Privacy policy.

• Account info: company name, contact name, email, phone, plan, and billing status.
• Billing data: handled by Stripe. We do not store full card numbers.
• Business context: briefs, notes, goals, constraints, brand preferences, process details, and files you provide.
• Call, form, and lead records: the customer enquiries we process to deliver the service, including AI receptionist call records and website form submissions.
• Work records: drafts, plans, recommendations, task queues, approvals, revisions, and delivery history.
• Usage data: server logs, request paths, device/browser metadata, and operational diagnostics for security and support.

• To deliver your Trovedge retainer and the 24/7 AI receptionist.
• To generate drafts, plans, analysis, and approval queues for your company.
• To bill your subscription and manage account support.
• To keep high-risk actions - spending money, publishing, contacting customers, production changes - behind owner approval.
• To maintain safety controls, audit approval history, and prevent misuse.
• To improve Trovedge using de-identified operational patterns where appropriate.

Trovedge may prepare work, but high-risk external actions stay approval-gated. That includes spending money, publishing, contacting customers, deploying production changes, or making external commitments for your company.

• We do not sell your data.
• We do not share a customer's private company context with advertisers.
• We do not use one customer's private company context to serve another customer.
• We do not train third-party AI models on your private tenant data without consent.
• We do not take approval-gated actions without your approval.

This section is about your Trovedge account. If you are simply a visitor to trovedge.com, see “United States residents — CCPA/CPRA” below for how ad-measurement data works.

• Stripe for billing and payment processing.
• ElevenLabs for the AI receptionist's voice and call transcription.
• Telnyx as the phone carrier that routes calls to the AI receptionist.
• Netlify to host the trovedge.com website.
• Fly.io to host the application backend.
• Google (Analytics, Ads) for site analytics and ad-campaign measurement.
• AI model providers to produce outputs when needed for your requested work.
• Email or messaging providers for account, onboarding, and approval notifications.

• Active account data is retained while your subscription is active.
• Work outputs and approval records may be retained for support, audit, and continuity.
• After cancellation, company content is deleted within 30 days unless legal, billing, security, or audit retention applies.
• Stripe records are retained according to accounting and tax requirements.

• Cancel your subscription at any time.
• Request a copy of account data we hold about your company.
• Request correction or deletion of company context and work outputs.
• Email privacy@trovedge.com for privacy requests.

Trovedge is operated from Barrie, Ontario, Canada. The trovedge.com website is served by Netlify's global network and the application backend runs on Fly.io in Toronto, Canada. Processors we use for billing, calling, and ad measurement — Stripe, ElevenLabs, Telnyx, and Google — may process data in the United States or other regions under their own compliance programs.

For visitors and customers in Canada, we handle personal information following the Personal Information Protection and Electronic Documents Act (PIPEDA) principles: we collect only what we need, tell you why we're collecting it, keep it reasonably secure, and give you access to correct or delete it on request (see “Your choices” above).

Any commercial electronic message we send (email or text) is sent only with your consent or an existing business relationship, identifies Trovedge as the sender, and includes a working way to unsubscribe, as required by Canada's Anti-Spam Legislation (CASL).

This section describes how we handle personal information under the California Consumer Privacy Act, as amended by the CPRA, for any U.S. resident — whether you are just browsing trovedge.com or you are a customer.

Do Not Sell or Share My Personal Information

Categories we collect

• Identifiers: name, email, phone, business name, IP address.
• Commercial info: the service you enquired about, stated budget, plan and billing status.
• Internet/network activity: pages viewed, links clicked, referring page, and similar site-usage data.
• Audio/voice: call audio and transcripts if you call or are called by the AI receptionist.
• Content you submit: messages, briefs, and files you send us.

Where it comes from

• Directly from you — forms, calls, and emails.
• Automatically from your browser — analytics and cookies.
• From our processors — Stripe (payment status), ElevenLabs and Telnyx (call metadata).

Why we use it

• To respond to your enquiry and deliver the service you asked for.
• To process payments (Stripe) and run the AI receptionist (ElevenLabs, Telnyx).
• To measure whether our ads are working (Google).
• For security, fraud prevention, and to keep approval controls auditable.

Who we share it with

We do not sell personal information. We do share site-activity data — such as which pages you viewed or that you clicked an ad — with Google so they can measure ad performance. Under the CPRA that counts as a “share” even though no money changes hands. You can opt out of this at any time by turning on Global Privacy Control in your browser (we honour the signal automatically) or by emailing privacy@trovedge.com.

Your rights

• Know what personal information we hold about you and where it came from.
• Delete personal information we hold about you, subject to legal exceptions.
• Correct inaccurate personal information.
• Opt out of the sharing described above.
• Not be discriminated against for exercising any of these rights.

Authorized agents, verification, and timelines

You can name an authorized agent to submit a request on your behalf; we may ask for written proof of the agent's authority and still verify your identity directly. We verify a request by matching the name, email, or phone number you give us against our records, and may ask for more detail if we can't confirm it's you. We acknowledge a verifiable request within 10 business days and respond within 45 calendar days (the statute allows one 45-day extension with notice for complex requests).

Calls to the live AI-receptionist demo line, and calls handled by a Trovedge-run AI receptionist for a customer's business, are processed by ElevenLabs (conversational AI) and Telnyx (telephony) and produce a written transcript. We use transcripts and any associated recording to run the receptionist itself, review call quality, and — for the demo line — follow up with you as a prospect. We do not sell call recordings or transcripts.

If you check the SMS/call consent box on a form (for example, the Missed-Job Audit request), you may receive a text message or call about your request, including automated messages. Message and data rates may apply, and message frequency varies. Reply STOP to any text to opt out at any time — it is not a condition of purchasing anything from us. We do not sell phone numbers collected for texting.

If we make material changes, we will update this page and notify active customers when the change materially affects their use of the service.

Questions about privacy: privacy@trovedge.com