Scope and data controller
This Privacy Policy applies to the public website at trona.ai, including the pricing calculator and forms used to request a plan or demo. It does not replace the privacy notices or data processing agreements that apply when customers use the Trona platform to process candidate or employee data.
Trona Technologies, Inc., at 111 NE 1st St, 8th Floor, #89049, Miami, FL 33132-2517, USA, is the controller of the website data described in this Policy. Where Trona processes candidate data on a customer’s instructions, the customer normally acts as controller and Trona acts as processor under a separate agreement.
Personal data we collect
We collect only the information reasonably needed to operate the website and respond to business requests. This may include:
- Contact and professional data you submit, including your name, company, business email and optional phone or WhatsApp number.
- Plan request data, including selected services, user counts, candidate volume, campaign settings, coupon code, language and the page from which the request was sent.
- Technical and security data generated when you use the website, such as IP address, browser and device information, request timestamps, error records and security logs.
- AI Guide data, including the messages you send, generated replies, an anonymous conversation ID, website language and page, model identifier, token counts, response time and error status.
- Language preference stored after you choose a website language.
- Information contained in later correspondence, demo bookings or other communications with Trona.
How we use personal data
We use personal data for the following purposes:
- To calculate, receive and respond to pricing, plan and demo requests.
- To discuss requested services, prepare a proposal and take steps before entering into a contract.
- To operate, maintain, troubleshoot and secure the website and prevent abuse.
- To answer AI Guide questions, keep a conversation coherent, monitor reliability and improve approved product information and prompts.
- To remember the language you selected.
- To keep appropriate business records and comply with legal obligations.
- To establish, exercise or defend legal claims and protect Trona, our customers and users.
Legal bases under the GDPR
For people in the EEA, United Kingdom or Switzerland, our legal bases depend on the context:
- Steps requested before a contract and performance of a contract, for example when you request a plan or demo.
- Our legitimate interests in operating a secure B2B website, responding to business enquiries, improving reliability and protecting our rights, where those interests are not overridden by your rights.
- Compliance with legal obligations, including accounting, tax, security and lawful authority requests.
- Consent where we expressly ask for it. We do not add pricing-form contacts to a general marketing list without a separate lawful basis, and consent can be withdrawn at any time.
Who receives personal data
We do not sell personal data or share it for cross-context behavioral advertising. We disclose data only where reasonably necessary for the purposes described above. Recipients may include:
- Authorized Trona team members who handle sales, customer requests, operations, security or legal matters.
- Service providers supporting hosting, infrastructure, database, security, email and business communications. Pricing requests are delivered through Resend to Trona business inboxes.
- Amazon Web Services, through Amazon Bedrock, processes AI Guide messages and the verified context needed to generate a reply.
- Calendly, if you choose to open the external demo-booking page, and LinkedIn, if you choose to visit our company profile. Their own notices apply on those services.
- Advisers, authorities, courts or transaction counterparties where disclosure is required by law, needed to protect rights, or connected with a corporate transaction.
International data transfers
Trona is established in the United States, and personal data may therefore be processed in the United States or other countries where our service providers operate. Those countries may have different data protection laws from your country.
Where transfer rules apply, we use an available lawful transfer mechanism, such as an adequacy decision, the European Commission’s Standard Contractual Clauses or another legally recognized safeguard, and apply supplementary measures where appropriate.
How long we keep data
We retain personal data only for as long as necessary for the relevant purpose, then delete or anonymize it unless a longer period is required by law. Our current working periods are:
- Pricing, plan and demo enquiries: normally up to 24 months after the last substantive contact, or longer if a business relationship begins.
- Website security and diagnostic logs: normally up to 90 days, unless an incident requires longer retention.
- Anonymous AI Guide conversations: normally up to 90 days after the latest message, unless you request earlier deletion or an incident requires limited additional retention.
- Language preference cookie: up to 12 months after it is set or renewed.
- Contract, accounting and legal records: for the period required by applicable law or needed to resolve a dispute.
Security
We use proportionate technical and organizational measures designed to protect personal data, including access controls, encrypted transport, restricted administrative access, security headers, input validation and service-provider controls. No online system is completely secure, so we cannot guarantee absolute security.
Your privacy rights
Depending on where you live and the law that applies, you may have the right to:
- Request access to and a copy of your personal data.
- Correct inaccurate or incomplete data.
- Request deletion or restriction of processing.
- Object to processing based on legitimate interests or to direct marketing.
- Receive certain data in a portable format.
- Withdraw consent without affecting earlier lawful processing.
- Lodge a complaint with the data protection authority where you live or work.
Automated decisions
The website pricing calculator applies published pricing rules to the options you select. It does not make decisions that produce legal or similarly significant effects about you. Any use of automation within a customer deployment is addressed separately in the relevant customer agreement, candidate notice and configured workflow.
Children
This website is intended for business users and is not directed to children under 16. Please do not submit a child’s personal data through the pricing or demo forms.
Changes and contact
We may update this Policy when our website, services or legal obligations change. The date above shows the latest revision. Material changes will be highlighted where appropriate.
For privacy questions or to exercise your rights, contact Mikalai Suzdaltsau - ms@trona.ai. We may need to verify your identity before completing a request. You can also write to Trona Technologies, Inc., 111 NE 1st St, 8th Floor, #89049, Miami, FL 33132-2517, USA.
