Privacy Policy

Effective date: August 24, 2026

At Trell, we take your privacy seriously. This Privacy Policy explains what information we collect, how we use it, and what choices you have. By using the Service, you agree to the practices described here.

Information We Collect

1.1 Information You Provide

  • Account details — your name, email address, and profile picture when you sign up (including via Google or other OAuth providers).
  • Project data — tasks, documents, analytics configurations, team settings, and any content you create or upload through Trell.
  • Payment information — billing details processed by our payment provider. We do not store full credit card numbers.
  • Communications — messages you send to our support team or feedback you provide.

1.2 Automatically Collected

  • Usage data — pages viewed, features used, actions taken, timestamps, and interaction patterns within the Service.
  • Device data — browser type and version, operating system, screen resolution, and device type.
  • Network data — IP address, approximate geolocation (city/country level), and referring URLs.

1.3 From Third Parties

  • OAuth providers — if you sign in with Google, we receive your name, email, and profile picture as authorized by you.
  • Integrations — data from connected services (e.g., GitHub, Slack) that you choose to link to Trell.

How We Use Your Information

  • Provide the Service — to operate, maintain, and deliver the features you use.
  • Improve Trell — to understand how teams use the platform, identify bugs, and develop new features.
  • Communicate with you — to send account notifications, security alerts, billing notices, and product updates.
  • Security — to detect fraud, abuse, and unauthorized access, and to protect the integrity of the Service.
  • Legal compliance — to comply with applicable laws, regulations, and legal processes.

How We Share Your Information

We do not sell your personal information. We may share data in the following limited circumstances:

  • Service providers — trusted vendors who help us operate the Service (hosting, payments, analytics), bound by contractual obligations to protect your data.
  • Team members — information you share within your Trell projects is visible to other members of those projects.
  • Legal requirements — when required by law, subpoena, or government request, or to protect our rights, safety, or property.
  • Business transfers — in connection with a merger, acquisition, or sale of assets, with prior notice.

Data Retention

We keep your personal information for as long as your account is active or as needed to provide the Service. After account deletion, we retain data for up to 30 days to allow for recovery, then permanently delete it. Some information may be retained longer if required by law or for legitimate business purposes (e.g., billing records).

Data Security

We use industry-standard measures to protect your data, including encryption in transit (TLS) and at rest, access controls, regular security audits, and infrastructure monitoring. While we take reasonable precautions, no method of transmission or storage is 100% secure.

Cookies

We use cookies and similar technologies for the following purposes:

  • Essential cookies — required for authentication, session management, and security.
  • Analytics cookies — help us understand how the Service is used and improve performance.
  • Preference cookies — remember your settings and display preferences.

You can manage cookies through your browser settings. Disabling essential cookies may affect the functionality of the Service.

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access — request a copy of the personal data we hold about you.
  • Correction — request correction of inaccurate or incomplete data.
  • Deletion — request deletion of your personal data.
  • Portability — receive your data in a structured, machine-readable format.
  • Objection / Restriction — object to or restrict certain processing of your data.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

International Transfers

Trell is based in the United States. If you are accessing the Service from outside the U.S., your data may be transferred to and processed in the U.S. or other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers.

Children

The Service is not intended for individuals under 16. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 16, we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or through the Service at least 30 days before the changes take effect. The "Effective date" at the top indicates when this policy was last updated.

Contact Us

Questions or concerns about this Privacy Policy? Reach out at [email protected].