Privacy Policy

TRIM ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what personal information we collect, how we use it, and your rights regarding your data when you use the TRIM platform (the "Service").

By using the Service, you agree to the collection and use of information as described in this Policy. If you do not agree, please discontinue use of the Service.

2.1 Account Information

When you sign up, we collect:

• Email address (your account identifier — cannot be changed after signup)
• Display name (auto-generated handle by default; you can change it later)
• Authentication provider data if you sign in via Google
• Plan tier, plan expiry date, and founding member number (if applicable) for billing and feature gating

2.2 Voter Profile Information (Optional)

To enrich the demographic insights available to post authors, you may optionally provide:

• Gender
• Date of birth (used to calculate age bracket)
• Nationality
• Residence (country, region, city — manual or GPS-assisted)
• Occupation
• Display name and profile picture

This information is voluntary. Providing more profile data unlocks a richer set of Trimmed Insights — both for the posts you vote on and the posts you create.

To preserve insight integrity, certain fields have edit restrictions:

• Gender, date of birth, and nationality can each be set up to two times total (initial set + one correction)
• Residence and occupation can each be updated once per 30 days
• Display name can be changed freely
• Clearing a field (setting it back to blank) does not consume an edit and is always allowed

2.3 Content You Create

We collect the content you actively create, including:

• Decision Post titles, body text, and options
• Votes you cast and any Voter Attributes you select
• Option suggestions you submit
• Links you attach to posts (with OpenGraph metadata fetched and stored)
• Posts you save ("scrap")

2.4 Usage Data

We may collect information about how you interact with the Service, including pages visited, features used, timestamps, and device/browser information. This helps us improve performance and reliability.

2.5 Exit Survey (Optional)

When you delete your account, you may optionally select a reason from a fixed list (e.g., “Found alternative”, “Just taking a break”) and leave a free-text comment. This information is stored anonymously — it is not linked to your account, email, or any identifier — and is used solely to understand product fit. You can skip the survey entirely.

2.6 Moderation Data

If your account is suspended or your content is removed by our moderators, we record the action category (e.g., spam, harassment, inappropriate content) and timestamp internally for audit and appeal purposes. If your email address is added to the registration blocklist, the email and the reason category are stored separately to prevent re-registration.

We use the information we collect to:

• Provide, maintain, and improve the Service
• Authenticate your identity and manage your account
• Generate demographic voting insights for post authors
• Send in-app notifications related to your Decision Posts (deadline warnings, decision announcements)
• Process subscription payments via Stripe
• Detect and prevent fraud, abuse, and policy violations
• Respond to support requests and enforce our Terms of Service
• Comply with legal obligations

We do not sell your personal information to third parties. We do not use your data to serve third-party advertising.

Your votes are not anonymous internally — each vote is permanently linked to your account and recorded with a timestamp. What others can see depends on which layer they're looking at:

4.1 Public (anyone on the internet)

Decision Posts on the Roundtable (title, body, options, total vote counts) are publicly accessible by URL and may be indexed by search engines such as Google. Anyone — including users not signed in to TRIM — can read the post, see the total number of votes per option, and see comments (option suggestions). Your username is not displayed alongside individual votes on the public feed, but the post itself is searchable on the open web.

Items on your to-decide list (your /my-trim workspace) are not public. They stay between you and TRIM's servers.

4.2 Visible to the post author on a paid plan

When you vote on a post whose author has a Pro or Pro+ subscription, the author can view Trimmed Insights — aggregated breakdowns of votes for their post. These include:

• Demographic slices (gender, age bracket, nationality, residence, occupation)
• Distribution of Voter Attributes (labels voters applied to options)

Insights are statistical aggregates — the author does not see your individual vote tied to your name. With small voter pools, however, aggregates can be inferential (e.g., if only one voter matches a demographic slice, the slice's result reveals their vote). If you don't want your demographic data feeding into others' insights, leave the corresponding Voter Profile fields blank. Even with a blank profile, your vote still counts toward the public total.

4.3 Visible inside TRIM

TRIM has access to all vote records, profile data, and Voter Attribute selections for the purposes of analytics, moderation, service integrity, fraud prevention, and improving the product. Access is restricted to authorized personnel.

We do not sell your personal data. We share information with the following service providers solely to operate the Service:

• Supabase — Database, authentication, and real-time infrastructure. Your account, profile, posts, votes, to-decide list items, and notifications are stored on Supabase's servers.
• Google OAuth — If you use OAuth sign-in, Google authenticates your identity and shares limited profile data (email, name) with us.
• Stripe — Payment processor. When you subscribe to a paid plan, Stripe handles billing. We do not store full credit card details; Stripe processes and secures payment information under their own privacy policies.
• Resend — Transactional email provider. Receives your email address to deliver account-related messages (verification codes, password resets, service announcements).
• OpenCage — Geocoding service. When you grant location permission and use the residence auto-detect feature, your approximate coordinates are sent to OpenCage to resolve a metro area name. Raw coordinates are not stored on TRIM's servers — only the resolved location name.
• Vercel — Hosting and CDN provider. Receives standard server log data (IP address, user agent, request path) for every request, retained per Vercel's policies for security and performance monitoring.
• Sentry — Error monitoring. When the Service encounters an error, technical details (stack traces, page URL, browser info) may be sent to Sentry. We configure Sentry to scrub personally identifying fields where feasible.
• PostHog — Product analytics. Captures usage events (page views, button clicks, feature interactions) tied to a stable anonymous identifier so we can understand how the Service is used and prioritize improvements. PostHog does not receive your password, payment details, or Voter Profile content.
• Cloudflare Turnstile — Bot defense on the signup form. Cloudflare receives technical browser signals (browser fingerprint, IP) to determine whether a signup request is human.
• Google Favicon API — When you attach a URL to a post, we use Google's favicon service to display a small site icon. No personal data is sent.

We may also disclose information if required by law, court order, or to protect the rights, property, or safety of TRIM, our users, or others.

We retain your personal data for as long as your account is active. When your account is deleted (by you or by us):

What is deleted

• Your profile (display name, demographic fields)
• Your authentication record (email, password, session data)
• Your saved posts (scraps), in-app notifications, and personal preferences
• Your founding member slot (if applicable) becomes available to a new signup

What is retained (anonymized)

• Decision Posts you authored and votes you cast — these continue to display in the feed with the author shown as “Deleted user”. We retain them so other users' decisions and vote counts remain intact.
• Aggregated, non-identifying analytics (e.g., daily signup counts, exit survey responses) used for service improvement.

Re-registration blocklist

If your account is deleted by us as part of a moderation action (or you are banned), your email address may be added to a blocklist to prevent re-registration. The blocklist stores the email and the reason category only.

If you require full deletion of your contributed posts and votes (rather than anonymized retention), contact us at support@trimdecisions.com — we will honor verified requests under applicable privacy law.

Depending on your location, you may have the following rights:

• Access — Request a copy of the personal data we hold about you
• Correction — Update inaccurate profile information (subject to field update restrictions)
• Deletion — Delete your account and associated personal data via Account Settings
• Portability — Request a machine-readable export of your data
• Objection — Object to certain uses of your data where we rely on legitimate interests

To exercise these rights, contact us at support@trimdecisions.com. We will respond within 30 days.

TRIM is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has created an account, we will take steps to delete that account and its associated data.

If you believe a child under 13 is using TRIM, please contact us immediately.

We take reasonable technical and organizational measures to protect your personal information against unauthorized access, loss, or misuse. Authentication and data storage are handled via Supabase, which employs industry-standard security practices.

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security, and you use the Service at your own risk.

TRIM uses essential cookies necessary to keep you logged in and maintain your preferences. We also use cookies set by our service providers (e.g., Cloudflare for bot defense on the signup form, Stripe for fraud prevention during payment) and analytics cookies via PostHog to measure how the Service is used.

In regions where explicit consent is required by law (the EU/EEA, the UK, and California), PostHog analytics cookies load only after you accept the cookie banner shown on your first visit. Decline the banner and a cookieless analytics mode is used, which captures fewer signals and does not persist between sessions. Outside those regions, analytics cookies load by default and you can opt out at any time via your browser controls.

We do not currently use third-party advertising cookies. You can configure your browser to refuse cookies, but doing so may affect your ability to use certain features of the Service.

TRIM is available globally. Our infrastructure (Supabase, Vercel, Stripe, Resend, and other providers listed in Section 5) is primarily hosted in the United States. By using the Service, you consent to the transfer, storage, and processing of your data in the United States or other countries where our providers operate.

If you are located in a jurisdiction with data-protection laws granting you specific rights (e.g., the EU/EEA, the UK, California), we honor those rights to the extent applicable. See Section 7 for how to exercise them. Where we rely on a legal basis to process your data, that basis is generally one of: contract performance (to provide the Service), legitimate interests (to improve the Service and ensure security), or your consent (for optional Voter Profile data).

We may update this Privacy Policy from time to time. When we do, we will update the "Effective Date" at the top of this page. If changes are material, we will provide notice via the Service. Your continued use of the Service after any changes constitutes your acceptance of the updated Policy.

If you have questions, concerns, or requests regarding this Privacy Policy, contact us at support@trimdecisions.com.