Privacy Policy

Overview

Tresorbase (“Tresorbase”, “we”, “us”) is an AI marketing data agent. It connects your marketing platforms, analytics, CRM, commerce tools, and data warehouses, then turns that data into decision-ready analysis. This policy explains what information we collect, how we use it, and the choices you have.

This policy applies to www.tresorbase.com and to the Tresorbase service. By using the service, you agree to the practices described here.

Information we collect

Account information. When you sign up, we collect your work email, name, and company details, plus billing information if you choose a paid plan. Payment details are processed by our payment provider and never touch our servers.

Connected source data. With your authorization, Tresorbase accesses data from the services you connect — ad platforms, analytics tools, CRMs, commerce platforms, and warehouses — through OAuth tokens or API credentials. We collect the campaign, performance, conversion, and pipeline data needed to provide the service.

Usage information. We log how you interact with the service: pages viewed, features used, questions asked, and technical diagnostics such as browser type, device, and IP address.

Communications. If you contact us, we keep the correspondence so we can respond and improve our support.

How we use information

• Provide, operate, and maintain the service — including collecting, normalizing, and monitoring your marketing data
• Generate the analyses, briefs, alerts, and answers you request
• Secure the service, prevent abuse, and debug issues
• Improve connectors, models, and product features
• Communicate with you about your account and product changes, and — with your consent — send marketing messages you can opt out of at any time

How the agent processes your data

Tresorbase uses large language models to reason over your data and draft answers. Our commitments:

• Your connected source data is used to provide the service to you — not to train foundation models.
• Prompts and retrieved data are processed by our model providers under data-processing terms that prohibit training on your data.
• Answers are generated on demand; the underlying metrics stay in your Tresorbase tables and in your own warehouse.

Data from connected services

When you connect a third-party platform, you instruct us to access and store the data needed to deliver the service. Our use of data received through platform APIs (such as Google’s or Meta’s) complies with those platforms’ terms, including limited-use requirements: we use API data only to provide and improve the service, never for advertising, and we never sell it.

You can disconnect a source at any time, which stops further collection. Data already collected from that source is deleted under the retention rules below.

Cookies and analytics

The website uses a small number of cookies and similar technologies: strictly necessary cookies for security and load balancing, and — through Google Tag Manager — analytics tags that help us understand how the site is used. You can control cookies through your browser settings.

When we share information

We do not sell personal information. We share it only with:

• Service providers (subprocessors) that host our infrastructure, process payments, provide model inference, or support analytics — each bound by contractual data-protection obligations
• Authorities, when required by law or to protect rights, safety, and security
• A successor entity in the event of a merger, acquisition, or similar transaction, subject to this policy

Data retention

Account data is kept while your account is active. Connected source data is retained according to your plan’s history window and is deleted or anonymized within 90 days of account deletion, except where law requires longer retention. Backups cycle out on the same schedule.

Security

We encrypt data in transit and at rest, limit access to authorized personnel, and isolate customer workspaces. Credentials for connected sources are stored encrypted and used only for the scopes you grant. No method of transmission or storage is perfectly secure; if an incident affects your data, we will notify you without undue delay.

Your rights

Depending on where you live — including the EEA, UK, Switzerland, and California — you may have rights to access, correct, export, or delete your personal information, to object to or restrict processing, and to lodge a complaint with a supervisory authority. To exercise any of these rights, email hello@tresorbase.com. California residents: we do not sell or share personal information for cross-context behavioral advertising.

International transfers

We process data in the regions where our infrastructure operates. Where data moves between jurisdictions, we rely on appropriate safeguards such as standard contractual clauses.

Changes to this policy

We may update this policy as the product evolves. Material changes will be announced by email or in the product before they take effect. The “last updated” date above always reflects the current version.

Contact

Questions about this policy or your data: hello@tresorbase.com.