This Privacy Policy describes how Trovn, a product of C.I. Industries ("we," "us," or "our"), located in Sarasota, Florida, United States, collects, uses, discloses, and protects your information when you use our web application at app.trovn.io and our marketing website at trovn.io (collectively, the "Service").

By accessing or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, do not use the Service.

1. Information We Collect

1.1 Information You Provide Directly

Account Information: When you create an account, we collect your full name, email address, and password. If you sign up or log in using Google Single Sign-On (SSO), we receive your name, email address, and Google account profile picture from Google.
Payment Information: When you subscribe to a paid plan, your payment information (credit card number, billing address) is collected and processed directly by our payment processor, Stripe, Inc. We do not store your full credit card number on our servers. We receive and store a tokenized reference to your payment method, along with the last four digits of your card, card type, and billing address for record-keeping.
Contact Information: If you contact us via our contact form, email, or other communication channels, we collect your name, email address, and the content of your message.
Domain Registration Information: If you purchase a domain name through the Service, we collect your name, email address, mailing address, and phone number as required by the domain registrar (Porkbun, LLC) and ICANN regulations.

1.2 Information We Collect Through Google APIs

If you choose to connect your Google account to access Google Analytics (GA4) or Google Search Console (GSC) data within Trovn's Command Center, we request access to the following Google API Scopes:

Google Analytics Data API (read-only): We access your GA4 property data, including website traffic metrics, user behavior analytics, page views, sessions, and audience demographics for the properties you explicitly authorize. Scope: https://www.googleapis.com/auth/analytics.readonly
Google Search Console API (read-only): We access your GSC data, including search performance data (clicks, impressions, CTR, average position), indexing status, and sitemap information for the properties you explicitly authorize. Scope: https://www.googleapis.com/auth/webmasters.readonly
Google OAuth (profile and email): We access your basic Google profile information (name, email, profile picture) for authentication purposes. Scopes: openid, email, profile

Trovn's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We only use Google API data to provide and improve the specific features you authorized (i.e., displaying your analytics in the Command Center). We do not:

Sell your Google data to third parties.
Use your Google data for advertising purposes.
Share your Google data with third parties except as necessary to provide the Service (e.g., displaying it to you in the Trovn dashboard).
Allow humans to read your Google data unless (a) you give us explicit consent, (b) it is necessary for security purposes, (c) it is necessary to comply with applicable law, or (d) our use is limited to internal operations and the data has been aggregated and anonymized.

You can revoke Trovn's access to your Google account data at any time by visiting your Google Account Permissions page and removing Trovn from the list of connected applications.

1.3 Information Collected from Third-Party Services

SEO Data (DataForSEO): When you use the SEO Analyzer or Site Audit features, we query DataForSEO APIs to retrieve publicly available SEO metrics, backlink data, domain authority scores, and keyword data for the domains you submit. This data relates to websites, not to you personally.

1.4 Information Collected Automatically

Log Data: Our servers automatically record information when you access the Service, including your IP address, browser type and version, operating system, referring URL, pages visited, date/time stamps, and clickstream data.
Cookies: We use essential session cookies for authentication and maintaining your logged-in state. We do not use tracking cookies or third-party advertising cookies. See Section 8 (Cookie Policy) for more details.
Analytics: We use Google Analytics 4 (GA4) on our marketing website (trovn.io) to understand how visitors interact with our site. GA4 may collect information such as your device type, browser, geographic location (city-level), and page interactions. This data is governed by Google's Privacy Policy.

2. How We Use Your Information

We use the information we collect for the following purposes:

To Provide the Service: To create and manage your account, process subscriptions, deliver the features you use (lead generation, AI website building, client portals, analytics dashboards, site audits, SEO analysis), and provide customer support.
To Display Your Analytics: To fetch, aggregate, and display your Google Analytics and Google Search Console data within the Trovn Command Center, as explicitly authorized by you.
To Process Payments: To process subscription payments and manage billing through Stripe.
To Register Domains: To process domain purchases and manage DNS records through Porkbun.
To Communicate With You: To send transactional emails (account confirmations, password resets, billing receipts), respond to your inquiries, and send important service-related notifications.
To Improve the Service: To analyze usage patterns, diagnose technical issues, and improve the functionality, performance, and user experience of the Service.
To Ensure Security: To detect, prevent, and respond to fraud, abuse, security incidents, and technical issues.
To Comply With Legal Obligations: To comply with applicable laws, regulations, legal processes, or governmental requests.

3. How We Store and Protect Your Data

Infrastructure: The Service is hosted on infrastructure provided by Abacus.AI. Our data is stored on secure, cloud-hosted servers located in the United States.
Encryption in Transit: All data transmitted between your browser and our servers is encrypted using TLS/SSL (HTTPS) encryption.
Encryption at Rest: Sensitive data stored in our databases is encrypted at rest.
Access Controls: Access to user data is restricted to authorized personnel only, on a need-to-know basis.
Password Security: User passwords are hashed using industry-standard one-way hashing algorithms. We never store passwords in plain text.
Payment Security: Payment processing is handled entirely by Stripe, which is PCI DSS Level 1 certified, the highest level of certification in the payment industry.

While we implement commercially reasonable security measures, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee the absolute security of your data.

4. Third-Party Services

We use the following third-party services to operate the Service. Each has its own privacy policy governing their use of your data:

Google (OAuth, GA4, GSC): Used for authentication (Google SSO), and for accessing your Google Analytics and Google Search Console data with your explicit authorization. Google Privacy Policy.
Stripe: Used for payment processing and subscription management. Stripe Privacy Policy.
Porkbun: Used for domain name registration and DNS management. Porkbun Privacy Policy.
DataForSEO: Used for retrieving publicly available SEO data, backlink information, and keyword metrics. DataForSEO Privacy Policy.
Abacus.AI: Provides the hosting infrastructure and AI capabilities for the Service. Abacus.AI Privacy Policy.

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:

Service Providers: With the third-party service providers listed in Section 4, solely to the extent necessary for them to provide their services to us (e.g., Stripe processes your payments, Porkbun registers your domains).
Legal Requirements: If required to do so by law, regulation, subpoena, court order, or other governmental request.
Protection of Rights: To protect the rights, property, or safety of C.I. Industries, our users, or the public.
Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, in which case your information may be transferred as part of that transaction. We will notify you of any such change.
With Your Consent: We may share information with third parties when you have given us explicit consent to do so.

6. Data Retention

Account Data: We retain your account information for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal, tax, or audit purposes.
Google API Data: Google Analytics and Google Search Console data fetched via APIs is cached temporarily (up to 24 hours) to improve performance. We do not permanently store raw Google API data beyond what is necessary for the current display session. Historical summaries may be retained in aggregated, anonymized form.
Payment Records: Billing and transaction records are retained for a minimum of 7 years as required by tax and financial regulations.
Contact Submissions: Contact form submissions are retained for 2 years unless you request earlier deletion.
Log Data: Server logs are retained for up to 90 days for security and debugging purposes.

7. Your Rights

You have the following rights regarding your personal data:

Access: You can request a copy of all personal data we hold about you.
Correction: You can request that we correct any inaccurate or incomplete personal data.
Deletion: You can request that we delete your personal data. We will comply within 30 days, subject to legal retention requirements.
Data Export: You can request a machine-readable export of your personal data (account information, client data, analytics summaries).
Revoke Google Access: You can disconnect your Google account from Trovn at any time through your Google Account Permissions or through the Trovn app settings. This will stop all future Google API data access.
Opt Out of Marketing: You can unsubscribe from marketing communications at any time by clicking the unsubscribe link in any marketing email.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

8. Cookie Policy

We use a minimal number of cookies, strictly for functional purposes:

Session Cookies: Essential cookies used to maintain your authenticated session when you are logged in to the Service. These cookies are strictly necessary for the Service to function and cannot be turned off.
CSRF Tokens: Security cookies used to prevent cross-site request forgery attacks.

We do not use:

Third-party advertising or tracking cookies
Persistent marketing cookies
Cross-site tracking cookies

Google Analytics on our marketing website (trovn.io) may set its own cookies. You can opt out of Google Analytics by installing the Google Analytics Opt-Out Browser Add-On.

9. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal data from a child under 18, we will take steps to delete that information immediately. If you believe a child under 18 has provided us with personal information, please contact us at [email protected].

10. International Data Transfers

The Service is operated from the United States. If you are accessing the Service from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States. By using the Service, you consent to the transfer of your information to the United States.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Effective Date" at the top. For significant changes, we may also send you an email notification. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: [email protected]
Company: C.I. Industries (Trovn)
Location: Sarasota, Florida, United States