Privacy Policy

Last updated: October 30, 2026

TrillaBit Inc. ("TrillaBit", "we", "us") is a Canadian company based in Ontario. We make Quick Intelligence, an analytics platform for dashboards and KPIs, and Addi, its AI analyst. This policy explains what personal information we collect, how we use and protect it, and the choices you have. It covers our website (trillabit.com), the Quick Intelligence web app and desktop app, and our related services.

The short version

• We collect only what we need to run the service: account details, billing details, and the information you send us.
• Your business data stays in your own data warehouse. Quick Intelligence queries it live with credentials you provide, and shows you the results.
• We don't sell personal information, and we don't use your data to train AI models.
• We use a small number of trusted providers to run the service, each bound by a data processing agreement.
• You can ask us to access, correct or delete your personal information at any time: contactus@trillabit.com.

Information we collect

When you visit our website

• Our hosting provider (Cloudflare) records standard technical information: IP address, browser type, pages requested and the time. It uses this for security, preventing abuse, and keeping the site running.
• We don't use advertising cookies or third-party analytics trackers on our website.
• If you use our contact form or join the waitlist, we receive the details you enter (such as your name, email address, company and message). Cloudflare Turnstile checks that the form was sent by a person, not a bot.

When you create an account or buy a subscription

• Your name, email address and company, and a password, which we store only as a one-way hash, never in readable form.
• Subscription and billing details. Payments are handled by Stripe: your card details are entered at Stripe and never reach our servers.

When you use Quick Intelligence and Addi

• Account and configuration data: your workspaces, dashboards, KPIs, data models, roles and settings.
• Connection credentials: the credentials you give us for your data warehouse or your own AI provider key. We encrypt them and store them in a secrets vault.
• Questions you ask Addi and the answers it gives, so you can see your conversation history.
• Security and audit logs: sign-ins, failed sign-in attempts and access decisions, which we keep to protect your account.
• Support requests and feedback you send us.

Your business data. Quick Intelligence reads data from the warehouse you connect (for example Snowflake, ClickHouse, BigQuery or PostgreSQL) to answer your queries, and returns the results to you. For that data, you are the controller and we act as your processor: we process it only to provide the service to you, under your instructions.

How Addi uses AI

When you ask Addi a question, we send the AI model provider what it needs to answer: your question, the relevant parts of your data model, and the query results involved. Depending on your plan, this goes to the provider you choose with your own key, or to our managed AI providers (Anthropic or OpenAI) through their business APIs. Under those providers' business terms, this data is not used to train their models. TrillaBit doesn't use your data to train AI models either.

How we use information

We use personal information to:

• provide, operate and secure Quick Intelligence and Addi;
• create and manage your account, and process payments and licences;
• respond to support requests and messages;
• send service emails (for example account verification, password resets, licence keys and important changes);
• detect and prevent fraud, abuse and security incidents;
• meet our legal obligations.

We send marketing emails only with your consent, and you can unsubscribe at any time.

Who we share it with

We don't sell or rent personal information. We share it only with service providers ("subprocessors") that help us run the service. Each is bound by a data processing agreement:

• Amazon Web Services: Hosting, databases, secrets vault, backups (United States)
• Cloudflare: Website hosting, network security, downloads (Global network)
• Google Workspace: Company email (United States)
• Stripe: Payments and subscriptions (United States)
• Resend: Service emails (United States)
• Anthropic: AI models for Addi (managed AI) (United States)
• OpenAI: AI models for Addi (managed AI) (United States)
• ClickHouse Cloud: Analytics database for billing reports and our demo data (United States)
• GitHub: Support tickets from "Report a problem", kept in a private repository (United States)

We keep this list current. Before we add or replace a subprocessor that handles customer data, we'll update this list and tell customers by email at least 30 days in advance, so they can raise any concerns.

We may also disclose information if the law requires it, to protect our rights or users' safety, or as part of a merger or acquisition (in which case this policy continues to apply to your information).

Where your information is stored

Our production systems are hosted in the United States (Amazon Web Services, us-east-1). Some providers process data in other countries. Wherever your information goes, we protect it as described in this policy and in our agreements with those providers.

How long we keep it

• Account information: for as long as your account is active, then deleted or anonymised within a reasonable period after you close it, unless the law requires us to keep it longer.
• Billing records: as long as tax and accounting law requires.
• Security logs and backups: for limited periods (database backups are kept for 30 days).
• When a customer ends their service, we delete their account data and stored credentials.

How we protect it

We use industry-standard safeguards:

• encryption in transit (HTTPS/TLS) and at rest;
• passwords stored only as hashes, and credentials in an encrypted vault;
• each customer's data kept separate from every other customer's;
• multi-factor authentication for our staff and hardware security keys for our most privileged accounts;
• continuous monitoring and audit logging;
• regular access reviews.

We are working toward a SOC 2 report. No system is perfectly secure; if a breach affects your personal information, we'll notify you and the relevant authorities as the law requires.

Your rights and choices

Depending on where you live (including under Canada's PIPEDA, the EU/UK GDPR, and US state laws such as the CCPA), you may have the right to:

• access the personal information we hold about you;
• correct it;
• delete it;
• receive a copy in a portable format;
• object to or restrict certain processing, or withdraw consent;
• complain to your data protection authority (in Canada, the Office of the Privacy Commissioner).

To make a request, email contactus@trillabit.com. We may need to verify your identity first, and we'll respond within the time the law requires (generally 30 days).

If you use Quick Intelligence through your employer or another organisation, that organisation controls your data in the service. Please contact them first; we'll help them respond.

Children

Our services are for businesses. They're not directed at children, and we don't knowingly collect children's personal information.

Changes to this policy

We may update this policy as our services or the law change. We'll change the "Last updated" date above, and tell you about material changes through the service or by email.

Contact us

TrillaBit Inc., Ontario, Canada

Our Privacy Officer is Keith Riddolls, CEO, who is responsible for this policy and for handling privacy questions and requests.

Email: contactus@trillabit.com