Scope
This policy covers the Triflo application (web and mobile) and describes the data we collect when you use the service, how we use it, and which third parties we share it with. Triflo is operated by Livspace; this policy applies specifically to the Triflo product and supplements any organization-level data agreements you may have with Livspace.
What we collect
When you use Triflo, we collect:
- Conversation content — the messages you type, files and images you attach, and the responses generated by agents.
- Voice input — when you use voice mode, your microphone audio is transcribed to text. Recordings are not retained beyond the duration needed to produce a transcript.
- Account identity — your email address, display name, and the organization your identity provider associates with your account. Provided by Zitadel SSO at sign-in.
- Usage data — which agents and tools you invoke, session timestamps, model token counts, and similar operational telemetry. Used for reliability, billing, and capacity planning.
- Device data — minimal, limited to OS and app version for crash reporting and compatibility.
How we collect it
Conversation content is collected when you submit messages or voice input. Account identity is collected once at sign-in via Zitadel single sign-on (PKCE OAuth flow). Usage and device data are recorded automatically by the application as you interact with it. We do not collect data from third-party sources, and we do not use tracking pixels or advertising identifiers.
How we use it
- To answer your questions — your message text, attachments, and voice transcripts are sent to AI model providers (listed below) to generate a response.
- To maintain conversation history — past sessions and runs are stored so you can return to them.
- To operate, secure, and improve the service — including detecting abuse, debugging issues, and improving quality. We do not train AI models on your content.
- To comply with legal obligations when applicable.
Third parties we share with
Triflo routes content to Google Cloud Platform services to generate responses and process voice:
- Vertex AI — generates assistant responses. We use Google's Gemini models and, through Vertex AI Model Garden, Anthropic Claude models. Your prompts, attached files, and the resulting assistant responses are processed by these models.
- Cloud Speech-to-Text — transcribes your microphone audio when you use voice mode.
- Cloud Text-to-Speech — converts assistant responses to audio when you have read-aloud enabled.
Google processes this data as our data processor under its Cloud Data Processing Addendum. We contractually require these providers to maintain confidentiality and security protections at least equivalent to those described in this policy, and not to use your data to train general-purpose models.
We do not share your data with advertisers, data brokers, or any third party not listed above.
Consent
Before any of your data is sent to the AI model providers above, Triflo shows an in-app disclosure and asks you to explicitly accept it. You can review or revoke this consent at any time from the Settings screen. Revoking consent signs you out — Triflo cannot function without these services.
Retention
Conversation history and account data are retained while your account is active. When you sign out, local copies on your device are cleared. Server-side data is retained until you or your organization administrator request deletion. Voice recordings are not retained after the transcript is produced (typically seconds).
Your rights
You may request access to, correction of, or deletion of your personal data by contacting your organization administrator or emailing us at the address below. Where applicable law provides additional rights (GDPR, India DPDPA, etc.), we will honor them.
Security
We use industry-standard encryption in transit (TLS 1.2+) and at rest. Authentication uses OAuth 2.0 with PKCE. Access to production data is limited to authorized personnel.
Children
Triflo is not directed at children under 16. We do not knowingly collect data from children.
Changes
If we materially change this policy or add a new AI provider, we will update the effective date above and prompt you to re-accept the in-app disclosure on your next sign-in.
Contact
Questions about this policy or your data: email care@livspace.com.