trepzy.

Legal

Privacy Policy

This Policy explains how Trepzy handles personal data when you visit our websites, request an invite, create or use an account, communicate with us, or use a service that refers to this Policy.

Last updated:

1. Who is responsible for your data

Trepzy, Inc. is the controller for the website, invite process, business accounts and Trepzy services described here. Our current public business address is 535 Fifth Avenue #1055, New York, NY 10017, United States.

A financial partner or a business using Trepzy may be an independent controller for data it collects for its own purposes. Its privacy notice will apply to that processing.

2. Data we collect

  • Contact and account data, such as name, work email, authentication records, language and profile information.
  • Invite and business qualification data, such as website, business model, international activity, volume range, technology stack, operational needs and research preference.
  • Business and verification data needed to assess eligibility, meet legal obligations and activate a service, including company, representative, ownership, tax, address and verification records.
  • Transaction and service data, such as checkout, billing, transfer, card, dispute and support records. Sensitive card numbers and security codes are handled by secure tokenized components and are not intended to pass through Trepzy systems.
  • Device, network and security data needed to deliver and protect the service, such as IP address, request time, browser or device signals, logs and suspected abuse indicators.
  • Website and acquisition data, such as the page visited, broad referrer category, campaign parameters and interactions. Optional analytics only starts after your choice to accept it.
  • Communications you send to us and records showing which terms, disclosures or preferences you accepted.

3. Where data comes from

We receive data directly from you, from your business or account administrator, through your use of the services, from financial and verification partners involved in an activated product, from public or legally available sources, and automatically from the website or service infrastructure.

4. Why we use data

Depending on the context, we rely on performance of a contract or pre-contractual steps, compliance with legal or regulatory obligations, legitimate interests, protection of rights, fraud prevention, and consent. Where consent is the basis, you may withdraw it at any time without affecting earlier lawful processing.

  • Provide the website, invite process, account and contracted services.
  • Assess eligibility, onboard businesses and connect the financial partners required for an activated product.
  • Authenticate users, prevent fraud and abuse, protect funds and systems, and investigate incidents.
  • Process and reconcile transactions, meet tax, accounting, sanctions, financial-crime and other legal obligations, and exercise or defend legal rights.
  • Respond to communications, maintain service records and improve reliability and usability.
  • Measure our public website and acquisition journey when you consent to optional analytics.

5. When we share data

We do not sell personal data. We share only what is reasonably needed with service providers that host, secure, communicate, verify or support Trepzy; with PostHog for optional analytics after consent; with financial partners and payment networks for products you activate; with your authorized business administrators; with professional advisers; or with authorities and other parties when required by law, safety or a corporate transaction.

Providers act under contracts and access restrictions appropriate to their role. A financial partner acting independently determines its own processing under its notice and terms.

6. International transfers

Trepzy is based in the United States and works with providers in more than one country. Your data may therefore be processed outside your country. We use contractual, organizational and technical safeguards required for the transfer and consider the rules that apply to the data and destination.

7. How long we keep data

We keep data only for as long as needed for the purpose described, the account or business relationship, security and dispute handling, and legal, tax, accounting, financial-services and recordkeeping duties. When data is no longer needed, we delete or anonymize it unless preservation is legally permitted or required.

The cookie and local-storage periods used on the public site are described below. Invite-pass access stays on the device until the token is removed, becomes invalid, or the browser storage is cleared.

8. Cookies and local storage

Necessary storage keeps your edition, cookie choice, security or session state and, when applicable, the token used to revisit an invite pass. Refusing optional analytics does not prevent you from using the site or requesting an invite.

If you accept analytics, Trepzy may use PostHog cookies, plus local first- and latest-touch acquisition records, for up to 180 days to understand page visits, campaign attribution and identified calls to action. We disable automatic page capture, session replay, surveys and intentional collection of open text or contact data in analytics. Analytics traffic is sent through a first-party Trepzy relay, without forwarding your Trepzy cookies or IP address to PostHog.

Optional analytics is off until you accept it. You can reject it in the first banner or reopen Cookie settings at any time. Withdrawing clears Trepzy acquisition records and asks the analytics SDK to clear its persistence. Browser controls can also delete or block stored data.

9. Your choices and rights

Depending on your location and the processing, you may ask us to confirm processing, provide access, correct, delete, anonymize or restrict data, explain sharing, review certain automated decisions, provide portability where applicable, object to processing, or withdraw consent. We may need to verify your identity and may retain data where the law requires or permits it.

Brazilian data subjects may exercise the rights provided by the LGPD and may also contact the Autoridade Nacional de Proteção de Dados. European and UK data subjects may contact their local supervisory authority. Other local rights remain available where applicable.

10. Security and children

We use access controls, encryption, logging, data minimization and other technical and organizational measures appropriate to the risk. No system is completely secure, so please protect your credentials and contact us if you suspect unauthorized use.

Trepzy business services are not directed to children. Do not provide a child’s personal data unless an applicable service and law expressly allow it and the required authorization is in place.

11. Changes and contact

We may update this Policy as the services, providers or law change. We will change the date above and provide additional notice when required. For privacy questions or requests, email support@trepzy.com with “Privacy request” in the subject. You may also write to Trepzy, Inc., 535 Fifth Avenue #1055, New York, NY 10017, United States.

Email the privacy channel