Privacy Policy

Welcome to the Privacy Policy of Trope ("we", "us", or "our"). Trope provides workflow capture, documentation, guidance, automation, and related services. When you use our services, you trust us with information about you, your team, and your workflows. We take that responsibility seriously and aim to handle personal information in a manner that is transparent, limited to appropriate purposes, and supported by administrative, technical, and organizational safeguards.

This Privacy Policy describes how we handle personal information that we collect through and in connection with our website at https://trope.ai, our applications, and any other website or service that we own or control and that links to this Privacy Policy (collectively, the "Service" or "Services"). This Policy applies to our website visitors, users of our applications, and other individuals who interact with us.

Personal Information We Collect

Our Services may use a combination of on-device and cloud-based functionality. Depending on the product configuration you use, the permissions you grant, and the settings enabled by you or your organization, Trope may collect and process information stored on your device, in your applications, and in content that you choose to upload or create through the Services. Where workflow capture, recording, import, or cloud processing features are available, those features are intended to be used with explicit user action, permissions, or consent controls presented in the product.

We primarily collect this contextual data in two ways. First, we collect information that you choose to include in prompts, workflow recordings, documents, and other submissions to the Services. Second, depending on the permissions you grant on your device and the requests you make, we may collect data from your device and applications to provide the Services. For example, if you use Trope to record a workflow in a third-party application, we may collect and process screenshots, UI metadata, and other contextual data that you allow us to access in order to fulfill your request. Depending on how you use the Services, the information processed through those features may include personal information or other sensitive operational content.

Additionally, we also collect the following categories of personal information about you:

Information you provide to us:

• Contact information, such as your first and last name, email and mailing addresses, and phone number.
• Account information, such as the username and password you use to access our Services.
• Payment information needed to complete your transactions with us, including name, payment card information, and billing information. This information is processed by our payment service provider, which may handle your payment information in accordance with its own privacy policy. We do not have access to your full payment card information.
• Communications that we exchange with you, including when you contact us with questions, feedback, or otherwise.
• Visual and audio information, such as screenshots, screen recordings, or user-generated content that you upload or otherwise provide through the Services.
• Marketing information such as your preferences for receiving our marketing communications and details about your engagement with them.
• Other information not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.

Where you provide us with the personal information of third parties, such as your team members or other contacts, it is your responsibility to inform them about the processing of their personal information in accordance with this Privacy Policy, and to confirm that they have given their permission.

Automatic data collection

We and our service providers may automatically log and combine information about you, your computer or mobile device, and your interactions over time with the Services, online resources, and our communications, such as:

• Device data, including your computer's or mobile device's operating system type and version, manufacturer and model, browser type, screen resolution, device type (e.g., phone, tablet), IP address, unique identifiers, language settings, and general location information such as city, state, or geographic area.
• Usage data, including pages, screens and/or features you viewed, accessed and/or used, workflows you recorded, how long you spent on a page, screen and/or feature, the website you visited before browsing to the Services, navigation paths between pages or screens, information about your activity on a page, screen and/or feature, access times, duration of access, and whether you have opened or otherwise engaged with our communications, such as our marketing emails, or clicked links or files within them.

We use the following tools for operational, security, analytics, and product functionality purposes:

• Cookies, which are text files that websites store on a visitor's device to uniquely identify the visitor's browser or to store information or settings in the browser for the purpose of helping you navigate between pages efficiently, remembering your preferences, enabling functionality, and helping us understand user activity and patterns.
• Local storage technologies, like SQLite, that provide cookie-equivalent functionality but can store larger amounts of data, including on your device outside of your browser in connection with specific applications.
• Web beacons, also known as pixel tags or clear GIFs, which are used to demonstrate that a webpage or email was accessed or opened, or that certain content was viewed or clicked.

Information from identity providers

When you sign in to the Services through a third-party identity provider, such as Google, Microsoft, or Okta, that provider may send us information associated with your account as authorized by you, your organization, or the provider's settings.

How We Use Personal Information

We use personal information for the following purposes or as otherwise described at the time of collection:

To provide our Services

This includes:

• Administering, hosting, and operating our Services. As described in "Personal Information We Collect", Trope provides a workflow recording and automation experience that is powered by your unique context and helps you unlock the knowledge in your device and across your applications that you want our Services to work in.
• Communicating with you and responding to any inquiries you may have; and
• Analyzing your use of our Services to allow us to evaluate and improve the Services.

To improve, secure, and support our Services

We may use personal information to analyze service performance, troubleshoot issues, maintain security, prevent abuse, provide support, and improve the usability and reliability of the Services. We may also create aggregated, anonymized, or de-identified information for lawful business purposes, including analytics, reporting, forecasting, and service improvement. We do not use customer content for unrelated new purposes in a manner inconsistent with this Privacy Policy, customer commitments, or applicable law.

For service communications

We may use personal information to communicate with you about the Services, including:

• Service and account communications. We may send administrative messages, onboarding communications, support responses, security notices, product updates, and other service-related communications.

For compliance and protection

We may use personal information to comply with legal obligations, including to enforce any applicable terms and conditions, defend against legal claims or disputes, protect the security and integrity of our Services, and identify and investigate fraudulent, harmful, unauthorized, unethical or illegal activity.

How We Disclose Personal Information

We may disclose personal information to the following individuals or entities and as otherwise described in this Privacy Policy or at the time of collection:

• Service providers. Companies and individuals that provide services on our behalf or help us operate the Services or our business, such as hosting, infrastructure, information technology, customer support, email delivery, analytics, identity, and security services. Where we engage service providers to process personal information on our behalf, we expect them to do so only for authorized purposes and subject to contractual and security obligations.
• Professional advisors. Professional advisors, such as lawyers, auditors, bankers, and insurers, where necessary in the course of the professional services that they render to us.
• Authorities and others. Law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes described above.
• Business transferees. Acquirers and other relevant participants in business transactions (or negotiations for such transactions) involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale or other disposition of all or any portion of the business or assets of, or equity interests in, our business (including, in connection with a bankruptcy or similar proceedings).

Data Residency and Cross-Border Processing

The location where personal information is stored or processed may depend on the Services you use, your deployment model, and customer configuration. In some cases, Trope may process personal information in the country where you are located or in other jurisdictions where we or our service providers operate. In other cases, including deployments subject to customer-specific contractual residency commitments, Trope may store and process customer content only within the agreed jurisdiction. For those deployments, Trope does not transfer customer content outside the agreed region except where required by applicable law.

Your Privacy Rights and Choices

Access or update your information

If you have registered for an account with us, you may review and update certain personal information in your account profile by logging into the account.

Access, correction, deletion, and complaints

Depending on your relationship with Trope, your location, and applicable law, you may have the right to request access to personal information we hold about you, request correction of inaccurate information, request deletion of certain information, or make a complaint about our privacy practices. We may need to verify your identity and evaluate the request under applicable law, contractual obligations, and security requirements before responding.

Other Sites and Services

Our Services may contain links to websites and other online services operated by third parties. In addition, our content may be integrated into web pages or other online services that are not associated with us. These links and integrations are not an endorsement of, or representation that we are affiliated with, any third party. We do not control websites or online services operated by third parties, and we are not responsible for their actions. This Privacy Policy does not apply to such third-party sites or services.

Security

We use administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, misuse, loss, disclosure, alteration, and destruction.

Our safeguards may include authentication, role-based or scoped access controls, encryption in transit and at rest where appropriate, logging, monitoring, and operational processes designed to support incident response, recovery, and legal compliance. If we become aware of a security incident involving personal information, we will assess and respond in accordance with applicable law and our contractual obligations.

No security measure is perfect, and we cannot guarantee that unauthorized access, disclosure, or misuse will never occur. We regularly evaluate and update our safeguards based on the sensitivity of the information involved, the nature of the Services, and applicable legal and contractual requirements.

Retention of Personal Information

Where required under applicable laws, we retain personal information only for as long as is necessary to fulfil the purposes for which it was collected and processed, in accordance with our retention policies, and in accordance with applicable laws and regulatory obligations.

To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of personal information, the purposes for which we use personal information and whether we can achieve those purposes through other means, and the applicable legal and regulatory requirements.

Depending on the Services and deployment model, Trope may also support customer-configured retention, deletion, export, audit, and legal hold controls. Where those controls are available, they may affect how long particular records are retained, preserved, exported, or deleted, and they may delay deletion where required to satisfy legal hold, compliance, security, or other preservation obligations.

Children's Privacy

Our Services are not intended for use by children under 13 years of age. If we learn that we have collected personal information through our Services from a child under 13 without the consent of the child's parent or guardian as required by law, we will delete it.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make a material change, we may provide notice by posting the updated policy on this page, through the Services, or by other reasonable means. We will also update the date shown at the top of this Privacy Policy.

How to Contact Us

If you have any questions or comments about this Privacy Policy, our privacy practices, or if you would like to exercise your rights with respect to your personal information, please email us at matthew@trope.ai. You may also use this contact channel for privacy complaints or other privacy-related inquiries.