Your data, your rights

We collect your account info, the reviews you sync, and basic usage data to make the service work.

Account information

When you create a Tritonium account, we collect your name, work email address, company name, role, and authentication preferences (account access uses a password with enforced multi-factor authentication).

Review & ingestion data

We process app reviews, ratings, metadata, and related content that you choose to sync from live supported platforms such as Apple App Store and Google Play, plus any content you choose to provide through enabled imports, CSV uploads, API feeds, or future roadmap connectors.

Reviewer display names, handles, avatars, developer responses, and similar fields pulled from app stores are public store metadata associated with those reviews. We process them as review metadata for display, analysis, and reply workflows, not as private Tritonium account-holder profile data.

Usage information

We automatically collect information about how you use the Service, including feature usage, integration events, performance diagnostics, API calls, and device/browser characteristics.

We use your data to power AI analysis, send you alerts, and improve the platform. That's it.

We use the information we collect to:

• Provide, maintain, and improve the Tritonium review intelligence platform
• Run AI-powered sentiment, impact, and anomaly analysis on your ingested reviews
• Send alerts, webhooks, and dashboards about review trends and incidents you configure
• Provide customer support, onboarding, and account management
• Detect, investigate, and prevent security incidents or abuse
• Comply with legal obligations and enforce our Terms of Service

We don't sell your data. We only share with essential service providers under strict contracts.

We do not sell your personal information. We may share information only in the following circumstances:

Service providers

We use vetted subprocessors (AWS, Stripe, Customer.io, and others listed in our DPA) to provide hosting, storage, email delivery, and support tooling. Contracts include confidentiality and security requirements.

Legal requirements

We may disclose information if required by law, subpoena, or to protect Tritonium, our customers, or the public.

Business transfers

If Tritonium is involved in a merger, acquisition, or asset sale, your information may be transferred pursuant to that transaction.

We keep your account and review data while your subscription is active. Ask us to delete it and we do, within 30 days.

We retain account and review data for as long as your subscription is active or as needed to provide the Service.

When you close your account or request deletion, we delete associated data within 30 days unless we are legally required to retain it to resolve disputes or enforce agreements.

Export your data yourself any time. For access, correction, or deletion, email us. We respond within 24 hours.

Depending on your location, you may have the right to access, correct, delete, restrict, or object to our processing of your personal information, as well as the right to data portability.

To exercise these rights, contact privacy@tritonium.com from the email associated with your account. We respond within 24 hours.

Encryption, access controls, and security monitoring protect your data. No completed SOC 2 certification is claimed.

We implement industry-standard security controls including:

• 256-bit AES encryption at rest and TLS 1.2+ in transit
• Per-tenant data isolation enforced server-side on every request
• Role-based access control with enforced multi-factor authentication
• Immutable audit logs with security event review and incident response procedures
• Ask which independent security evidence is currently verified for scope and date

We use EU Standard Contractual Clauses and encryption for all cross-border transfers.

We currently operate in the United States (AWS us-east-1). When transferring data across borders, we rely on EU Standard Contractual Clauses (SCCs), the UK Addendum, and supplementary technical measures such as encryption and access controls.

Regional data residency options are on our roadmap for enterprise customers. Contact us for specific requirements.

Essential cookies only. No advertising trackers. No selling behavioral data.

We use essential cookies for authentication, session management, and security. We do not use advertising cookies or sell behavioral data.

We rely on first-party analytics with anonymized IP addresses to understand aggregate usage. You can adjust cookie preferences in the dashboard or via browser settings.

Tritonium is for businesses. We don't knowingly collect data from anyone under 18.

Tritonium is not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact privacy@tritonium.com and we will delete it promptly.

We'll email you about material changes and post notices in your dashboard.

We may update this Privacy Policy to reflect operational, legal, or regulatory changes. When we make material updates, we will notify account owners via email and post a notice in the dashboard. Continued use of the Service after updates take effect constitutes acceptance of the revised policy.

Questions? Email privacy@tritonium.com or reach out to our DPO directly.

For privacy inquiries or to exercise your rights:

• Email: privacy@tritonium.com
• Security: security@tritonium.com
• DPA & Legal: legal@tritonium.com

Mail: Tritonium, Inc., 500 2nd Street, San Francisco, CA 94107

How your data flows

1. You connect Link your app stores & review sources
2. We encrypt AES-256 encryption before storage
3. AI analyzes Sentiment & insights in the current US data plane
4. Secure storage Production storage in AWS us-east-1
5. You export Export any time; email us to delete

All data flows are encrypted with 256-bit AES at rest and TLS 1.2+ in transit.

US residency today

United States (current)

Storage AWS us-east-1 · multi-AZ

• No completed SOC 2 certification claimed
• Encryption at rest and in transit
• DPA available

European Union (roadmap)

Storage On the roadmap

• Data-processing terms and privacy contact
• SCCs for data transfers
• Email privacy@tritonium.com to ask about timing

APAC (roadmap)

Storage On the roadmap

• Email privacy@tritonium.com with your requirements
• Priority based on demand

Built-in data protections

Encryption at rest

Review text, app IDs, and account metadata are encrypted at rest with AES-256.

Data minimization

We store only the review and account data needed to run the product, with access restricted by per-tenant isolation and role-based controls.

Retention & deletion

Data is retained only as long as needed to provide the service, and deletion requests are honored on request to privacy@tritonium.com.

Take control of your data

Email us to exercise your data rights. We respond within 24 hours.

• Right-to-delete honored on request to privacy@tritonium.com
• Export machine-readable JSON or CSV any time
• Data processing agreement available on request from legal@tritonium.com
• Regional sub-processors documented with change notifications

Target response

< 24 hours

Export formats

JSON, CSV

How to request

Email

• Request your data

  Get a full export of all your data in machine-readable format.

• Delete account

  Permanently remove your account and all associated data.

• Ask a question

  Have a privacy question? Our team is here to help.

Privacy contacts

Privacy inquiries

privacy@tritonium.com

Security team

security@tritonium.com

Legal & DPA

legal@tritonium.com

Mailing address

Tritonium, Inc., 500 2nd Street, San Francisco, CA 94107