Privacy Policy

Last updated: July 1, 2026

Saddle Data Inc. ("Saddle Data," "we," "us," or "our") operates TrellisBee, a tool for engineering managers built on top of Google Workspace (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

1. Information We Collect

Account information

When you sign in with Google, our authentication provider (Firebase Authentication) shares your name, email address, and Google account identifier with us. We use this to create and identify your TrellisBee account.

Google Calendar data (optional)

If you choose to connect Google Calendar, we request read-only access to your primary calendar (the calendar.events.readonly scope) — nothing more. We only read event times, titles, and attendee email addresses, and only to identify and sync your upcoming 1:1 meetings. We do not request access to Google Docs, Drive, or any other Google service. You can disconnect this at any time from your account settings, which immediately revokes our access and deletes the stored connection.

Content you provide

Blockers, skill rubrics, assessments, and any Google Doc links you or people on your team enter into TrellisBee are stored so the Service can display them back to you.

Technical information

Like most web services, our servers log standard technical data (IP address, browser type, request timestamps) for security, debugging, and abuse prevention.

2. How We Use Information

• To provide, maintain, and improve the Service;
• To authenticate you and keep your account secure;
• To sync calendar events you've explicitly connected;
• To respond to support requests; and
• To comply with legal obligations.

We do not sell your personal information, and we do not use it for advertising.

3. How We Share Information

We share information only with the service providers that help us run TrellisBee:

• Firebase / Google Identity Platform — authentication
• Google Calendar API — calendar sync, only if you connect it
• Neon — our database host
• Google Cloud Platform — application hosting
• Cloudflare — website hosting for our marketing site and app

We do not sell, rent, or trade your information to third parties, and we do not currently use any third-party analytics or advertising trackers on the Service. If that changes, we'll update this policy.

4. Data Security

OAuth tokens (such as your Google Calendar refresh token) are encrypted at rest using AES-256-GCM. We use industry-standard practices to protect your data, but no system is 100% secure, and we can't guarantee absolute security.

5. Data Retention

We retain your information for as long as your account is active. If you delete your account, we delete your personal data within a reasonable period, except where we're required to retain it by law.

6. Your Rights and Choices

You can request access to, correction of, or deletion of your personal information, and you can disconnect Google Calendar at any time, by emailing us atprivacy@saddledata.com.

7. Children's Privacy

TrellisBee is a business tool and is not directed at, or intended for use by, children under 16. We do not knowingly collect personal information from children.

8. Data Location

Our infrastructure is hosted in the United States, and your data is processed there.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we'll notify you by updating the "Last updated" date above or by other reasonable means.

10. Contact Us

Questions about this policy? Email us atprivacy@saddledata.com.