This Privacy Policy explains how Trayl OS ("TRAYL", "we", "us") collects, uses, discloses, and protects personal data when you use the TRAYL platform and related services (the "Service"). TRAYL is the controller of the personal data described here.
1. Information We Collect
- Account data — name, email, password hash, role (brand, agency, creator, admin).
- Profile and campaign data — company details, creator handles, briefs, offers, contracts, messages, deliverables, and assets.
- Billing data — subscription plan, invoices, and limited payment metadata (full card data is processed by Stripe, not stored by us).
- Usage and device data — pages viewed, features used, IP address, browser, and device identifiers.
- Support data — communications with our team.
2. How We Use Information
- Provide, secure, and operate the Service (contract performance).
- Run AI/ML and Automation Tools for scoring, drafts, workflow orchestration, and analytics (legitimate interests).
- Prevent fraud, abuse, and security incidents (legitimate interests, legal obligation).
- Communicate service, security, and (where permitted) marketing updates.
- Comply with legal, tax, and accounting obligations.
3. AI/Automation Processing
Some features process campaign data with automated systems and machine learning models to produce suggestions, scores, and workflow actions. Outputs are decision-support only. We do not sell your personal data and do not use customer-identifying content to train third-party foundation models without contractual protections.
4. Sharing and Processors
We share personal data with vetted processors that support the Service, including hosting/database, email delivery, analytics/error monitoring, contract e-signature (e.g. SignWell), payment processing (Stripe), and creator payout orchestration (e.g. Lumanu). We may disclose data to comply with law, protect rights, or in a corporate transaction. We do not sell personal data.
5. Retention
We retain personal data for as long as your account is active and as needed to provide the Service. On account closure we delete or anonymize personal data within a reasonable period, except where retention is required for legal, tax, or accounting reasons, or to resolve disputes and enforce agreements.
6. Security
We use appropriate technical and organizational measures, including encryption in transit, access controls, and monitoring. No system is perfectly secure; you are responsible for keeping credentials safe.
7. Your Rights
Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, object to certain processing, and withdraw consent. California residents have rights under the CCPA/CPRA. To exercise rights, email hello@traylos.com.
8. Cookies
We use essential cookies to keep you signed in and remember preferences, and limited analytics cookies to understand usage. See our Cookie Policy.
9. International Processing
We may process data in the United States and other countries. Where required, we rely on appropriate transfer mechanisms such as Standard Contractual Clauses.
10. Changes and Contact
We may update this Policy from time to time. Material changes will be communicated through the Service or by email. Questions? Contact hello@traylos.com.