Privacy Policy
Last updated: March 30, 2026
Trimo ("we", "us", "our") operates the trimo.dev website and the Trimo application at app.trimo.dev. This Privacy Policy explains how we collect, use, and protect your information.
Information we collect
Account data
When you create an account on app.trimo.dev, we collect your email address and authentication credentials (via GitHub or email OAuth). This data is stored on our servers to provide you access to the Trimo dashboard.
Usage data
We collect anonymised usage data through Google Analytics to understand how visitors interact with our marketing site (trimo.dev). This includes page views, referral sources, and device information. This data is collected only with your explicit consent.
Application data
When you use the Trimo application, the local daemon on your machine communicates with our cloud service. This communication may include:
- Pipeline metadata (status, timestamps, prompt text)
- Snippets of agent output for dashboard visibility
- Git event data (commit hashes, branch names)
Your source code repositories are never uploaded to Trimo servers. All code execution happens locally on your machine inside Docker containers. GitHub access happens locally through the Trimo daemon.
API keys and credentials
Your LLM API keys (e.g., Anthropic API key) are stored only on your local machine. They are never transmitted to or stored on Trimo servers. Trimo does not intermediate, proxy, or have access to your LLM API calls.
Cookies
Our marketing site uses the following cookies:
- Analytics cookies (Google Analytics):
_ga,_ga_*— used to distinguish users and track page views. Only set after you provide consent via the cookie banner. You can withdraw consent at any time by clearing your browser's localStorage and cookies for trimo.dev.
The Trimo application (app.trimo.dev) uses session cookies for authentication. These are essential cookies required for the service to function.
How we use your information
- To provide and maintain the Trimo service
- To authenticate your account
- To display pipeline status and agent output on the dashboard
- To understand website usage patterns (with consent) and improve the site
- To communicate with you about the service (e.g., account-related emails)
Data sharing
We do not sell your personal data. We share data only with:
- Infrastructure providers: Our servers run on Render.com. Database hosted on managed Postgres.
- Analytics: Google Analytics processes anonymised usage data from our marketing site (with your consent).
Data retention
Account data is retained while your account is active. Pipeline data is retained according to your subscription tier (1 month on the free tier). You can request deletion of your account and associated data at any time by contacting us.
Your rights
Under GDPR and applicable data protection laws, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Withdraw consent for analytics cookies at any time
- Object to processing of your data
- Request data portability
Cookie consent
When you first visit trimo.dev, a cookie consent banner appears. Analytics cookies are not set until you explicitly accept. You can withdraw consent at any time by clearing localStorage for trimo.dev or using your browser's cookie settings.
Security
We use industry-standard security measures to protect your data, including encrypted connections (HTTPS), secure authentication, and access controls. Your source code never leaves your machine — all agent execution happens locally in Docker containers.
Changes to this policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the service after changes constitutes acceptance of the updated policy.
Contact
For questions about this Privacy Policy or to exercise your data rights, contact us at [email protected].