Last updated: [date of publication]
Trellis is a product of Hager Investments LLC ("Trellis", "we"). This policy explains what personal information we collect, why, who we share it with, how long we keep it, and the choices you have.
1. Two roles
- On our website, and for accounts and billing, we decide what is collected and why. We are responsible for that information.
- Inside a customer's workspace, the plan and everything in it belong to the customer that holds the workspace. We process that content on the customer's behalf and on its instructions, under our Data Processing Addendum with that customer. If you are a member of a workspace and want to see, correct or delete what it holds about you, ask your organization's admin first; we will help them.
2. What we collect
On the website (trellisexecution.com)
- What you send us in a form: your name and work email, and depending on the form, your company, title, company size, industry, whether you are private-equity backed, your current planning tools and meeting rhythm, an executive sponsor's name and title, when you could start, details about your firm and clients, and any message you write.
- Where your visit came from: the campaign tags in the link you followed (
utm_source,utm_medium,utm_campaign,utm_term,utm_content), kept in your browser tab's session storage, not in a cookie, and sent with a form if you send one. - A scrambled form of your IP address when you send a form, used only to stop one address sending too many forms in an hour. We do not store the address itself.
- No cookies for visitors, no advertising or tracking scripts. [If cookieless analytics (Vercel Analytics) is added before publication, describe it here.]
When you use Trellis (app.trellisexecution.com)
- Your account: your name, email address and sign-in details, held by our sign-in provider, Clerk, and the workspaces you belong to and your role in each.
- Starting a test drive: the plan you picked and the campaign tags and referring site you arrived from, recorded on the trial workspace so we can see which channels bring customers.
- What your workspace records (held for the customer, see Section 1): the plan, its measures and readings, initiatives and milestones, meeting notes, decisions, comments, attached documents, imported documents if your organization chooses to keep a copy, and the names and email addresses of the people in it. A plan can name people who do not yet have an account, for example the owner of an objective named in an imported document.
- An audit trail of who changed what and when.
- Notification records, and if you turn on phone notifications, your device's push subscription keys.
- Server logs kept by our hosting provider, which do not contain document contents.
3. How we use it
- Website forms: only to reply to you, and for a one-pager request, to send you the one-pager. No mailing list, and nothing shared beyond the providers in Section 5.
- Accounts: to sign you in, show your name on the work you own, and send the reminders and digests your workspace has turned on.
- Workspace content: only to provide the Service to the customer, as described in our Terms and Data Processing Addendum. We do not sell it, and we do not use it for anything else.
- Security and operations: to keep the Service running, investigate failures, and prevent abuse.
4. AI
Some features send workspace content to our AI provider, Anthropic:
- Importing a plan sends the full content of the documents a user chooses, after they confirm it.
- Drafting meeting summaries and owner updates sends facts drawn from the plan, which can include names, titles, figures, risk and escalation descriptions, and review notes. Meeting summaries are drafted automatically when a meeting record is locked.
A workspace's admins can turn AI drafting off; while it is off, nothing from the plan is sent for summaries or drafts.
Anthropic processes this data in the United States, under its commercial terms, which state that it does not train its models on it and that it deletes it within 30 days (longer only for content flagged under its usage policy, or where the law requires).
5. Who we share it with
We share personal information only with these providers, who process it for us under contract, and when the law requires it. We do not sell personal information and do not share it for advertising.
| Provider | Why | What reaches them |
|---|---|---|
| Vercel | Hosting the website and the Service; private file storage | Requests and server logs; attached and kept documents |
| Neon | The Service's database, and a separate database for website form submissions | Workspace content and members' names and addresses; website form submissions |
| Clerk | Sign-in | Name, email, sign-in details, workspace memberships |
| Resend | Recipients' names and addresses and the text of each email, including form confirmations | |
| Anthropic | AI import and drafting | As described in Section 4 |
| Stripe (when payments open) | Billing | Billing contacts and payment details; we never see card numbers |
Phone notifications pass through your device maker's push service (Apple, Google or Mozilla) as encrypted messages that service cannot read. The current list is on our Subprocessors page.
6. Cookies and similar storage
| Name | Where | What it does | How long |
|---|---|---|---|
| Clerk session cookies | The Service | Keep you signed in | Your session |
trellis-view-as | The Service | Remembers that an admin is previewing the app as another member | Until the preview is ended or the browser is closed |
trellis_start | The Service | Carries the plan you picked and where you came from, from the test-drive link to sign-up | 1 day |
trellis_admin | The website, Trellis staff only | Keeps Trellis's own administrator signed in | 12 hours |
trellis.utm (session storage, not a cookie) | The website | Remembers campaign tags for this tab, for a form you might send | Until you close the tab |
We use no analytics, advertising or third-party tracking cookies.
7. How long we keep it
- Website form submissions: 24 months from the last contact, then deleted, unless you become a customer.
- Accounts: while you are a member of a workspace. Your name stays on readings, decisions and audit entries you made after you leave, because the record has to say who did what.
- Workspace content: for the life of the workspace, until its admins clear or delete it, or the customer asks us to delete it (see the Terms). Readings and the audit trail are an append-only record. A trial workspace that is not subscribed to is deleted 60 days after the trial ends.
- Server logs: per our hosting provider's retention.
8. Your choices and rights
- You can correct your own name and email in your account at any time.
- You can ask us what we hold about you, ask us to correct it, or ask us to delete it, by writing to hello@trellisexecution.com. We reply within 30 days. For information held in a customer's workspace, we will work with that customer, who decides.
- You can ask us to stop contacting you after a form at any time.
- [State-law rights, e.g. California, Virginia, Colorado, Connecticut, and others: counsel to confirm which apply at Trellis's size and add the required wording.]
9. Security
We protect personal information with the measures on our Security page: encryption in transit, encryption at rest by our providers, walls between companies in the application and the database, and an audit trail of changes. No system is perfectly secure; if an incident affects your information, we will tell you and the customer promptly.
10. Where it is stored
In the United States. Our database is in AWS us-east-2 (Ohio).
11. Children
Trellis is a business service. It is not directed at children, and we do not knowingly collect information from anyone under 16.
12. Changes
We will post changes here with a new date, and tell customers' admins by email before material changes take effect.
13. Contact
Hager Investments LLC (Trellis), hello@trellisexecution.com. Security matters: security@trellisexecution.com. [Postal address.]
Version 3b83647, 2026-10-10.