Privacy Policy
Last updated: September 24, 2026
Who we are
Trinacle ("we", "us") provides done-for-you marketing services and software for e-commerce merchants, including the Trinacle Shopify app and the Trinacle dashboard at app.trinacle.com. This policy explains what information we collect and how we use it.
Information we collect
- Merchant data via the Shopify app: when you install Trinacle, we access store data you approve: customer contact details (name, email, phone, address), order and product data, and online store content: solely to plan and run your marketing campaigns, sync audiences, and attribute revenue.
- Account data: your name, email, password (hashed), and billing status. Billing itself is processed by Shopify and our billing systems; we do not store your card details.
- Campaign engagement data: email opens, clicks (via tracked short links), SMS events, and chat transcripts: used to report results and improve deliverability.
- Usage data: standard log and device information when you use our websites and app.
How we use it
- To plan, produce, approve and publish marketing campaigns on your behalf.
- To attribute revenue to campaigns and report results to you.
- To provide support and communicate about your account.
- To meet legal obligations and prevent abuse.
We do not sell your personal information. We do not use your customer data to train models shared across merchants.
Google Ads data
You can connect a Google Ads account to Trinacle. You do it yourself, through Google's own sign in, and nothing is read until you approve it. We ask for two permissions: one to manage the Google Ads account you choose, and one to see the email address of the Google login you connected, so we can show you which login is linked.
What we read. For the accounts you give us access to: the account and campaign settings, each campaign's daily budget, and performance data such as cost, impressions, clicks, conversions and conversion value, plus the search terms that triggered your ads. We read this so you can see how your ads are performing in the dashboard.
What we write, only when you ask. Pausing or re-enabling a campaign, changing a campaign's daily budget, and adding or removing negative keywords. Every change is recorded with the value it had before, so it can be reverted from the actions ledger.
What we store. One connection token for each Google login you connect. It is stored in encrypted form (AES-256-GCM), stays on our own systems, is used only to make the calls described above, and is deleted when you disconnect the account in the dashboard or remove Trinacle's access in your Google account.
What we never do. We do not sell Google user data. We do not use it for anyone's advertising except the account it came from, and only as you ask. We do not use it to build or train models. We do not share it with anyone except service providers who help us run the service, under contract, and we never transfer it for advertising, credit-worthiness or lending purposes. If you ask for an AI review of a campaign, that account's campaign names and performance numbers are sent to our AI provider to write the summary. Nothing else leaves us.
Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. You can see or remove Trinacle's access at any time at myaccount.google.com/permissions.
Subprocessors
We use vetted service providers to operate the platform: including email delivery providers, telephony (SMS/voice), AI providers, hosting, and analytics. Each processes data only on our instructions under data processing agreements.
Data retention & deletion
We retain campaign and engagement data while your account is active. When you cancel, we retain data as needed for accounting and legal duties, then delete or anonymize it. You may request deletion or export of your data at any time by emailing hello@trinacle.com.
Marketing communications
Marketing emails and SMS are sent only to contacts who have opted in, with unsubscribe and STOP handling honored immediately.
Your rights
Depending on your jurisdiction (including California under CCPA/CPRA and the EU/UK under GDPR), you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. Contact us at the email above and we will respond within 30 days.
Changes
We may update this policy as the product evolves. Material changes will be announced in the app or by email.