1 (our database) and Cloudflare R2 (our object storage). We rely on Cloudflare to manage the underlying disk-level encryption keys for these services.
07. Where your data is stored
Triopia data is stored on Cloudflare infrastructure. Cloudflare distributes storage across its network of data centers; the precise geographic placement of D1 databases and R2 buckets is governed by Cloudflare’s product behavior at the time of writing.
08. How we use third-party model providers
When you use assistant features such as briefings, drafts, or summaries, we send the relevant context to our AI model providers (for example, Anthropic or Google) over secure connections. These requests are made for inference only. We do not train AI models on your conversations.
09. Third-party services we use
Triopia is built on Cloudflare (hosting, database, storage, edge). We use Stripe for payment processing. We use selected AI model providers for assistant features. Each of these providers has its own privacy policy, and your data is shared with them only to the extent required to deliver the corresponding feature.
10. Sharing with third parties
We do not sell your personal information. We do not share your content with advertisers. We only disclose data when required to operate the service, comply with a valid legal request, or protect our rights and the safety of users.
11. Access controls inside Triopia
Each workspace is keyed to its owner. Triopia staff do not routinely read your messages, files, or conversations. Access to production systems is restricted to a small number of authorized personnel and used only when needed to operate, repair, or secure the service.
12. Your handle and identity
A triopia.me handle is unique and tied to your account. You may change your handle up to two times during the lifetime of your account. After that, a new handle requires creating a new account.
13. Children
Triopia is built for adult professionals. The service is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has created an account, contact us and we will remove it.
14. Data export
You can request an export of the content in your workspace, including messages, contacts, calendar entries, and documents. We provide the export in a standard, machine-readable format so you can take your data with you.
15. Deleting your account
You can delete your account from settings. When you delete your account, we remove your workspace content from our active production systems. Residual copies may remain in routine backups for a limited time before being overwritten in the normal backup rotation.
16. Email and support communication
We will email you about account activity, security events, billing changes, and product updates. You can opt out of non-essential product emails at any time. We will still send essential service emails (for example, billing receipts and security notifications) as long as you have an account.
17. Security event notifications
If we detect a security event that materially impacts the data in your workspace, we will notify the affected workspace owner by email. We do not commit to a fixed notification window beyond the requirements of applicable law.
18. Changes to this policy
We may update this policy as the product changes. Material changes will be announced inside the product or by email to workspace owners. Continued use of Triopia after a change means you accept the updated policy.
19. Contacting us
For privacy questions, requests, or concerns, contact us through the support channel inside the workspace or via the contact details listed on triopia.com.