This policy explains what Triacaf LLC ("TriaCaf", "we", "us") collects when you visit triacaf.com or use the TriaCaf Assay platform at app.triacaf.com, why, who we share it with, and the choices you have. The short version: we collect what we need to run the service, we don't sell personal information, and we don't use one customer's data to build models for another.
1. What we collect
When you visit triacaf.com
- Usage analytics. Google Analytics records pages viewed, approximate location, device and browser information, and how you arrived, using cookies. On the website this happens only if you accept analytics cookies (see Cookies).
- What you send us. If you email us or book a call through Calendly, we receive the details you provide (typically your name, email address and message).
- Newsletter sign-ups. If you sign up for our newsletter with the form on triacaf.com, we store your email address, the fact that you ticked the consent box, which form you used, and the date and time you signed up. The sign-up is stored in the TriaCaf platform's database, hosted by Railway, separately from any customer workspace. Your IP address is used briefly, in memory only, to limit repeated sign-up attempts; it is not stored with your sign-up.
- The diagnostic quiz runs entirely in your browser. Your answers are not sent to us.
When you use the platform
- Account information. Your name, email address, organization membership and role, managed by our authentication provider, Clerk. If you sign in with Google, we receive your basic profile (name, email address and profile picture) from Google.
- Customer data. Datasets you upload (for example CSV files of marketing, sales or customer data), the analyses you run, their results, and the Decision Briefs and model cards they produce.
- Connected accounts. If you connect an advertising platform, we store the access credentials you authorize, encrypted at rest, and the performance data we retrieve with them.
- Activity records. An audit log of actions taken in your workspace (who did what, and when), and product analytics (Google Analytics) on how the platform is used.
Customer data can contain personal information about your own customers. You decide what to upload; where possible, upload aggregated or de-identified data. We process customer data on your behalf and under your instructions.
2. How we use it
- To provide the service: authenticate you, store your data, run the analyses you request, and show you the results.
- To keep the service secure: isolate each organization's data, detect misuse, and keep audit records.
- To support you and communicate about your account, and, if you've opted in, to send product news.
- To understand and improve how the website and platform are used.
- To meet legal obligations.
We do not sell personal information, and we do not use your customer data to train or tune models for any other customer.
3. Who we share it with
We use these service providers ("subprocessors") to run TriaCaf. Each receives only what it needs for its role:
| Provider | What it does |
|---|---|
| Clerk | Sign-in, accounts and organization membership |
| Railway | Hosts the platform, its database (including newsletter sign-ups) and stored datasets |
| Modal | Cloud compute that runs model fits on your data |
| Analytics on the website and platform; Google sign-in if you use it | |
| Calendly | Call scheduling |
| IONOS | Hosts the marketing website |
| Google Ads, Meta | Only if you connect those accounts, to retrieve your own performance data |
We may also disclose information if required by law, to protect our rights or users' safety, or as part of a merger or acquisition (in which case this policy continues to apply to your information).
4. Where it's processed
Our providers may process data in the United States and other countries. Where we transfer personal information internationally, we rely on appropriate safeguards required by applicable law.
5. How long we keep it
We keep newsletter sign-ups until you unsubscribe or ask us to delete them; to do either, email info@triacaf.com.
We keep account information and customer data for as long as your account or organization is active. When you delete your account or organization, we delete the associated runs, datasets and connected-account credentials. You can also ask us to delete specific data at any time. Residual copies in backups are removed in the normal course of backup rotation. We may keep limited records longer where the law requires it.
6. Security
Each organization's data is isolated from every other organization's, credentials for connected accounts are encrypted at rest, and actions are recorded in an audit log. Our Security page describes what's in place and what we don't claim yet. No system is perfectly secure, but we work to protect your information and will notify you of a breach where the law requires.
7. Cookies
The platform uses essential cookies to keep you signed in, and Google Analytics cookies to measure usage.
The website (triacaf.com) loads Google Analytics only after you accept analytics cookies in the banner shown on your first visit. Until then, and if you decline, it sets no analytics cookies. Your choice is saved in your browser's local storage; you can change it at any time with Cookie settings in the footer of any page, and declining removes the analytics cookies the site set. With your consent the site also records which calls to action you use (booking a call, launching the app, signing up for the newsletter) to understand what visitors find useful.
You can block or delete cookies in your browser; blocking essential cookies will prevent sign-in on the platform. You can also opt out of Google Analytics everywhere with Google's browser add-on.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise any of these, email info@triacaf.com. We'll respond within the time the law requires and won't discriminate against you for making a request. If your personal information is in data a TriaCaf customer uploaded, please contact that customer; we'll help them respond.
9. Children
TriaCaf is a business service and isn't directed to children under 16. We don't knowingly collect their personal information.
10. Changes
We'll post any changes here and update the date above. If a change is material, we'll tell account holders by email or in the platform before it takes effect.
11. Contact
Triacaf LLC
141 Spectacle
Irvine, CA 92618
info@triacaf.com