TrellFlow
Start free

TrellFlow — Privacy Policy

Last updated: August 3, 2026 Effective date: August 3, 2026

This Privacy Policy explains how TrellFlow LLC ("TrellFlow," "we," "us," or "our") collects, uses, discloses, and protects information in connection with the TrellFlow platform and website at trellflow.com (the "Service"). By using the Service, you agree to this Privacy Policy. This Policy is incorporated into and part of our Terms of Service.

TrellFlow provides business software for tracking accounts receivable and invoices. Our customers are businesses, and the Service is designed for business-to-business use. The Service is not directed to consumers and is not intended to be used as a consumer reporting agency or to produce consumer reports.

1. Information We Collect

1.1 Information you provide directly.

  • Account information: name, business name, email address, password (stored in hashed form), and role.
  • Billing information: billing contact details and subscription information. Payment card details are collected and processed by our payment processor (Stripe) and are not stored on TrellFlow's servers.
  • Support and communications: information you provide when you contact us.

1.2 Customer Data you submit or import. When you use the Service, you submit or import business records, which may include: invoice and transfer records, product and quantity data, valuations and aging, records about your Counterparties (such as business name, license number, and contact information), payment records, and communications you generate through the Service. This data is provided and controlled by you.

1.3 Data from connected systems. If you connect a third-party system (such as Metrc) using credentials or an API key you provide, we access and process the data available through that connection on your behalf to provide the Service. We store connection credentials in encrypted form and use them only to retrieve data at your direction.

1.4 Information collected automatically. When you use the Service, we automatically collect certain technical information such as IP address, browser and device type, pages viewed, and usage activity, through cookies and similar technologies and through our infrastructure and analytics providers. We use these for authentication, security, and to operate and improve the Service.

2. How We Use Information

We use information to:

  • provide, operate, maintain, secure, and support the Service;
  • authenticate users and protect against fraud, abuse, and unauthorized access;
  • import, value, age, and display your receivables and generate reports and communications at your direction;
  • process subscriptions and payments;
  • communicate with you about your account, the Service, and service-related notices;
  • comply with legal obligations and enforce our Terms; and
  • create aggregated, anonymized, and de-identified data and analytics to operate and improve the Service, as described in our Terms.

We do not sell your personal information, and we do not use Customer Data to build profiles of individuals for advertising.

3. Roles: Controller and Processor

For account and website information about you and your Authorized Users, TrellFlow acts as a controller. For Customer Data you submit or import (including information about your Counterparties), TrellFlow generally acts as a processor acting on your instructions; you are responsible for having the appropriate rights and legal basis to provide that data and for your own privacy obligations to your Counterparties.

4. How We Share Information

We share information only as follows:

  • Service providers (subprocessors). We use trusted vendors to run the Service, who process information on our behalf under confidentiality and data-protection obligations. These currently include:
    • Vercel — application hosting and delivery
    • Neon — managed PostgreSQL database hosting
    • Stripe — payment processing and subscription billing
    • Email delivery / notification providers — to send account and Service communications
    • Metrc and systems you connect — accessed at your direction to retrieve your data
  • Legal and safety. We may disclose information if required by law, regulation, legal process, or governmental request, or where we believe disclosure is necessary to protect the rights, property, or safety of TrellFlow, our customers, or others.
  • Business transfers. If TrellFlow is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.
  • With your direction. We share information as you direct through your use of the Service (for example, communications you choose to send).

We do not sell personal information to third parties.

5. Data Retention

We retain account and Customer Data for as long as your account is active and as needed to provide the Service. After termination, we make Customer Data available for export for a limited period (typically 30 days), after which we may delete or anonymize it, except where longer retention is required for legal, tax, accounting, security, or dispute-resolution purposes. Backups are retained on a rolling basis and purged in the ordinary course.

6. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including encryption of credentials and sensitive fields, encrypted transport (HTTPS), access controls, and hosting with reputable infrastructure providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your credentials confidential and for controlling access by your Authorized Users.

7. Your Choices and Rights

You may access and update your account information within the Service, and you may request export or deletion of Customer Data by contacting us or through available account controls. Depending on where you are located, you may have rights under applicable privacy laws to access, correct, delete, or restrict processing of personal information, or to object to certain processing. To exercise these rights, contact us at privacy@trellflow.com. Where TrellFlow acts as a processor on your instructions, we will refer requests relating to your Customer Data to you as the controller. We may need to verify your identity before acting on a request.

8. Cookies

We use cookies and similar technologies that are necessary to operate the Service (for example, to keep you signed in and to secure your session) and, where applicable, to understand usage. You can control cookies through your browser settings, but disabling necessary cookies may prevent the Service from functioning.

9. International Users

The Service is operated in the United States and intended for use by U.S. businesses. If you access the Service from outside the United States, you understand that your information will be processed in the United States, where data-protection laws may differ from those in your location.

10. Children's Privacy

The Service is not directed to and is not intended for use by anyone under 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice (for example, by email or in-app notice) and update the "Last updated" date above. Your continued use of the Service after the effective date constitutes acceptance of the updated Policy.

12. Contact

TrellFlow LLC Privacy: privacy@trellflow.com General: legal@trellflow.com Web: trellflow.com