Privacy Policy

Effective November 2, 2026 · Last updated November 2, 2026

1. Who we are
2. What we collect
3. How we use it, and why
4. AI and your content
5. Connected social accounts
6. Who we share it with
7. Where your data is processed
8. How long we keep it
9. Your rights and choices
10. Emails
11. Cookies and similar technology
12. Security
13. Children
14. Regional notices
15. Changes to this policy
16. Contact us

1. Who we are

Project 66 Inc. runs Trellan and is responsible for your information.

Trellan (trellan.ca) is a product of Project 66 Inc., a Delaware corporation, built by Project 66 Venture Studio. In this policy, “we” and “us” mean Project 66 Inc., which makes Trellan. This policy covers our websites, the Trellan app (and mobile app once available), our waitlist, and our emails (together, the “Service”). Project 66 Inc. is the organization accountable for your personal information under Canadian law, and the “controller” under EU and UK law.

Our Privacy Officer is Olia Stasiuk, Founder. You can reach them at hello@project66inc.com or at our mailing address: 16192 Coastal Highway, Lewes, Delaware 19958, USA.

2. What we collect

What you give us, what your website already says publicly, what your connected accounts share with your permission, and basic technical data.

Source	What
You give us	Your email address and LinkedIn profile link when you join the waitlist; your name; your website address; your answers (for example “Would you post these?”) and choices (a plan, or waiting for early access); photos, videos, logos and voice notes you upload or record; edits and instructions you give Trellan, by typing or by voice; and messages you send us.
From your public website	When you give us your website address, Trellan reads the public pages of that site: what the business sells, who it serves, how it describes itself, its images, logo, colours and fonts. We read only what anyone can see without logging in.
From your connected accounts	Only after you connect an account and approve it: the access token the platform gives us, your account or page name, ID and picture, the posts Trellan publishes for you, and their performance (for example reach, likes and comments). See section 5.
From payments	When you subscribe, Stripe processes your payment. We receive your name, email, billing country, the plan, the payment status and the last 4 digits and brand of your card. We never see or store your full card number.
Collected automatically	How you arrived (the referral link you used, campaign tags in the link, and the website that sent you), and the page you first landed on; basic technical data our hosting provider records to keep the Service running and secure (IP address, browser, device type, pages requested, time); and small items your browser stores so the site remembers you (see section 11).
From people you refer, or who refer you	If you joined through someone’s referral link, we record that link so they get credit. We tell them how many people joined through their link, never who.

We don’t ask for, and ask you not to upload, sensitive information such as health data, government ID numbers or financial account numbers. If you upload photos or voice notes of other people, you confirm you have their permission.

3. How we use it, and why

To run Trellan for you, to bill you, to keep it secure, and to tell you about Trellan if you’ve agreed.

We use your information to	Legal basis (EU/UK)
Run the Service: read your website, write and design your posts, keep your brand profile, learn your style from your choices and edits, publish what you approve, and show you how your posts perform	Performing our contract with you
Manage the waitlist, your place in line, the private beta and early access, and referral credit	Performing our contract; our legitimate interest in running a fair launch
Take payments, send receipts, process refunds, prevent fraud and meet tax and accounting rules	Contract; legal obligation
Send service emails you need (confirming your email, receipts, important changes)	Contract; legitimate interest
Send emails about your place on the waitlist, the private beta, early access and offers	Your consent, given when you join the waitlist (you can withdraw it at any time)
Keep the Service secure, fix problems, and see from our own records which features are used, so we can improve Trellan	Legitimate interest
Comply with law and enforce our Terms	Legal obligation; legitimate interest

We don’t make decisions about you that have legal or similarly significant effects based only on automated processing. We will ask for your consent before using your information for a purpose not described here.

4. AI and your content

AI helps write and design your posts. Your content is never used to train AI models.

• Trellan uses AI models (Anthropic’s Claude, provided through Amazon Web Services’ Bedrock service) to read your website, write your posts, plan designs and videos, and act on your edits. Voice notes are turned into text with Amazon Transcribe.
• We send these services only what is needed for the task, for example your website text and your brand profile to write a post.
• We don’t use your content, or data from your connected accounts, to train or fine-tune AI models. AWS states that Amazon Bedrock doesn’t share your prompts or results with the model providers and doesn’t use them to train models. We have also opted out of AWS using any of our content, including voice notes sent to Amazon Transcribe, to improve its AI services.
• Trellan remembers your preferences (the styles you like, the edits you make) by saving them in your brand profile, to personalise your own account. This isn’t used to train a model.
• AI can be wrong. You review every post before it’s published (see our Terms).

5. Connected social accounts

Connecting an account is optional. Trellan uses what a platform shares only to publish what you approve and to show you how it performs, and deletes it when you disconnect.

Connecting social accounts is not available yet. When it is, you’ll be able to connect LinkedIn, Instagram, Facebook, Threads, TikTok, YouTube and X, each through the platform’s own sign-in and permission screen. When you do:

• We receive and store an access token, your account or page name, ID and picture, and the information the permissions you approved allow, such as the posts we publish for you and their analytics.
• We use this data only to publish the posts you approve, to show you their performance, and to suggest better posts for you. We don’t sell it, use it for advertising, combine it with other data to build profiles, or share it with anyone else. It is shown only to you and to people you give access to your Trellan workspace; LinkedIn data is shown only to you and to workspace members who are admins of that LinkedIn Page.
• A post is published only after you approve it. Signing in to a platform is never treated as permission to post.
• You can disconnect an account in Trellan at any time, or revoke our access in the platform’s own settings. We then stop using the token and delete the data we received from that platform within the times in section 8. Posts already published stay on the platform until you delete them there.

Platform-specific notices

• YouTube. Trellan uses the YouTube API Services. By connecting YouTube you agree to be bound by the YouTube Terms of Service. Google’s handling of your data is described in the Google Privacy Policy. You can revoke Trellan’s access at any time from the Google security settings page. Trellan’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We refresh or delete stored YouTube data at least every 30 days, and delete it within 7 days of a request or of you disconnecting in Trellan (within 30 days if you revoke through Google’s page).
• LinkedIn. With your consent, we store your LinkedIn profile data needed to publish for you. We keep LinkedIn data only for the periods LinkedIn allows (see section 8) and delete it on your request. We don’t export it, share it with other customers, or use it for sales, recruiting or advertising.
• Instagram, Facebook and Threads (Meta). We process Meta Platform Data only for the purposes above and never sell or license it. To delete it, see Delete my data.
• TikTok. We publish only content you’ve previewed and approved, with the privacy and interaction settings you choose, and we show your TikTok nickname before posting.
• X. We post only with your express approval of each post. If content is deleted or changed on X, we delete or update our stored copy within 24 hours of learning about it. We don’t use X content to train AI models.

6. Who we share it with

Only with the service providers that run Trellan for us, under contract, and when the law requires it.

We don’t sell or rent personal information, and we don’t “share” it for cross-context behavioural advertising. We share it only with:

Provider	What they do for us	Where
Netlify, Inc.	Hosts our website and app, runs our servers and stores files and waitlist records	United States
Amazon Web Services, Inc.	AI models through Bedrock (Anthropic’s Claude) and voice-to-text through Amazon Transcribe	United States
Supabase, Inc.	Database for brand profiles, connected-account records and posts	United States (US East)
Stripe, Inc.	Payments, subscriptions, refunds and fraud prevention	United States and other countries
Resend	Sends our emails	United States
Google LLC	Serves the fonts on our pages (your browser requests them from Google)	United States
The social platforms you connect	Receive the posts you approve, when you approve them	As set by each platform

We may also disclose information if required by law or to protect rights and safety, and to a buyer or successor if Project 66 Inc. or Trellan is involved in a merger, acquisition or sale. We’ll tell you before your information becomes subject to a different privacy policy.

7. Where your data is processed

We are based in Canada and the United States, and our providers process data mainly in the United States. Your information may therefore be stored and processed outside your province, state or country, and may be accessible to the courts, law enforcement and national security authorities of those countries. When we transfer personal information from the European Economic Area, the United Kingdom or Switzerland, we rely on the European Commission’s Standard Contractual Clauses (and the UK addendum) and, where a provider is certified, the EU-U.S. Data Privacy Framework.

8. How long we keep it

Information	How long
Waitlist details (email, LinkedIn link, website, answers, referral credit)	Until you ask us to delete them, or 12 months after early access opens if you never become a customer
Your account, brand profile, uploads and posts	While your account is active; deleted within 30 days after you close it
Payment and tax records	7 years, as required by tax law
Proof of email consent and unsubscribes	3 years after you joined or unsubscribed, whichever is later
Server and security logs	For a short, limited time set by our hosting provider
Access tokens for connected accounts	Until you disconnect or revoke access, then deleted immediately
LinkedIn data	Your own profile and ID: while connected. Activity data of members: no more than 48 hours. Profile data of other members: cached for no more than 24 hours. Activity of organization Pages you’re authenticated for: up to 6 months; other organizations’ activity: up to 6 weeks. Page admin and reporting data: up to 1 year
YouTube data	Refreshed or deleted at least every 30 days; deleted within 7 days of a request
X content	Deleted or updated within 24 hours after it is deleted or changed on X
Other connected-platform data	Only as long as needed to show you performance, and deleted within 30 days after you disconnect

We may keep information that has been made anonymous, so it can no longer identify you, to understand how Trellan is used.

9. Your rights and choices

See it, fix it, take it, delete it, or say no to emails, whenever you want.

Depending on where you live, you can ask us to: give you access to your personal information and a copy of it; correct it; delete it; restrict or object to how we use it; send it to you or another service in a portable format (except data we received from LinkedIn or another platform whose terms don’t allow it to be exported); and withdraw consent you gave us (this doesn’t affect what we did before). You can also disconnect any social account in Trellan at any time.

Your email address is needed to join the waitlist: without it we can’t hold your place. Everything else is optional.

To make a request, email hello@project66inc.com or use Delete my data. We may need to confirm it’s you. We reply within 30 days. We won’t treat you differently for using your rights.

If you’re not satisfied with our answer, you can complain to a privacy regulator: in Canada, the Office of the Privacy Commissioner of Canada; in the EU, your local data protection authority; in the UK, the Information Commissioner’s Office; in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC).

10. Emails

• When you join the waitlist and agree to hear from us, we send a confirmation email, and emails about your place in line, the private beta and early access, and your referral link.
• Every marketing email says who it’s from, includes our mailing address and has an unsubscribe link. We act on unsubscribes right away, and always within 10 business days. Unsubscribing doesn’t remove your place on the waitlist; we’ll still send the one email that tells you when your access opens.
• If you’re a customer, we’ll still send emails you need, such as receipts and important changes to the Service.

11. Cookies and similar technology

We don’t use advertising or cross-site tracking cookies. Our pages store a few small items in your browser (local storage) so that the site remembers your place on the waitlist and how you first arrived, for example through a referral link. Our payment page, run by Stripe, uses cookies Stripe needs for security and fraud prevention. Loading our fonts sends a request to Google. You can clear local storage and cookies in your browser at any time; parts of the site may then forget your choices.

12. Security

We protect your information with encryption in transit (HTTPS), access controls that limit who can see it, secrets kept on our servers and never in the pages you load, and payment handled entirely by Stripe. No system is perfectly secure. If a breach creates a real risk of significant harm to you, we’ll notify you and the regulators as the law requires.

13. Children

Trellan is for adults running a business. You must be at least 18 to use it. We don’t knowingly collect information from anyone under 18. If you believe a child has given us information, contact us and we’ll delete it.

14. Regional notices

Canada

We handle personal information in line with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada’s Anti-Spam Legislation (CASL). Our Privacy Officer is named in section 1.

European Economic Area, United Kingdom and Switzerland

The legal bases we rely on are listed in section 3 and your rights in section 9. For any request, contact our Privacy Officer in section 1.

United States

We don’t sell personal information or share it for cross-context behavioural advertising, and we don’t use or disclose sensitive personal information to infer characteristics about you. Where a U.S. state privacy law applies, you can use the rights in section 9, appoint an authorised agent, and appeal our decision by replying to it.

15. Changes to this policy

We’ll update this policy when Trellan changes. If a change is significant, we’ll tell you by email or in the app before it takes effect, and ask for your consent where the law requires it. The date at the top shows the latest version.

16. Contact us

Project 66 Inc. · Attn: Privacy Officer
16192 Coastal Highway, Lewes, Delaware 19958, USA
Email: hello@project66inc.com