Privacy Policy

1. Overview

This Privacy Policy explains how Kanso Labs ("we", "us") collects, uses and shares information when you use Helm, part of the Trimtab suite. It applies to all Trimtab apps on a shared account. We act as the processor of the content you put into your workspace and as the controller of your account and usage data.

2. Information we collect

Account information: your name, email address, password (stored hashed) or single-sign-on identifier, and workspace details.

Workspace content: the strategies, roadmaps, projects, comments and other content you and your team create or upload.

Usage and device data: log data, feature usage, approximate location derived from IP, and diagnostics used to operate and improve the service.

Payment information: handled by our payment processor (Stripe). We do not store full card numbers; we receive limited billing metadata such as plan, status and the last four digits.

3. How we use information

We use information to provide, secure, support and improve the service; to process payments; to communicate with you about your account, security and product updates; to detect and prevent abuse; and to comply with legal obligations. Our legal bases include performance of our contract with you, our legitimate interests in operating the service, your consent where required, and compliance with law.

4. AI processing

When you use AI features, the relevant workspace content is sent to our AI model provider (Anthropic) to generate the output you request. We do not sell your content, and we do not permit our AI provider to use your content to train their general models, consistent with their commercial terms. AI outputs may be imperfect; you remain responsible for reviewing them.

5. How we share information

We share information with service providers (sub-processors) who help us run the service — for example cloud hosting, our payment processor (Stripe), our AI provider (Anthropic), and email delivery — under contracts that require them to protect your information.

We may share information to comply with law, enforce our terms, protect rights and safety, or as part of a merger, acquisition or asset sale (with notice where required). We do not sell your personal information.

6. Data retention

We retain account and workspace information for as long as your account is active and as needed to provide the service. After account closure we delete or anonymise personal information within a reasonable period, except where we must retain it to meet legal, accounting or security obligations.

7. Security

We use technical and organisational measures to protect information, including encryption in transit, access controls, and hashed credentials. No system is perfectly secure, but we work to protect your information and to notify you of incidents as required by law.

8. Your rights and choices

Depending on where you live, you may have rights to access, correct, export or delete your personal information, to object to or restrict certain processing, and to withdraw consent. Workspace owners can manage and export much of their workspace data from within the product. To exercise other rights, contact us using the details below; we will respond as required by applicable law (including the GDPR, UK GDPR, CCPA/CPRA, and the Australian Privacy Act, where they apply).

9. Cookies

We use strictly-necessary cookies to keep you signed in and to operate the service, and limited analytics to understand and improve usage. You can control cookies through your browser; disabling essential cookies may break sign-in.

10. International transfers

We and our sub-processors may process information in countries other than where you live. Where we transfer personal information internationally, we use appropriate safeguards (such as standard contractual clauses) as required by law.

11. Children

The service is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

12. Changes and contact

We may update this Privacy Policy from time to time; we will post the new effective date and, for material changes, provide additional notice. For privacy questions or requests, contact us at privacy@trimtab.app.