Privacy Policy

1. Overview

This Privacy Policy explains how Trigora, Inc. (“Trigora,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you use:

• trigora.dev and our documentation, research, and blog;
• cloud.trigora.dev and Trigora Cloud;
• demo.trigora.dev and the TCC Recovery Lab;
• our APIs and other online services that link to this Privacy Policy; and
• communications with us, including support, commercial, partnership, and other inquiries.

Trigora provides infrastructure for durable execution of long-running programs. Trigora Cloud is our managed execution platform.

This Privacy Policy does not govern third-party websites, applications, or services that may be linked from our services.

2. Information we collect

We collect information in the following categories.

Account information

When you create or use a Trigora Cloud account, we may receive information such as:

• your name;
• email address;
• profile image;
• account identifier and other authentication information made available by your OAuth provider;
• workspace, project, and membership information; and
• account preferences.

We do not receive the password you use with an OAuth provider.

Billing and transaction information

If you purchase a paid Trigora Cloud plan, our payment provider processes payment information on our behalf.

We may receive billing-related information such as:

• billing name and address;
• plan and subscription status;
• transaction identifiers;
• amounts charged;
• tax-related information; and
• limited payment-method information such as card brand and last four digits.

Trigora does not need to store complete payment-card numbers.

Customer Content

When you use Trigora Cloud, you may submit or generate information including:

• Program source code and deployed artifacts;
• execution inputs and outputs;
• event payloads;
• effect results;
• continuation and checkpoint data;
• logs and execution metadata;
• configuration information; and
• other information you choose to process through the service.

We refer to this information collectively as “Customer Content.”

Customer Content may contain personal information depending on how you use Trigora Cloud.

Persisted Customer Content is encrypted at rest where the infrastructure supports it, and in transit with TLS. See Security.

Private Customer Content is not used to train public or third-party AI models.

Usage and technical information

When you use our websites or services, we may automatically collect information such as:

• pages and features used;
• timestamps;
• referring URLs;
• browser and device information;
• operating system;
• approximate geographic region;
• request and diagnostic metadata;
• Cloud usage and metering information;
• execution status and operational telemetry; and
• security and abuse-prevention signals.

Our infrastructure providers may process IP addresses as necessary to deliver and secure network traffic even where Trigora does not retain them in application analytics.

Communications

If you contact us, we receive the information you provide, which may include your:

• name;
• email address;
• company or organization;
• message;
• support information; and
• attachments or other materials you choose to send.

3. TCC Recovery Lab

The demonstration at demo.trigora.dev runs a controlled TCC recovery example.

The demo may use a short-lived session identifier so that a run can continue across its Start, Crash, and Restore steps. The associated demo state is temporary and is deleted after approximately ten minutes.

We may process network information temporarily to protect the demo against abuse and excessive requests.

Do not submit confidential, sensitive, or production information to the demo.

4. How we use information

We use information to:

• provide, operate, maintain, and secure Trigora Cloud and our websites;
• authenticate users and manage accounts;
• deploy Programs and operate Executions;
• persist and recover execution state;
• meter usage and administer subscriptions;
• process payments and prevent fraud;
• provide support and respond to inquiries;
• monitor reliability, performance, and security;
• understand how our products and documentation are used;
• improve our services and developer experience;
• enforce our agreements and acceptable-use requirements;
• comply with legal obligations; and
• protect Trigora, our users, and others from abuse, fraud, or security threats.

We do not sell personal information for monetary consideration.

5. Analytics

We use privacy-conscious analytics tools to understand how our websites and product surfaces are used. We may collect information such as pages viewed, feature interactions, referring pages, browser and device information, and approximate region.

We do not use analytics data for third-party advertising, and we do not sell personal information. Analytics is intended to collect product and usage events rather than the contents of Program source code, execution payloads, or text entered into sensitive fields.

Session replay is disabled unless we state otherwise before enabling it.

Where supported by our implementation, you may opt out of public-site analytics using ?analytics=off.

We may change analytics providers as our services evolve.

6. How we disclose information

We may disclose information to the following categories of recipients.

Service providers

We use service providers to operate Trigora, including providers for:

• hosting and edge infrastructure;
• analytics;
• authentication;
• payment processing;
• security;
• communications; and
• other operational functions.

These providers process information on our behalf only as necessary to provide their services, and subject to their applicable contractual terms. Current vendors are named on Subprocessors. We may change a provider within a category without rewriting this Privacy Policy.

Legal and safety reasons

We may disclose information where we reasonably believe disclosure is necessary to:

• comply with law, regulation, legal process, or governmental request;
• enforce our agreements;
• investigate fraud, abuse, or security incidents;
• protect the rights, property, or safety of Trigora, our users, or others.

Business transactions

If Trigora is involved in a merger, financing, acquisition, restructuring, bankruptcy, sale of assets, or similar transaction, information may be disclosed or transferred as part of that transaction subject to applicable law.

7. Customer Content and data-processing roles

For account administration, billing, website analytics, and our own business operations, Trigora generally determines why and how personal information is processed.

Where a business customer submits personal information to Trigora Cloud inside Customer Content and instructs Trigora to process that information to provide the service, the customer may act as the controller or business and Trigora may act as its processor or service provider.

Business customers are responsible for having the rights and legal basis necessary to submit personal information to Trigora Cloud.

A separate data processing agreement may apply where required.

8. Legal bases for processing

Where laws such as the GDPR require a legal basis, we process personal information as appropriate:

• to perform a contract with you;
• to take steps at your request before entering a contract;
• for our legitimate interests in operating, securing, and improving our services;
• to comply with legal obligations; or
• with your consent where consent is required.

You may withdraw consent where processing is based on consent, without affecting processing that occurred before withdrawal.

9. International data transfers

Trigora and our service providers may process information in countries other than the country where you live.

Where required by applicable law, we use contractual or other legally recognized safeguards for international transfers of personal information.

For example, major infrastructure providers we use maintain data-processing terms addressing cross-border transfers.

10. Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the service, satisfying contractual commitments, maintaining security and audit records, resolving disputes, and meeting legal obligations.

Retention periods vary by category.

For example:

• temporary demo state is generally deleted after approximately ten minutes;
• account information is retained while the account remains active and for a reasonable period afterward;
• billing records may be retained as required for accounting, tax, fraud-prevention, or legal purposes;
• Customer Content is retained according to product functionality, customer actions, and applicable contractual terms;
• backups and security logs may remain for a limited period after deletion from active systems.

11. Your privacy rights

Depending on where you live, you may have rights regarding your personal information, including the right to:

• access information we hold about you;
• correct inaccurate information;
• request deletion;
• receive a portable copy of certain information;
• object to or restrict certain processing;
• withdraw consent;
• opt out of certain disclosures where applicable; and
• appeal a decision regarding a privacy request where provided by law.

California law, where applicable, provides rights including access, deletion, correction, opt-out rights concerning sale or sharing, and non-discrimination for exercising privacy rights.

To exercise a privacy right, contact us at [email protected].

We may need to verify your identity before completing a request.

Authorized agents may submit requests where permitted by law.

12. Sale, sharing, and targeted advertising

Trigora does not sell personal information for monetary consideration.

We do not use Customer Content for third-party behavioral advertising.

If our practices change in a way that creates additional opt-out rights under applicable law, we will update this Privacy Policy and provide any required controls.

13. Cookies and local storage

Our websites and services may use cookies, local storage, and similar technologies for:

• authentication;
• security;
• session continuity;
• preferences;
• analytics; and
• service functionality.

Blocking required storage mechanisms may prevent parts of Trigora Cloud or the TCC Recovery Lab from functioning correctly.

14. Security

We maintain technical and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction.

No Internet service or storage system can guarantee absolute security.

You are responsible for protecting account credentials, API tokens, and secrets used with your account.

15. Children

Trigora is intended for business and developer use and is not directed to children under 13.

We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us so we can investigate and take appropriate action.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

If we make material changes, we will update the “Last updated” date and provide additional notice where required by law.

17. Contact

For privacy questions or requests:

Trigora, Inc.

[email protected]