Privacy Policy

1. Who we are and what this Policy covers

Trivva.ai (“Trivva,” “we,” “us,” or “our”) provides managed websites, inquiry-handling systems, review-request services, and separately scoped creative and AI-assisted video production.

Business mailing address: 7345 S Tatum Lane, Queen Creek, Arizona 85142, United States
Privacy contact/team: Trivva Privacy Contact, jake@trivva.ai
Support: jake@trivva.ai | +1 480-280-1532

This Policy describes personal information we handle through our own website, inquiries, demonstrations, business communications, subscriptions, support, and creative projects. It explains the information involved, why we use it, who receives it, and the choices available to you.

For Trivva’s own prospects, clients, and website visitors, we generally determine the purposes of processing and act as the responsible business or controller. When we manage a client’s website, contact database, or communications on that client’s instructions, the client generally controls those purposes and we act as its processor or service provider. Section 10 explains this distinction.

This Policy is a notice, not blanket consent to marketing, recording, AI training, or every processing activity described below. We obtain separate permission where required.

2. Information we collect and its sources

Contact and business information. We receive names, business names, work roles, email addresses, phone numbers, websites, service areas, and other information you provide when requesting a demo, buying services, or communicating with us. We may also obtain relevant professional contact details from business websites, public directories, professional profiles, referrals, or other lawful business-development sources.

Messages and relationship records. We handle inquiry details, emails, text messages, submitted forms, chat conversations, appointment information, support requests, proposals, account preferences, and notes needed to manage the relationship. We also keep permission records and opt-out preferences. When calling or messaging is enabled, records may include the participating numbers, time, duration, delivery status, and responses.

Billing information. We receive billing contact details, invoices, purchase history, transaction identifiers, payment status, and limited payment-method information returned by our payment processor. Full card credentials are handled by the processor rather than requested in ordinary Trivva contact forms. Do not send card numbers or security codes to our support team.

Website and technical information. Our website, hosting providers, and enabled tools may collect IP addresses, browser/device details, timestamps, visited pages, referral sources, campaign parameters, cookie or session identifiers, errors, and security events. Section 6 explains browser storage, referral information, and related choices.

Project and creative materials. For website or video work, we receive brand assets, scripts, images, videos, audio, likeness references, appearance or wardrobe directions, project feedback, and approval records. Those materials may identify you, your employees, customers, or talent. Provide only information relevant to the agreed work and for which you have the necessary authority.

Client-controlled customer data. On a business client’s behalf, we may process its customers’ names, phone numbers, email addresses, inquiry or appointment details, message histories, service-related notes, review-request status, and communication preferences. That processing is addressed in Section 10.

We do not intentionally request government identification numbers, medical records, full payment-card details, or other highly sensitive information for ordinary marketing services. Any exceptional processing requires a separate written assessment and appropriate safeguards.

3. Why we use information

We use relevant information to respond to inquiries; evaluate business fit; prepare proposals; deliver websites, automations, and creative work; administer accounts and payments; arrange appointments; provide support; and communicate about requested or purchased services.

We also use information to maintain security, prevent abuse and fraud, troubleshoot errors, understand permitted website usage, improve delivery, preserve approvals and consent records, resolve disputes, and satisfy legal, tax, and accounting obligations.

Business-development communications must follow applicable law and your preferences. Promotional text messages require the separate permission described in Section 5; merely providing your number does not enroll you. Marketing emails include a way to stop those messages.

We do not use one client’s customer list to promote Trivva or another client. We do not publicly display a client’s confidential project, identifiable customer information, or testimonial without appropriate authorization.

Where a law requires a legal basis for processing, we rely on the applicable basis: your consent, steps requested before or necessary to perform a contract, compliance with legal duties, or legitimate business interests where that basis is available and does not override your rights. In jurisdictions requiring prior authorization, we obtain it unless a lawful exception applies; a general statement of business interest does not replace required authorization.

4. Recipients and service providers

We disclose information only as appropriate for the purposes above and applicable law. Recipients may include website and cloud hosts, CRM and communication providers, payment processors, scheduling and support tools, approved creative/AI vendors, professional advisers, and contractors assisting with the engagement.

Access by staff and contractors is restricted to what their work requires and is subject to confidentiality and appropriate data-use obligations. Vendors may also have their own obligations when acting independently, such as processing payments or responding to legal requirements. A vendor’s role depends on the service and contract; not every vendor acts solely on our instructions.

Providers and services involved in the website and your engagement include:

• Vercel — website hosting and delivery. Vercel processes website requests and associated technical information, such as IP addresses, requested URLs, device/browser information, and operational logs, to host, deliver, secure, and troubleshoot the website. See Vercel’s Privacy Notice.

• Stripe — online payment processing. When you choose a Stripe checkout, Stripe receives payment information and the contact and transaction details needed to process the purchase. Trivva receives payment status and related billing records. See Stripe’s Privacy Policy.
• Hosting, storage, and business communication providers. Providers supporting our application, database, project-file storage, email, and agreed CRM or messaging services process the information needed for those functions, such as inquiry records, messages, project materials, and technical logs. The services used for a client engagement depend on its agreed configuration; contact jake@trivva.ai for details relevant to your information.
• Creative providers. Where an engagement includes AI-assisted or other creative processing, we identify the relevant tools and proposed use of project materials when arranging that work, as described in Section 7.

We may disclose information when required by law, to exercise or defend legal rights, to address fraud or security threats, or in connection with a genuine business reorganization subject to appropriate safeguards and required notices. Additional restrictions on mobile information and messaging permission remain applicable; this clause does not authorize an unrelated marketing transfer.

We do not sell or rent customer contact lists. A privacy law may define sale, sharing, or targeted advertising more broadly than exchanging a contact list for money. Where applicable, you may exercise the related rights described in Sections 6 and 11.

5. Text messages, mobile information, and calls

Trivva’s messaging program may send opted-in recipients information about inquiries, appointments, onboarding, accounts, and support. Promotional messages require the applicable separate marketing permission. Message frequency varies. Carrier message and data charges may apply. See the SMS section of our Terms and Conditions.

We do not disclose mobile information to third parties or affiliates for their independent marketing or promotional purposes. We do not sell, rent, or transfer SMS opt-in records or consent for another sender’s marketing. Communication vendors and authorized support providers may process the limited information necessary to operate our messaging program on our behalf, under appropriate restrictions. Disclosure legally required of us is limited to the lawful requirement.

Reply STOP to the sending number to opt out. We may send a single confirmation. Reply HELP, email jake@trivva.ai, or call +1 480-280-1532 for assistance. We also honor reasonable withdrawal requests through our support contact. We retain a limited suppression record where needed to prevent further messaging; deleting that record indiscriminately could cause unwanted contact to resume.

Giving us a telephone number, requesting a demo, buying a service, or accepting the Terms is not by itself consent to recurring promotional texts. Permission must match the sender, purpose, and channel involved. Opting out of SMS does not cancel a paid service or necessarily stop essential account communications through another lawful channel.

If an agreed service includes recording or transcription, we explain the purpose and provider when arranging that feature and provide the notices and obtain the permissions required for the call. Contact jake@trivva.ai about the handling of a particular recording or to arrange communication by email. AI voice reception is not automatically included in our website service.

6. Cookies, analytics, and advertising choices

Our website uses browser session storage to remember the page and referral source through which you arrived, campaign parameters, and information needed to continue an inquiry or checkout. Referral and campaign information is included when you submit an inquiry so we can understand how you found us. Session storage generally lasts for the browser tab's session; information already submitted with an inquiry is retained with that inquiry as described in Section 9.

Hosting, payment, and embedded services may use cookies or similar technologies for delivery, security, fraud prevention, and their own service functions. Their notices explain their handling of information. Our website also records basic interaction events, such as starting or completing an inquiry, without including the contents of your form fields in those events.

You can manage cookies and browser storage through your browser settings. Disabling or clearing them may affect forms or your ability to continue a checkout. Clearing browser storage does not delete information already submitted to us; use the request process in Section 11 for that.

Contact jake@trivva.ai to make a privacy request, including an applicable sale, sharing, or targeted-advertising opt-out. Browser Do Not Track signals do not automatically submit a privacy request to us. Any rights associated with recognized opt-out signals under applicable law remain available. Before introducing additional analytics, advertising pixels, or session-replay services, we will update this notice and provide any consent or opt-out controls required for their use.

7. AI-assisted creative work

Where you order AI-assisted creative services, approved scripts, reference images, voices, footage, or other agreed project inputs may be processed by the creative tools identified for that engagement. Before using private or identifiable project material with such a tool, we identify the proposed provider and use and obtain any required authorization. Relevant retention, human review, model-improvement, and sharing terms depend on the selected provider and account settings and are addressed when arranging that processing. Contact jake@trivva.ai for information about the tools used for your project.

We do not use client lead databases or private account conversations to train a general-purpose AI model. We will not submit confidential or personally identifying client media to a provider permitted to use it for unrelated training or public sharing without specific prior authorization and a lawful basis. Choosing an AI-assisted service is not blanket permission for every provider or training use.

We do not use project materials to perform biometric identification of unknown people. Human reviewers may inspect creative inputs and outputs to deliver the agreed project. Consent for likeness/voice use and any public portfolio use is obtained separately as relevant.

8. International processing

Information may be accessed, stored, and otherwise processed in the United States and other countries where Trivva personnel and our service providers operate, including through remote access. Contact jake@trivva.ai for information about processing locations relevant to your data.

We use the safeguards and transfer arrangements required for the applicable data and jurisdictions, which may include contractual processing restrictions and approved transfer mechanisms. This Policy does not itself establish a lawful international transfer mechanism. Contact jake@trivva.ai for information about safeguards applicable to your data.

9. Retention and security

We retain information only for as long as reasonably needed for the disclosed purpose, the engagement, lawful instructions, and applicable obligations. We determine retention by category:

• Inquiry and relationship records: the period needed to answer the inquiry and manage an active or reasonably anticipated business relationship, taking account of the last interaction and your choices.
• Billing, agreements, and transaction records: applicable tax, accounting, audit, dispute, and statutory retention periods.
• Website, creative-project, and client-controlled CRM data: the agreed service and transition period, then deletion or return under the Order, processing agreement, and lawful client instructions.
• Consent and suppression records: the period reasonably needed to demonstrate permission and honor withdrawal or do-not-contact requests.
• Security logs and backups: the periods needed for security, recovery, and applicable legal requirements, taking account of the relevant provider's retention arrangements.

For ordinary service cancellation, our Terms provide a 30-day transition window for supported exports after service ends, unless an Order or mandatory law specifies otherwise. This is separate from the advance cancellation notice period and is not a promise that every record is automatically deleted on day 30. Afterward, retention is assessed using the purposes and obligations above. You may contact jake@trivva.ai to request deletion or information about retention relevant to your records.

Deletion from active systems may not immediately remove disaster-recovery backups. Information retained in backups remains subject to this Policy, and relevant deletion or suppression requirements must be reapplied if it is restored to routine use. Legal holds may require restricted retention beyond ordinary periods. We do not promise indefinite storage.

We maintain safeguards appropriate to the information and risks, including access restrictions, confidential handling, secure transmission, and protection of credentials. No system is completely secure. We investigate suspected incidents and provide notices to affected clients, individuals, or regulators where required.

10. Information processed for our clients

When you interact with a business using a website, CRM, booking tool, messaging workflow, or review service that Trivva manages, that business generally determines why your information is collected and how its customer relationship is handled. Its privacy notice and communication permissions apply to those purposes.

Trivva processes relevant information under the engagement and documented instructions. We do not independently market to that business’s customers or combine their identifiable records with another client’s marketing database. Our service providers may act as subprocessors, subject to the applicable contractual restrictions.

Contact that business first for requests concerning its customer records. If you contact us, we will help identify or notify the responsible client and assist as authorized or legally required. This does not limit any independent legal obligations we have.

A client must have its own accurate privacy notice, contact details, and messaging permission process. Trivva’s notice is not a substitute for a notice identifying the client as the business communicating with its customers.

11. Your choices and privacy requests

You may stop promotional emails through the unsubscribe mechanism or by contacting us. Essential account, security, billing, or service messages may continue as legally permitted. SMS withdrawal is explained in Section 5.

Depending on where you live and which laws apply, you may have rights to access or confirm processing, obtain a copy, correct information, request deletion, withdraw consent, object to or restrict certain processing, and opt out of applicable sale, sharing, targeted advertising, or qualifying profiling. Some laws also provide rights concerning sensitive information, authorized agents, or appeals of a denied request.

Submit a request to jake@trivva.ai or by mail to 7345 S Tatum Lane, Queen Creek, Arizona 85142, United States. Identify the relevant relationship, information, and requested action. We may verify identity or authority using information proportionate to the request. We do not require unnecessary sensitive documents. We respond within applicable legal deadlines and explain limitations or denials. Where a right of appeal applies, you may appeal through the same contact with the subject “Privacy appeal.” We do not unlawfully discriminate against you for exercising privacy rights.

Where EEA or UK data-protection law applies, applicable rights may include portability, objection, restriction, and complaint to the relevant supervisory authority. Withdrawing consent does not invalidate processing that was lawful before withdrawal. An exception, such as a legal retention duty, may prevent immediate deletion of particular records.

These statements do not assert that every privacy statute applies to Trivva or promise a right inconsistent with mandatory law. We will assess requests under the relevant law and our disclosed commitments.

12. Children and third-party destinations

Our business services are not directed to children under 18, and children should not submit information through our sales or account forms. Creative projects may incidentally include minors only where expressly agreed with the client and supported by required parent/guardian permissions and safeguards. We do not use that content to market to children. Notify jake@trivva.ai if a child submitted information directly without appropriate permission so we can investigate and remove it as required.

Links or embedded experiences may lead to services controlled by other organizations, such as payment pages, Google review pages, or media providers. Their independent practices are described in their own notices. We remain responsible for our own choice and configuration of integrations and for our own disclosures.

13. Changes and contact

We update this Policy when our practices or legal obligations change and revise the “Last updated” date. We provide additional notice or obtain permission where required for a material change. A posted update is not blanket authorization to use previously collected information for a new, incompatible purpose.

Business name: Trivva.ai
Privacy requests and complaints: jake@trivva.ai
Mailing address: 7345 S Tatum Lane, Queen Creek, Arizona 85142, United States
General support: jake@trivva.ai
Support telephone: +1 480-280-1532