Privacy Policy
Effective June 20, 2026
This Privacy Policy explains how Trestle OS (“we”, “us”) collects, uses, discloses, and protects your information when you use Trestle OS (the “Service”). By using the Service, you agree to the practices described here.
1. Information we collect
- Account information — name, email address, password (stored hashed), and organization details you provide.
- Financial & business data — invoices, transactions, clients, contractors/personnel, budgets, contracts, and tax-related figures you enter or import.
- Bank-account data via Plaid— when you connect a financial account, Plaid provides us with account and transaction information. We access this data to power the Service’s bookkeeping and reconciliation features. We do not store your online banking credentials; those are handled by Plaid.
- Payment information — subscription billing is handled by Stripe. We do not store full card numbers; Stripe processes and stores your payment details.
- Usage & device data — log data, IP address, browser type, and feature-usage events used to operate, secure, and improve the Service.
2. How we use information
- to provide, maintain, and improve the Service;
- to process subscriptions, payments, and trials;
- to power features you request, including bank sync, AI categorization, and reporting;
- to communicate with you about your account, security, and product updates;
- to detect, prevent, and address fraud, abuse, and security issues;
- to comply with legal obligations.
3. AI features
Certain features use third-party AI providers to process content you submit (for example, to categorize transactions or generate contract drafts). Data sent to these providers is used to return results to you. We do not permit your data to be used to train third-party public models where contractually avoidable.
4. How we share information
We do not sell your personal information. We share information only:
- with service providers that operate the Service (e.g., Plaid, Stripe, hosting, email delivery, AI processing), bound by confidentiality obligations;
- with other members of your organization, according to their access permissions;
- when required by law, legal process, or to protect the rights, safety, and security of Trestle OS, our users, or the public;
- in connection with a merger, acquisition, or sale of assets, subject to this Policy.
5. Data retention
We retain your information for as long as your account is active or as needed to provide the Service and comply with legal obligations. When you delete your account, we delete your organization’s data, revoke connected Plaid items, and delete your Stripe customer record. Some records may be retained where required by law or for legitimate business purposes (such as fraud prevention).
6. Your rights and choices
- Access & deletion — you can access and export your data, and delete your account at any time from Settings.
- Bank disconnection — you can disconnect any linked bank account, which revokes our access via Plaid.
- Marketing email — you can unsubscribe from product/marketing emails using the link in those emails. Transactional emails (such as receipts and security notices) are necessary to provide the Service.
- Depending on your location, you may have additional rights under laws such as the GDPR or CCPA. Contact us to exercise them.
7. Security
We use administrative, technical, and organizational measures designed to protect your information, including encryption in transit, access controls, and tenant data isolation. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. International users
We operate in the United States. If you access the Service from outside the U.S., you understand your information may be processed in the U.S., where data-protection laws may differ from those in your jurisdiction.
9. Children’s privacy
The Service is not directed to individuals under 18, and we do not knowingly collect personal information from children.
10. Changes to this Policy
We may update this Policy from time to time. If we make material changes, we will provide notice by email or in-app. The “Effective” date above indicates when this Policy was last revised.
11. Contact
Questions or requests regarding your privacy? Contact us at support@trestle-os.com.