Privacy Policy

Webtrigo is a product of Trigonum Technologies, Inc., a company registered in the United States at 166 Geary Street, Suite 1500, San Francisco, CA 94108, United States. In this policy, “we”, “us” and “our” mean that company.

This policy covers:

• webtrigo.com and every page on it, including the free analysis form,
• the preview websites we build and send to businesses we have not worked with yet,
• the dashboard you sign into as a customer,
• the email we send, including the email we send before you are a customer,
• and the websites we build and host for customers, as far as our own role goes.

It does not cover what a customer does with their own website once it is live. When someone books an appointment on a salon's site we built, that salon decides what happens to the booking and we handle it on their instructions. It also does not cover other companies' sites we link to, including Google, Stripe or a booking platform.

• We collect what you give us (an address, a web address, a message) and what your browser sends while you read the site.
• We use it to send the analysis you asked for, to run the services you pay for, and to keep the product working.
• We do not sell your personal information, and we do not hand it to anyone for advertising that follows you around the internet.
• We do measure the site, and that includes session recording: a replay of clicks and scrolling on our own pages. Section 8 says what it is and how to switch it off.
• Public business listings are how our outbound email works. Section 5 says where that comes from and how to make it stop, in one click.
• You can ask for a copy of what we hold, ask us to fix it, or ask us to delete it. Email hello@webtrigo.com and a person answers.

• Contact and account details. Name, email address, phone number, business name, and a password if you open an account. Passwords are stored hashed and we never see them.
• The web address you give us. The domain you type into the analysis or preview form, and everything publicly readable at it: pages, text, images, load times, structured data.
• Your business information. Hours, services, prices, license and insurance details, photos, staff names, and anything else you send us to put on your site.
• Billing details. Plan, invoices, payment status, and the brand and last four digits of a card. Full card numbers go straight to Stripe and never reach our servers.
• Messages. Email, chat, form notes, call bookings, and anything you send us about work you want done.
• Usage information. Pages viewed, links and buttons clicked, the page you arrived from, approximate city-level location derived from your IP address, browser and device type, and session recordings of visits to our own pages (see section 8).
• Technical logs. IP address, timestamps, requested addresses and error reports, kept so we can find and fix faults.

We do not ask for and do not want sensitive personal information as US state privacy laws define it: government identifiers, precise location, health or biometric data, racial or ethnic origin, religious beliefs, sexual orientation, or the contents of your private messages with other people. Please do not send it.

• From you: forms, email, chat, calls, and your account.
• From your browser, automatically, through cookies and similar technology. The Cookie Policy lists every one of them.
• From your own website and public profiles, which we read to build the analysis and the preview.
• From public business listings and directories, including Google Business Profile, and from public review pages.
• From the companies that run parts of the service for us: payment status from Stripe, delivery and reply status from the systems we send email with, and booking details from our scheduling tool.

This is how the front of our business works, so it gets a section of its own rather than a line in a list.

We look for businesses of the kind we build for: salons and studios, electricians and trades, dental practices, and similar owner-run businesses in the United States. We read what is already public about them, their website, their Google Business Profile, their reviews, their hours and services. From that we sometimes build a preview version of their website and email the owner a link to it.

What we hold at that point is business contact information: the business name, its public address and phone number, its website, a business email address, the name of the owner or manager where it is published, and our own notes and measurements about the site.

Why we do it: it is how a small company introduces itself to another small company. There is no charge, no obligation and no account. If we never hear back, that is the end of it.

How to make it stop

• Every email we send carries an unsubscribe link at the bottom. One click and the address is suppressed. That is the fastest route.
• Or email hello@webtrigo.com with the word “remove” and the business name. We suppress the address, delete the preview we built, and keep only the minimum record needed to make sure we do not contact you again.
• We honor opt-outs within 10 business days at the outside, which is what the CAN-SPAM Act requires, and in practice the same day.

If we built a preview of your site, it sits on our own infrastructure at an unlisted address, it is blocked from search engines, and it is never published anywhere as yours. Ask and it is gone.

• To send the free analysis someone asked for, and to answer messages.
• To build, host, update and look after the websites and services our customers pay for.
• To take payment, send invoices, and keep the accounting records the law requires.
• To measure whether the product works: which pages get read, which forms get finished, which changes helped and which got rolled back.
• To keep the service secure, to debug faults, and to prevent abuse and fraud.
• To send our own marketing to businesses, as described in section 5, and to send customers service messages about their account.
• To meet legal obligations, to enforce our Terms of Service, and to establish or defend legal claims.

A word on AI

We use AI tools, including models from OpenAI and Anthropic, to draft website copy and to organize information about a business while we build its site. We use them under business terms that do not permit training on our data, and a person reviews what they produce before anything goes live.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We are paid by our customers, which is the whole reason we do not have to be paid by anyone else.

We do use other companies to run parts of the service. Each gets only what it needs, only to do work for us, and is not allowed to use it for anything else:

• Hosting and infrastructure: Amazon Web Services (servers, storage, databases), Cloudflare (domains and traffic), GitHub (the code of the sites we build).
• Payments: Stripe.
• Email: Microsoft 365 for our own mailboxes, and the platform we use to send and track outbound campaigns.
• Measurement and monitoring: PostHog (analytics and session recording), Sentry (error reports), Google Tag Manager.
• Support and scheduling: Tidio (chat) and Cal.com (booking a call).
• AI providers: OpenAI and Anthropic, for the drafting described above.
• Professional advisers: accountants and lawyers, under a duty of confidentiality.

We also share information when the law requires it, such as a valid subpoena or court order, when it is needed to protect our rights or someone's safety, and if the business is ever sold or merged, in which case the buyer takes on this policy for the information it receives.

The Cookie Policy lists every cookie by name. Three things are worth saying plainly here.

Analytics

We use PostHog to count page views, clicks and finished forms, so we know whether a page works. It is our own measurement, not an advertising network, and it is not used to build a profile of you for anyone else.

Session recording

On webtrigo.com and on the preview sites we send, PostHog also records a replay of the visit: mouse movement, scrolling, clicks and the pages viewed. It is how we find out that a button was never seen or that a form broke on one model of phone. Passwords, email addresses and phone numbers are masked before anything is stored, so a replay never holds them. You can switch recording off by sending a Global Privacy Control signal, by using your browser's tracking protection, or by asking us at hello@webtrigo.com.

Global Privacy Control

If your browser or an extension sends a GPC signal, we treat it as an opt-out of analytics and session recording on webtrigo.com, including the preview pages we send, and as a valid opt-out request under the state laws that recognize it. We do not act on the older “Do Not Track” header, which never got an agreed meaning.

Depending on where you live, you have the right to:

• know what personal information we hold about you, and get a copy you can take elsewhere,
• have it corrected when it is wrong,
• have it deleted,
• opt out of the sale or sharing of it, of targeted advertising, and of profiling with legal or similarly significant effects. We do none of those, so there is nothing to opt out of, but the right stands and the GPC signal in section 8 counts as exercising it,
• and not be treated differently for asking. Our prices and our service do not change because you exercised a right.

These come from state laws including the California Consumer Privacy Act as amended by the California Privacy Rights Act, and the comprehensive privacy laws of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Florida, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky and Rhode Island. Which of them applies depends on where you live.

How to exercise them

Email hello@webtrigo.com, or write to the address in section 16. We answer within 45 days, and we will tell you if we need the further 45 days the law allows. We will ask you to confirm the email address or account the request concerns, because handing your information to the wrong person would be worse than the delay. You can use an authorized agent, and we will ask for proof that you authorized them.

If we say no

Reply to our answer with “appeal” in the subject line. Someone who did not make the first decision reviews it and answers within 45 days with reasons. If we still say no, you can take it to your state attorney general.

For California residents, these are the categories of personal information we have collected in the last 12 months, where each comes from, why we collect it, and who it goes to. The purposes are the ones in section 6 and the recipients are the ones in section 7.

• Identifiers (name, email, phone, IP address, account ID). From you and from public business listings. Used to run the service and to contact you. Disclosed to our hosting, email and analytics providers.
• Customer records (billing name, contact details, payment status). From you and from Stripe. Used to take payment and keep accounts. Disclosed to Stripe, our accountants and our bank.
• Commercial information (plan, subscription history, services you asked about). From you. Used to run the account.
• Internet and network activity (pages viewed, clicks, session recordings, browser and device). Automatically, through cookies and analytics. Used for measurement, security and debugging. Disclosed to PostHog, Sentry and Google Tag Manager.
• Geolocation, approximate only (city level, derived from IP address). Automatically. Used for security and to know which market a visitor is in. We do not collect precise location.
• Professional information (your role at the business, and published staff names for a site we are building). From you and from public sources.
• Inferences (which of our services a business looks like it needs). Made from the above, used to decide what to offer.

We do not collect sensitive personal information as the CCPA defines it, so there is nothing to limit and no “Limit the Use of My Sensitive Personal Information” link. We have not sold personal information or shared it for cross-context behavioral advertising in the last 12 months, and we do not do so now. We do not knowingly collect personal information from anyone under 16. How long each category is kept is set out in section 11.

We keep information for as long as we need it for the purpose we collected it for, then delete it or strip out what identifies you. In practice:

• Analysis requests and prospect records: up to 24 months from the last contact, then deleted.
• Suppression records (the fact that an address asked not to be contacted): kept indefinitely, because keeping the request is the only way to honor it.
• Customer accounts and website content: while the account is open, and 90 days after it closes, so a site can be handed back or restored.
• Invoices and payment records: 7 years, because tax law requires it.
• Session recordings and detailed analytics: 12 months.
• Security and server logs: 90 days.

Everything runs on managed cloud infrastructure, encrypted in transit and at rest. Access to customer information is limited to the people who need it to do the work, through individual accounts with two-factor authentication wherever the provider supports it. Card numbers never touch our servers. No system is perfectly secure, and anyone who tells you otherwise is selling something. If a breach ever affects your information, we will tell you and the authorities as fast as the law requires.

Webtrigo is sold to businesses. It is not for children, and we do not knowingly collect information from anyone under 18. If you believe a child has sent us personal information, email hello@webtrigo.com and we will delete it.

We are a US company and we serve US businesses. Our systems, and the companies that run parts of the service for us, process information in the United States and, for some of those providers, in other countries where they operate. If you use the site from outside the United States, you are sending information to a country whose privacy rules may differ from your own. This policy applies to everyone wherever you are, and the rights in section 9 can be exercised by email from anywhere.

We review this policy at least once every 12 months, and we update it whenever what we do changes. The date at the top is the date of the version you are reading. If a change materially affects how we use information we already hold, we will email account holders before it takes effect.

Trigonum Technologies, Inc.
166 Geary Street, Suite 1500, San Francisco, CA 94108, United States

hello@webtrigo.com
+1 (628) 600-2867

A person reads that inbox, usually the same day.