Privacy Policy

Last updated: December 24, 2025

TL;DR: We collect minimal data, don't sell it, and you can delete it anytime. We're a Swedish company bound by GDPR.

1. Who We Are

Trix is operated by Zivrio AB, a company registered in Sweden (org.nr pending). We provide a memory-as-a-service API for AI agents and applications.

Contact: [email protected]

2. What Data We Collect

Account Information

When you sign up, we collect:

  • Email address
  • Name (optional)
  • Company name (optional)
  • Password (hashed, never stored in plain text)

Memory Data

When you use our API, we store:

  • Memories you create via trix.remember()
  • Session identifiers you provide
  • Metadata (timestamps, memory IDs)
  • Reinforcement signals from trix.reinforce()

Usage Data

We collect anonymized usage metrics:

  • API call counts and latency
  • Error rates
  • Feature usage patterns

Website Analytics

We do not currently use any website analytics. If we add them in the future, they will be privacy-focused (no Google Analytics, no cross-site tracking) and only loaded with your explicit consent.

3. How We Use Your Data

  • Provide the service: Store and retrieve memories via our API
  • Improve the product: Analyze usage patterns to make Trix better
  • Communicate: Send important service updates (no spam)
  • Security: Detect and prevent abuse

4. Data Storage & Security

  • Encryption in transit: All data is encrypted via TLS 1.3
  • Encryption at rest: All stored data is encrypted with AES-256
  • Location: Data is stored in EU data centers
  • Isolation: Your memories are isolated by API key and session
  • Access: Only authorized personnel can access systems, with full audit logging

5. Data Sharing

We do not sell your data. We only share data with:

  • Infrastructure providers: Cloud hosting (EU-based)
  • Legal requirements: If required by Swedish or EU law

We do not share your data with AI model providers. Your memories are not used to train any AI models.

6. Your Rights (GDPR)

As an EU company, we comply with GDPR. You have the right to:

  • Access: Request a copy of all data we hold about you
  • Rectification: Correct inaccurate data
  • Erasure: Delete your account and all associated data
  • Portability: Export your data in a machine-readable format
  • Objection: Object to certain processing activities
  • Restriction: Limit how we use your data

To exercise these rights, email [email protected].

7. Data Retention

  • Active accounts: Data retained while your account is active
  • Deleted accounts: Data permanently deleted within 30 days
  • Backups: Purged from backups within 90 days
  • Legal holds: May be retained longer if required by law

8. Cookies

We use only essential cookies:

  • Session management: a single HttpOnly, SameSite=Strict cookie that holds your sign-in token. It's cleared on logout.
  • Theme preference: a localStorage entry that remembers your dark/light mode choice. Stored only in your browser.

We do not currently set analytics or advertising cookies. If that changes, we will add a consent banner before any non-essential cookie is set.

9. Children's Privacy

Trix is not intended for users under 16. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this policy occasionally. Significant changes will be communicated via email to registered users. Continued use after changes constitutes acceptance.

11. Contact

Questions or concerns about privacy?