trickroom

Privacy Policy

Last updated September 30, 2026

This policy explains what information Trickroom (“Trickroom”, “we”, “us”) collects when you use trickroom.xyz, the Trickroom dashboard and the Trickroom API (together, the “Service”), how we use it, and the choices you have.

Trickroom is a platform that applications use to run AI jobs, on computers we host, on behalf of their users. That gives us two relationships with personal information:

  • Account holders. When you sign up and build or run applications in a Trickroom workspace, this policy covers the information we collect about you.
  • People who use an application built on Trickroom. We process your information to provide the Service to that application, following its instructions. The application’s own privacy policy explains how it uses your information; this policy explains what Trickroom does with it.

Information we collect

  • Account information: your name, email address, password (stored only as a hash), passkeys and two-factor authentication settings, and basic profile information from Google or GitHub when you sign in with them.
  • Workspace information: workspace and application names, members and their roles, API keys (stored as hashes), and settings.
  • Content: the instructions, messages and files that you or an application send to the Service, and what jobs produce: results, step-by-step events, files, and screenshots and screen recordings of jobs that use a computer.
  • Model requests and responses: what a job sends to an AI model and what the model returns. Each application keeps these by default so its administrators can review and evaluate its jobs; an administrator can turn this off, which also erases what was kept.
  • Connected accounts: when you connect an account such as Google, GitHub, Slack or Figma, we store the access credentials it issues, encrypted, and read data from that account while carrying out the tasks you or the application ask for.
  • Billing and payments: usage, invoices and billing records, and records of payments that jobs request and who approved them. Card details are handled by our payment processor, Stripe; we do not store full card numbers.
  • Technical information: IP addresses and request logs, which we use for security and rate limiting, and cookies that keep you signed in. We do not use advertising or analytics cookies.

How we use information

  • To provide the Service: run jobs, show their results and bill for them.
  • To keep the Service secure and prevent fraud and abuse.
  • To support you and send messages about your account and the Service.
  • To comply with the law and enforce our Terms of Service.

We do not sell personal information, and we do not use your content or data from connected accounts to train AI models.

Google user data

With your permission, given through Google’s sign-in screen, the Service can access data in your Google account for the integration you connect:

  • Gmail: read your messages, to find and summarize email for a task, and send email on your behalf once you approve the exact message.
  • Google Drive and Docs: read your files, and create or update files the Service made, to use documents in a task.
  • Google Calendar: see your availability and read, create or update events, to schedule for you.
  • Your email address: to show which account is connected.

We use this data only to carry out the tasks you, or the application you use, ask for. To do that we send the relevant parts to the AI model running the task. For models in our managed catalog, we route requests only to providers that do not use them for training; an application can instead use a model provider it connects itself, whose terms then apply. Google access credentials are stored encrypted and are never given to the AI model or placed on a job’s computer.

Trickroom’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, sell it, or use it to train AI models. Trickroom staff do not read it unless you ask us to, it is needed for security or to investigate abuse, or the law requires it.

You can disconnect a Google account in the application that connected it, or at any time at myaccount.google.com/permissions.

How we share information

  • With the workspace and application you use. Workspace administrators can see their jobs, results and members. An application sees the jobs it runs for you.
  • With service providers that run the Service for us, under contracts that limit their use of the data: cloud hosting (Google Cloud, Vercel), databases (PlanetScale), job orchestration (Temporal), recording storage (Backblaze), payments (Stripe), AI model providers (including through OpenRouter), and web search (Firecrawl).
  • For legal reasons, when required by law or to protect the rights, safety and security of our users, the public or Trickroom.
  • In a business transfer, such as a merger or acquisition, subject to this policy.

How long we keep information

We keep account and workspace information while your account is active. Model requests and responses are kept until the application turns keeping them off or the job is deleted. When an application is deleted, its job, usage and billing history is kept for our records. Backups follow their own schedule and expire over time. You can ask us to delete your information at any time; we may keep what the law requires, for example billing records.

Security

Data is encrypted in transit. Connected-account credentials and kept model requests are encrypted at rest with AES-256-GCM, and passwords and API keys are stored as hashes. Accounts can use passkeys and two-factor authentication. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your choices and rights

You can see and update your account in the dashboard, disconnect connected accounts, and ask us to access, correct, export or delete your information by writing to help@trickroom.xyz. If you use an application built on Trickroom, you can also contact that application.

California residents have the right to know what personal information we collect, use and disclose; to delete and correct it; and not to be discriminated against for using these rights. We do not sell personal information or share it for cross-context behavioral advertising. To make a request, write to help@trickroom.xyz; we will verify your request before acting on it.

Children

The Service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.

Where information is processed

Trickroom is based in California, United States, and processes information in the United States.

Changes to this policy

We may update this policy. We will change the date above when we do, and tell account holders about material changes before they take effect.

Contact

Questions about this policy or your information: help@trickroom.xyz.