trickle.

Legal

Privacy Policy

Last updated: May 11, 2026

1. Who we are

Trickle ("we", "us") provides a workflow pacing application for HubSpot. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

2. What we collect

  • Account information. Your name, email address, and authentication identifiers.
  • HubSpot OAuth tokens. Access and refresh tokens for the HubSpot portals you connect, stored encrypted at rest.
  • Object IDs. The HubSpot record IDs (contact, company, deal, ticket) that pass through the Trickle workflow action. We do not read or store record properties.
  • Usage data. Logs of API calls, error events, and aggregate usage metrics for billing and reliability.
  • Billing information. Processed by Stripe; we do not store full card numbers.

3. What we do not collect

We do not read, store, or transmit HubSpot contact properties (names, emails, phone numbers), company properties, deal amounts, or ticket contents. The Trickle workflow action receives only the object ID needed to re-enroll the record.

4. How we use information

We use the information above to operate the service, throttle and re-enroll records on your behalf, send transactional emails, prevent abuse, comply with legal obligations, and improve reliability. We do not sell personal information.

5. Sharing

We share data only with the sub-processors required to operate the service: HubSpot (the platform you authorize), Supabase / AWS (hosting), Cloudflare (edge delivery), Stripe (billing), and Resend (transactional email). A current sub-processor list is available on request.

6. Retention

Object IDs and queue records are retained for 90 days for audit purposes, then deleted. Account information is retained for the life of your account and 30 days after deletion. Backups are retained for 35 days.

7. Security

All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). OAuth tokens are encrypted with rotating keys. Access to production systems is limited to authorized personnel using SSO and hardware-backed MFA.

8. Your rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal information. To exercise these rights, email privacy@trickleflow.app.

9. International transfers

We process data in the United States and the European Union. Where required, transfers are governed by Standard Contractual Clauses.

10. Children

Trickle is not intended for individuals under 16. We do not knowingly collect data from children.

11. Changes

We will post material changes to this policy here and notify you by email at least 14 days before they take effect.

12. Contact

Questions or requests? Email privacy@trickleflow.app.