Privacy Policy

Introduction

This Privacy Policy explains how Triad ("Triad," "we," "us") collects, uses, shares, and protects information when you use our websites and product. By using Triad, you agree to this policy alongside our Terms of Service.

Information We Collect

Account information

When you register, we collect details such as your name, email address, organization or company name, and similar profile fields. Passwords are stored using industry-standard hashing; we do not store your password in plain text.

Customer data

You and your team submit content to operate Triad, including partner records, activities, contacts, accounts, notes, attachments, and other information you choose to enter. This is all treated as Customer Data under your control.

Usage data

We collect technical and usage information such as log events, product analytics, IP address, browser type, device identifiers, and general interaction patterns. This helps us run, secure, and improve the service.

Cookies

We use cookies and similar technologies for authentication, session management, security, and preferences. You can control cookies through your browser settings, but some features may not work if essential cookies are disabled.

How We Use Information

We use the information above to provide and operate the service, communicate with you about your account or product updates, improve and develop features, monitor and protect against abuse and security threats, and comply with legal obligations. We do not sell your personal information.

AI Processing

Triad uses Anthropic's Claude API to provide AI features (for example, Read the Room, draft emails, and activity decomposition). Customer data you send to these features is processed by Anthropic in accordance with their data processing terms. Anthropic does not train models on Triad customer data. We encourage you to review Anthropic's policies for the latest details on how they handle API data.

Sharing of Information

We do not sell your data. We share information with service providers ("subprocessors") who help us run Triad, including Supabase for hosting and database infrastructure, Vercel for deployment and delivery, Stripe for billing and payments, Resend for transactional email, and Anthropic for AI features as described above. We may also disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, or sale of assets, in which case we will seek appropriate protections where feasible.

Data Retention

We retain Customer Data while your account is active and as needed to provide the service. After you delete data or close an account, we delete or anonymize it within a reasonable period, subject to backup and legal retention windows (often on the order of 30 days for routine backups unless a longer hold is required by law).

Your Rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. You may also have rights under the GDPR (European Economic Area or UK) or the CCPA/CPRA (California), including the right to opt out of "sale" or "sharing" (we do not sell personal information as defined by those laws). To exercise rights, contact us at the email below. We will respond within the timeframes required by applicable law.

Security

We use encryption in transit (such as HTTPS) and rely on providers and controls that support encryption at rest where applicable. Access to production systems is limited to authorized personnel, and we use technical controls such as row-level security in the database to separate customer data. No method of transmission or storage is 100% secure; we work to follow good industry practice.

International Transfers

Triad is operated from the United States. If you access the service from outside the US, your information may be transferred to, stored, and processed in the US and other countries where our subprocessors operate. We use appropriate safeguards where required by law.

Children's Privacy

Triad is not directed at individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us and we will take steps to delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the new version on this page and change the "Last updated" date. If changes are material, we will provide additional notice as appropriate, such as by email or an in-product message.

Contact

Privacy questions and requests: privacy@gettriad.io.