1. Introduction
Triostack Technologies Private Limited ("Triostack," "we," "us," or "our") respects your privacy. This Privacy Policy explains what information we collect through TriostackOne and its available applications, why we collect it, how it is used and shared, and the choices available to visitors, Customers, and Users.
This Privacy Policy applies to the TriostackOne website and product. It does not apply to the practices of companies Triostack does not own or control, or to individuals Triostack does not employ or manage.
2. Scope
This Privacy Policy describes how Triostack handles information it processes as a controller in its own right — for example, account, billing, and website information. Where Triostack processes personal data contained within Customer Data on a Customer's behalf, that processing is instead governed primarily by the applicable agreement between Triostack and the Customer and, where it applies, the Data Processing Agreement. See Section 7 for how this distinction works.
3. Information We Collect
3.1 Account Information
Name, work email address, phone number, password, and role, collected when an account is created or updated.
3.2 Business/Organization Information
Company name, business address, industry, company size, and billing details provided when a Customer registers an organization or subscribes to a plan.
3.3 User Information
Information about individual Users added to a Customer's account, such as name, email address, and role, provided by the Customer's administrators.
3.4 Customer Content and Data
Records, files, and other content a Customer or User submits to TriostackOne applications in the course of using the Services, which may include personal data about the Customer's own employees, clients, or other individuals. This is Customer Data — see Section 7.
3.5 Usage Information
Information about how the website and product are used, such as pages visited, features used, and actions taken.
3.6 Device and Technical Information
Browser type and version, operating system, device identifiers, and similar technical information.
3.7 Log Information
Server logs, including IP address, timestamps, and request details, generated automatically when the website or product is accessed.
3.8 Cookies and Similar Technologies
Information collected through cookies and similar technologies, described further in the Cookie Policy and Section 16.
3.9 Communications
Information provided when contacting Triostack for support, sales, or other inquiries, including the content of the communication.
3.10 Summary
| Data Category | Example | Purpose |
|---|---|---|
| Account Information | Name, work email, password | Authentication and account management |
| Business Information | Company name, billing address | Subscription and billing administration |
| Customer Data | Records submitted to TriostackOne apps | Providing the Services per Customer instructions |
| Usage & Log Information | Pages visited, IP address, timestamps | Security, reliability, and product improvement |
4. How We Use Information
Triostack uses the information described above to:
- provide, operate, maintain, and support TriostackOne and its available applications;
- create and manage accounts, authenticate Users, and enforce account-level permissions;
- process billing, payments, and Subscription management;
- communicate about the Services, including updates, security notices, and support responses;
- monitor, detect, and prevent fraud, abuse, and security incidents;
- analyze and improve the website and product; and
- comply with legal obligations and enforce Triostack's agreements and policies.
5. Legal Bases for Processing
Where applicable data protection law requires a legal basis for processing personal data, Triostack relies on one or more of the following, depending on the processing activity and jurisdiction: performance of a contract with the Customer or User, Triostack's legitimate interests in operating and securing the Services, compliance with a legal obligation, and, where required, consent.
7. Customer Data vs. Triostack Data
It is important to distinguish between two categories of information:
- Customer Data — content that a Customer or its Users submit to TriostackOne applications (for example, CRM records, HR records, or invoices), which may contain personal data about the Customer's own employees, clients, or other individuals. Triostack processes Customer Data on behalf of the Customer, in accordance with the Customer's instructions and the applicable agreement between the parties (and, where it applies, the Data Processing Agreement). The Customer is generally responsible for the personal data it chooses to submit as Customer Data and for ensuring it has a lawful basis to do so.
- Triostack Data — information Triostack collects and processes in its own right to operate its business and the Services, such as account, billing, website usage, and log information described in Section 3. This Privacy Policy primarily governs Triostack Data.
8. Data Retention
Triostack retains information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods for specific categories of data are described on the Data Retention & Deletion page.
9. Data Security
Triostack maintains technical and organizational measures designed to protect information against unauthorized access, alteration, disclosure, or destruction, as further described on the Security page. No method of transmission or storage is completely secure, and Triostack cannot guarantee absolute security.
10. International Data Transfers
Information may be processed and stored in countries other than the one in which it was originally collected. Where Triostack transfers personal data across borders, it seeks to use appropriate safeguards required under applicable data protection law. Further detail on cross-border transfer mechanisms applicable to Customer Data is provided in the Data Processing Agreement.
11. Your Rights and Choices
Depending on your jurisdiction and the applicable law, you may have rights in relation to your personal data, which can include the right to:
- access the personal data Triostack holds about you;
- correct inaccurate or incomplete personal data;
- request deletion of your personal data, subject to applicable exceptions;
- restrict or object to certain processing;
- receive a copy of your personal data in a portable format, where applicable; and
- withdraw consent, where processing is based on consent, without affecting prior processing.
Not every right is available in every jurisdiction or in every circumstance. To exercise a right, contact Triostack using the details in Section 22. Where information forms part of Customer Data, Triostack may direct the request to the relevant Customer, who generally controls that data.
12. Account and Data Deletion
Customers can request deletion of their account and associated Customer Data in accordance with the Data Retention & Deletion page. Users should contact their Customer's administrator to request changes to information the administrator controls.
13. Children's Privacy
TriostackOne is a business platform intended for use by organizations and their authorized personnel. It is not directed to, and Triostack does not knowingly collect personal data from, children below the age defined as a minor under applicable law. If Triostack becomes aware that it has inadvertently collected personal data from a child in violation of applicable law, it will take reasonable steps to delete that information.
14. Third-Party Links and Services
The website and product may contain links to, or integrations with, Third-Party Services. This Privacy Policy does not apply to those third parties, whose own privacy practices govern any information they collect. See Terms of Service, Section 10.
15. Marketing Communications
Triostack may send marketing communications about TriostackOne where permitted by applicable law. You can opt out of marketing communications at any time using the unsubscribe link included in those messages, or by contacting Triostack directly. Opting out of marketing communications does not affect transactional or service-related messages, which are necessary to the operation of your account.
17. Regional Privacy Rights
Privacy laws vary by region. The sections below provide additional information relevant to certain jurisdictions. They apply only to the extent the relevant law applies to you and to the specific processing activity in question.
18. India Data Protection
Triostack seeks to process personal data in accordance with applicable data protection and privacy laws of India. Where India's data protection framework applies to a given processing activity, Triostack intends to handle personal data consistently with the obligations that framework places on it in its applicable role. This section does not constitute a representation of certified compliance, and the specific obligations that apply depend on the parties, the processing activity, and applicable law at the relevant time.
19. European Economic Area / UK Privacy Rights
Where the General Data Protection Regulation ("GDPR") or the UK GDPR applies to Triostack's processing of your personal data, you may have the rights described in Section 11, including the right to lodge a complaint with your local supervisory authority. GDPR and UK GDPR are legal frameworks, not certifications; this section describes how those frameworks apply where relevant, and does not represent that Triostack holds any third-party privacy certification.
20. California Privacy Rights
Where the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), applies to Triostack's processing of your personal information, you may have rights to know, delete, correct, and opt out of certain uses of your personal information, and the right not to receive discriminatory treatment for exercising these rights. Triostack does not sell or share personal information as defined by the CCPA/CPRA.
21. Changes to This Privacy Policy
Triostack may update this Privacy Policy from time to time. Where changes are material, Triostack will use reasonable efforts to provide advance notice, such as by email or an in-product notice, before the changes take effect.
22. Contact Us
Questions about this Privacy Policy or requests relating to personal data can be directed to info@triostack.in, by phone at +91-8882435276, or via Legal Contact.