What Trunk collects, and what it does with it.

What we collect

Your account. Your name, your email address, and your password, stored only as a hash.

Your company. Its name, its members, their access levels and who can open each product.

What you capture. The pages of the product you point Trunk at: their HTML, CSS, images, icons and screenshots, and the edits your team makes to them.

Billing. Your plan, seats, invoices, billing address and tax ID. Card numbers go to our payment provider. We keep only the card's brand, last four digits and expiry.

Logs. The IP address and browser of each sign-in, kept to run and secure the service.

Signing in to your product

When you add a role, such as User or Admin, Trunk keeps its test email and password encrypted, and the capture uses them only to sign in to your product's own site. When you walk your own product, you use it inside a browser we run for you, and what you type into it is sent to your product and is not stored by Trunk.

Pages are captured as they appear to whoever is signed in. If they show personal data, that data is in the capture. Capture only what you are allowed to capture, and sign in with test accounts that hold made-up data. Never capture real patient records or other health data.

How we use it

To provide Trunk, to keep it secure, to bill you, and to answer you when you write to us. We do not sell your data and we do not show ads. We do not use what you capture to train AI models.

AI actions

When you ask Trunk to make a change, the parts of your design needed for that change are sent to our AI provider, Anthropic, which returns the result. Naming of components during capture works the same way.

Who else handles it

Vercel runs our servers and keeps captured files. Neon runs our database. Anthropic runs AI actions. All three keep data in the United States, and each receives only what its job needs. Before another provider gets any data, such as one for email or payments, it is named here and account owners are told 30 days ahead.

How long we keep it

We keep your data while your company has an account. Delete a product and its captures and files are removed at once. When a free month ends you choose: keep it read-only, export it, or delete it. A deleted company can be restored for 14 days; then its content is removed, and from backups within a further 30 days. Invoices are kept for as long as tax law requires.

Your choices

You can see, correct and export your data in the workspace, and delete your account from Account. To ask for anything else, including a copy or deletion of personal data, write to firodiya.ritesh@gmail.com.

Cookies

Trunk sets the cookies needed to keep you signed in. It sets no advertising cookies.

Changes and contact

If this page changes in a way that matters, we tell account owners by email before it takes effect. Questions go to firodiya.ritesh@gmail.com. How we protect data is on the Security page.