Privacy Policy

Introduction

This Privacy Policy explains how Triad ("Triad," "we," "us") collects, uses, shares, and protects information when you use our websites and product. By using Triad, you agree to this policy alongside our Terms of Service.

Information We Collect

Account information

When you register, we collect details such as your name, email address, organization or company name, and similar profile fields. Passwords are stored using industry-standard hashing; we do not store your password in plain text.

Customer data

You and your team submit content to operate Triad, including partner records, activities, contacts, accounts, notes, attachments, and other information you choose to enter. This is all treated as Customer Data under your control.

Usage data

We collect technical and usage information such as log events, product analytics, IP address, browser type, device identifiers, and general interaction patterns. This helps us run, secure, and improve the service.

Cookies

We use cookies and similar technologies for authentication, session management, security, and preferences. You can control cookies through your browser settings, but some features may not work if essential cookies are disabled.

How We Use Information

We use the information above to provide and operate the service, communicate with you about your account or product updates, improve and develop features, monitor and protect against abuse and security threats, and comply with legal obligations. We do not sell your personal information.

AI Processing

Triad uses Anthropic's Claude API to provide AI features (for example, Read the Room, draft emails, and activity decomposition). Customer data you send to these features is processed by Anthropic in accordance with their data processing terms. Anthropic does not train models on Triad customer data. Triad likewise does not use your content to train or fine-tune any model, whether for your organization or for any other. When you use voice capture, the audio you choose to record is sent to OpenAI's API to be transcribed to text (using OpenAI's gpt-4o-mini transcription model). OpenAI does not use data submitted through its API to train its models. We encourage you to review Anthropic's policies for the latest details on how they handle API data.

Aggregate and Derived Data

Triad generates measurements from how you use the service: engagement frequency, intervals between interactions, the number of people and accounts associated with a relationship, changes in engagement over time, and opportunity outcomes. We refer to these as Derived Data and use them, in aggregate and de-identified form, to operate and improve the service and to analyze which patterns of partner engagement are associated with which outcomes.

Three limits apply to this use. Each is enforced in the design of the system rather than by policy alone.

Content is excluded. Derived Data consists of numeric and categorical values only. The text of notes, transcripts, correspondence, documents, and files is not included in any shared or cross-customer analysis. Because content is excluded at the point of computation, de-identification is a property of how the system is built rather than a procedure applied afterward.

Analysis is limited to patterns. Results of cross-customer analysis are expressed as general relationships between measurements and outcomes, such as an association between a decline in engagement before a given deal stage and a lower rate of closure. Triad does not generate, publish, or infer statements concerning any named partner, company, or individual across customers. Partners are commonly shared between companies, including competing companies, and entity-level analysis is therefore excluded from scope permanently.

Minimum contribution thresholds apply. No cross-customer measurement is presented unless a sufficient number of distinct organizations and underlying records contribute to it that no individual organization's data can be identified from the result.

Contribution to cross-customer analysis is enabled by default and may be disabled at any time by a workspace administrator in workspace settings. You may also request removal of aggregates previously contributed. Disabling contribution does not affect any feature available within your own workspace.

Sharing of Information

We do not sell your data. We share information with service providers ("subprocessors") who help us run Triad, including Supabase for hosting and database infrastructure, Vercel for deployment and delivery, Stripe for billing and payments, Resend for transactional email, Anthropic for AI features as described above, and OpenAI for voice-capture transcription. We may also disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, or sale of assets, in which case we will seek appropriate protections where feasible.

Data Retention

We retain Customer Data while your account is active and as needed to provide the service. After you delete data or close an account, we delete or anonymize it within a reasonable period, subject to backup and legal retention windows (often on the order of 30 days for routine backups unless a longer hold is required by law).

Your Rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. You may also have rights under the GDPR (European Economic Area or UK) or the CCPA/CPRA (California), including the right to opt out of "sale" or "sharing" (we do not sell personal information as defined by those laws). To exercise rights, contact us at the email below. We will respond within the timeframes required by applicable law.

Security

We use encryption in transit (such as HTTPS) and rely on providers and controls that support encryption at rest where applicable. Access to production systems is limited to authorized personnel, and we use technical controls such as row-level security in the database to separate customer data. No method of transmission or storage is 100% secure; we work to follow good industry practice.

International Transfers

Triad is operated from the United States. If you access the service from outside the US, your information may be transferred to, stored, and processed in the US and other countries where our subprocessors operate. We use appropriate safeguards where required by law.

Children's Privacy

Triad is not directed at individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us and we will take steps to delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the new version on this page and change the "Last updated" date. If changes are material, we will provide additional notice as appropriate, such as by email or an in-product message.

Contact

Privacy questions and requests: privacy@gettriad.io.