Privacy Policy

1. Information We Collect

We collect information that you provide directly to us, including:

• Account information (name, email, company details)
• Trimming and batch data you input into the system
• Photos and documents you upload
• Usage data and analytics

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain the Trimmer service
• Process your transactions and manage your account
• Send you technical notices and support messages
• Improve and optimize our services
• Comply with legal obligations

3. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption of data in transit and at rest, regular security audits, and strict access controls.

4. Data Sharing

We do not sell your personal information. We may share your information only:

• With your consent
• To comply with legal obligations
• With service providers who assist in our operations
• To protect our rights and prevent fraud

5. Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate data
• Request deletion of your data
• Export your data
• Opt-out of marketing communications

6. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations. When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes.

7. Cookies and Tracking

We use cookies and similar tracking technologies to operate and improve our services. You can control cookies through your browser settings, though some features may not function properly if cookies are disabled.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

9. Artificial Intelligence Features

Trimmer includes AI-powered features that help you analyze and understand your production data:

• Data Processed by AI: When you use the AI Assistant, your queries and relevant production data (batch information, trimmer performance, inventory levels) are sent to our AI service provider
• AI Service Providers: We use the Lovable AI Gateway, which provides access to advanced language models including Google Gemini and OpenAI GPT models
• Data Storage: AI conversations are stored in our secure database and associated with your user account for conversation history and analytics
• Processing Purpose: AI processes your data to provide insights, answer questions, generate reports, and help you make informed decisions about your operations
• Training Data: Your individual data is NOT used to train AI models. Our AI providers may use aggregate, anonymized patterns to improve their services, but your specific business data remains confidential
• Data Security: All communications with AI services are encrypted in transit using TLS/SSL protocols. AI queries and responses are subject to the same security measures as all other data in Trimmer
• Your Rights: You can request deletion of your AI conversation history at any time through your account settings or by contacting support
• Access Controls: AI features are restricted to Manager, Admin, and SuperAdmin roles and are only available on Professional and Enterprise subscription tiers

Important: AI responses are generated by machine learning models and may occasionally contain errors or inaccuracies. Always verify critical information before making business decisions based on AI recommendations.

10. Sub-processors

We engage the following third-party Sub-processors to help operate TrimmerOne. Each is bound by contractual confidentiality and security obligations:

• Supabase — database, authentication, file storage, and edge function hosting
• Stripe — payment processing and subscription billing
• Resend — transactional and notification email delivery
• Lovable AI Gateway — AI model access (Google Gemini, OpenAI GPT models)

11. California Residents (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act and California Privacy Rights Act:

• Right to know what personal information we collect, use, disclose, and sell
• Right to request deletion of your personal information
• Right to correct inaccurate personal information
• Right to limit the use and disclosure of sensitive personal information
• Right to opt out of the sale or sharing of personal information (we do not sell your data)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact info@trimmerone.com. We will verify your identity before responding.

12. EU/UK Residents (GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights under applicable data protection laws (including the GDPR):

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent at any time where processing is based on consent
• Right to lodge a complaint with your local supervisory authority

Our legal bases for processing include contract performance (providing the Service), legitimate interests (security, fraud prevention, product improvement), legal obligation, and consent (where required). International transfers of personal data are protected by appropriate safeguards including Standard Contractual Clauses where applicable. Contact info@trimmerone.com to exercise these rights.

13. Categories of Personal Information Collected (CCPA Notice at Collection)

In the preceding 12 months, we have collected the following categories of Personal Information, for the business purposes described in Section 2:

• Identifiers — name, email, account ID, IP address
• Customer records — billing contact, company name, role/title
• Commercial information — subscription tier, billing history
• Internet or network activity — login timestamps, device/browser, pages visited
• Geolocation — coarse (IP-based) only; we do not collect precise GPS
• Professional/employment information — role, assigned location, productivity metrics you record
• Inferences — limited operational analytics derived from usage

Sources: directly from you and your authorized users; automatically from your devices when using the Service; from our payment processor for billing records. We disclose these categories only to the Sub-processors listed in Section 10 and as required by law. We do not sell or share Personal Information for cross-context behavioral advertising.

14. Sensitive Personal Information (CPRA)

We collect account log-in credentials, which are classified as Sensitive Personal Information under the CPRA. We use this information solely to authenticate you and secure your account — never for inferring characteristics or for advertising. You may request that we limit the use of this information via our privacy request form.

15. Children's Privacy

TrimmerOne is a B2B service intended for adult professionals working in licensed cannabis operations. The Service is not directed to children, and we do not knowingly collect Personal Information from anyone under 16. If you believe a minor has provided us with Personal Information, contact info@trimmerone.com and we will delete it.

16. Other US State Privacy Rights

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), and Oregon (OCPA) have substantially similar rights to those described in Section 11, including the right to access, correct, delete, port, and opt out of targeted advertising, the sale of personal data, and certain profiling. Where applicable state law provides an appeal process, you may appeal a denied request by replying to our response email.

To exercise any of these rights, use our privacy request form.

17. Authorized Agents

California consumers (and consumers under similar state laws) may use an authorized agent to submit privacy requests on their behalf. The agent must provide written, signed authorization, and we may contact the consumer directly to verify the request. Indicate "Authorized Agent" when submitting via our privacy request form.

18. Do Not Sell or Share My Personal Information

We do not sell or share your Personal Information for cross-context behavioral advertising. You may still submit a formal request through our Do Not Sell or Share page.

19. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us:

Email: info@trimmerone.com
Phone: 219-262-0163