Privacy policy

This privacy policy explains how Trilogy Cloud LLC (“Trilogy”, “we”, “us”) collects, uses, and shares information when you use our services: the trilogypos.com website, the Trilogy back office, the Trilogy point of sale and self-checkout apps, and Trilogy devices and hardware.

It covers three groups of people:

• Merchants and staff: owners and employees of businesses that use Trilogy to run their store.
• Website visitors: anyone browsing trilogypos.com, joining the waitlist, or contacting sales.
• Customers of merchants: shoppers who buy from a store that runs Trilogy. If that is you, see section 3: for most requests your store is the right contact.

What we collect depends on how you use Trilogy:

• Account and registration. Name, email address, phone number, password credentials, and the roles you assign to staff.
• Business profile. Business name, type, locations, address, tax details, and the information needed to verify your business for payments.
• Subscription and billing. Plan, billing contact, and payment method details (card numbers are collected and stored by our payment processor, not by us).
• Transaction and payout data. Sales, refunds, disputes, cash drawer sessions, payout balance, and payout history for your store.
• Device and app data. Device identifiers, app version, update and health status, settings, and technical logs from registers, self-checkout lanes, and CloudLink devices.
• Support and communications. Messages you send us, support tickets, and email delivery events.
• Website usage and forms. Pages visited, referral parameters (such as UTM tags), and what you submit through the waitlist and contact sales forms.
• Cookies and similar technologies. See section 6.

When a store uses Trilogy to sell, we process information about that store’s customers on the store’s behalf, as a service provider. This can include order and payment records, receipts and receipt delivery details (such as a phone number or email a shopper enters), and loyalty activity.

The store is responsible for its customers’ data and for honoring their privacy rights. If you are a shopper and want your information accessed, corrected, or deleted, contact the store where you shopped; we help merchants fulfill those requests. If you contact us directly, we will refer you to the store where we can identify it.

We may use de-identified or aggregated transaction data, meaning data that no longer identifies a person, to operate and improve Trilogy.

• Provide and operate the services: accounts, selling, payouts, devices, receipts, and reports.
• Verify businesses, prevent fraud and abuse, and keep accounts and payments secure (including with our payment processor).
• Respond to support requests and service issues.
• Understand product usage and improve the services (analytics).
• Send service communications: receipts for your subscription, security notices, and important changes.
• Send marketing communications where you have agreed to them. Every marketing email includes an unsubscribe link.
• Comply with law, including tax, accounting, and financial-services obligations.

We do not sell your personal information. We share it with:

• Stripe (payments). Payment processing on Trilogy is provided by Stripe. When you provide personal data in connection with the payment services, Stripe receives that personal data and processes it in accordance with Stripe’s Privacy Policy. We also share business and transaction information with Stripe to enable verification, processing, and payouts.
• Service providers. Vendors that host and run parts of the services for us: database and infrastructure hosting (Supabase), email delivery (Resend), and product analytics (PostHog), under contracts that limit how they can use the data.
• Financial partners. Banks, card networks, and similar partners involved in processing payments, payouts, and disputes.
• Professional advisors and authorities. Lawyers, accountants, regulators, and law enforcement where required by law or to protect rights, safety, and the integrity of the services.
• Business transfers. A buyer or successor if we are involved in a merger, acquisition, or sale of assets. We will notify you of any change in who is responsible for your data.

We use cookies and similar technologies for two things:

• Essential operation: keeping you signed in and keeping the site secure.
• Analytics: understanding how the site and product are used, via PostHog, so we can improve them.

You can control cookies in your browser settings. Where required, we honor the Global Privacy Control signal as an opt-out of targeted advertising; we do not run third-party advertising cookies on trilogypos.com.

We protect information with encryption in transit and at rest, access controls, and monitoring. Card payment data is handled by Stripe under PCI DSS. Full card numbers never touch Trilogy’s systems.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we learn of a breach affecting your data, we will notify you as required by law.

We keep your information for as long as your account is active and as needed to provide the services. After that, we keep what we must to meet legal obligations. Transaction, payout, and dispute records are kept for the periods required by tax, accounting, and financial services law. We also keep what we need to resolve disputes, prevent fraud, and enforce agreements. We then delete or de-identify it.

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, and to opt out of targeted advertising. US state privacy laws (including the California Consumer Privacy Act) give many of our users these rights; we honor them for everyone where we reasonably can.

To exercise a right, email support@trilogypos.com. We will verify your request and respond within the time the law requires. We will not discriminate against you for exercising a privacy right.

• Marketing. Unsubscribe links are in every marketing email, and waitlist emails support one-click unsubscribe.
• Financial data. Some information tied to payments is governed by federal financial-privacy law (such as the Gramm-Leach-Bliley Act) and may be handled under those rules instead.
• Outside the US. Where GDPR or UK GDPR applies, we process personal data under the legal bases of contract, legitimate interests, consent, and legal obligation, and we use standard contractual clauses for international transfers. You may also lodge a complaint with your local supervisory authority.

Trilogy is a business tool and is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

We may update this policy as the services and the law change. The “Last updated” date at the top shows the current version. If a change materially affects how we handle your information, we will notify you by email or in the back office before it takes effect.

Questions about privacy, this policy, or your data: support@trilogypos.com

Trilogy Cloud LLC
11500 Madison Ave, Cleveland, OH 44102