Privacy Policy

1. Introduction

Trevi, Inc. ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, websites, and applications (collectively, the "Services").

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

Information You Provide

• Account information: email address, name, and other registration details
• API specifications: OpenAPI specs, Postman collections, and related documentation you upload
• Configuration data: MCP server settings, intelligence configurations, and preferences
• Communication data: messages, support requests, and feedback you send to us

Automatically Collected Information

• Usage data: how you interact with our Services, features used, and time spent
• Log data: IP addresses, browser type, device information, and access times
• Performance data: error logs, latency metrics, and system performance information
• Cookies and tracking technologies: see our Cookie Policy section below

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Services
• Process your API specs and generate MCP servers using our Intelligence features
• Authenticate users and manage accounts
• Send you service-related communications
• Respond to your inquiries and provide customer support
• Monitor and analyze usage patterns to improve our Services
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations and enforce our Terms of Service

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party service providers who assist in operating our Services (e.g., cloud hosting, analytics, payment processing)
• Legal Requirements: When required by law, court order, or government regulation
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize us to share your information

5. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security assessments and updates
• Limited access to personal information on a need-to-know basis

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to provide our Services, comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it by law.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a portable format
• Opt-out: Unsubscribe from marketing communications
• Objection: Object to certain processing activities (where applicable)

To exercise these rights, please contact us at privacy@trevi.dev.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and store information about your preferences and activity on our Services. You can control cookies through your browser settings, though disabling cookies may limit your ability to use certain features of our Services.

We use cookies for:

• Authentication and session management
• Remembering your preferences and settings
• Analyzing usage patterns and improving our Services
• Providing personalized content and features

9. Third-Party Services

Our Services may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

10. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Services, you consent to the transfer of your information to these countries.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Your continued use of our Services after such changes constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at privacy@trevi.dev.