Privacy Policy

Tmi Peltokorpi Patrik (business ID 3589265-1), Salmenhaantie 28 A, 67300 Kokkola, Finland

Privacy questions and requests: [email protected]

• Controller: for the data of people who use Trellis (user accounts, organization memberships, billing, support, security logs) and of visitors to this website.
• Processor: for the records our customers store in Trellis, such as their clients' contact persons, quotes, orders and notes. For that data, each customer organization is the controller, and we process it only on their behalf, as described in section 7 of our Terms of Service. If your details are stored in a Trellis customer's CRM and you want to exercise your rights, please contact that company; we will assist them.

• Account data: your name, email address, a hashed version of your password, and preferences such as language and tutorial settings.
• Organization data: the organizations you belong to, your role in each, and invitations you send or receive.
• Billing data: which organization is subscribed, to which plan, subscription status and Paddle customer and subscription identifiers. Payment card and bank details are handled by Paddle and never reach us.
• Integration data: records of the API and MCP access keys you create (the keys themselves are stored only in hashed form) and the permissions you give them.
• Technical and security data: IP address, browser type, times of requests and security events in our server logs, and the result of the Cloudflare Turnstile bot check on registration and public forms.
• Usage statistics: which pages of this website and the app are viewed, the referring website, and your browser, operating system, device type and country. We collect these with our own analytics tool running on our own servers, without cookies and without storing IP addresses. Visitors are counted with a pseudonymous identifier that changes monthly and cannot be used to identify you. In the app, record identifiers are removed from page addresses, so the statistics never show which clients, quotes or orders you view.
• Communications: emails you send us and our replies.

• To provide the Service under our contract with you or your organization: creating and running accounts and organizations, billing, and sending service emails such as invitations and password resets (GDPR Art. 6(1)(b)).
• To keep the Service secure, prevent abuse and bots, investigate errors, and understand how the website and the Service are used so that we can develop them. This is our legitimate interest in operating a secure, working and improving service (Art. 6(1)(f)).
• To meet legal obligations such as bookkeeping and tax rules (Art. 6(1)(c)).
• To answer your messages (Art. 6(1)(b) or (f), depending on the matter).

We do not sell personal data, show advertising, use tracking or analytics cookies, or make decisions about you based solely on automated processing.

We use the following service providers to run Trellis:

• Hetzner Online GmbH (Germany): server hosting. All Trellis application data, including uploaded files, is stored in Hetzner's data centre in Finland.
• Paddle.com Market Ltd (United Kingdom): payment processing and subscription billing, as Merchant of Record. Paddle is an independent controller of the data it collects at checkout under its own privacy notice. Prices on this website's pricing section also come from Paddle: when you scroll to that section, your browser loads Paddle's price script and its stylesheet from Paddle's servers and sends Paddle your IP address, so it can show prices for your country and currency. This request goes directly from your browser to Paddle and does not pass through our servers, so we do not see it; Paddle processes the IP address under its own privacy notice. Our basis is our legitimate interest in showing you correct prices (Art. 6(1)(f)).
• Cloudflare, Inc. (United States): Turnstile bot protection on registration and public forms.
• Mailgun Technologies, Inc. (United States): delivery of service emails such as invitations and password resets. The messages are processed on Mailgun's servers in the EU.
• Proton AG (Switzerland): our email correspondence, including support requests.

If you connect an AI assistant or other third-party service through the MCP interface or API, the data it retrieves goes to the provider you have chosen, under that provider's terms. We do not send CRM data to AI providers ourselves.

We may also disclose data when required by law or an authority's lawful order.

Application data is stored in Finland. Data shared with Paddle is transferred to the United Kingdom, and email data is processed by Proton in Switzerland; the European Commission has recognized both countries as providing an adequate level of protection. Service emails are sent from Mailgun's EU region, but Mailgun is a US company and may access some data from the United States. Cloudflare may process data from the Turnstile check in the United States. Both companies are certified under the EU-US Data Privacy Framework, and transfers also rely on the European Commission's standard contractual clauses.

• Account data: as long as your account exists. When you ask us to delete your account, we delete it within 30 days.
• Customer organization data: as long as the organization exists, and as described in section 5 of our Terms of Service after a subscription ends. Records a user deletes stay recoverable for the organization's recovery window (currently 3 months) and are then permanently deleted.
• Server and security logs: up to 30 days.
• Usage statistics: up to 24 months.
• Bookkeeping records: as long as Finnish accounting law requires, which is up to 10 years.
• Support emails: up to 2 years after the matter is closed.

We only use cookies and browser storage that are needed for the Service and the website to work, so no consent banner is needed:

• In the app: a session cookie that keeps you signed in and a security (XSRF) cookie that protects against cross-site request forgery.
• Preferences: your language choice and light/dark theme, and in the app, your list filter and view settings. These are stored in a cookie or your browser's local storage and contain no personal details about your clients.
• Cloudflare Turnstile may use technically necessary data to tell humans from bots.
• On this website's pricing section: when prices are loaded from Paddle, Paddle's servers may set a technically necessary security cookie (__cf_bm, from Paddle's provider Cloudflare) on paddle.com. It is used to filter out bots and expires after 30 minutes.
• Our analytics tool does not use cookies or browser storage at all.

All traffic is encrypted with HTTPS. Each customer's data is separated both in the application and by row-level security in the database itself. Passwords and access keys are stored only as hashes, and access to production systems is restricted to what is needed to operate the Service.

You have the right to access your personal data, to have inaccurate data corrected, to have data erased, to restrict processing, to receive your data in a portable format, and to object to processing based on legitimate interests. To use these rights, email [email protected]. We respond within one month.

You also have the right to lodge a complaint with a supervisory authority. In Finland this is the Office of the Data Protection Ombudsman (tietosuoja.fi).

We may update this Privacy Policy. The date at the top shows when it was last changed. We will notify users of material changes by email or in the Service.