ADVOstack

Privacy Policy

Effective July 3, 2026

Trinitek Holdings, Inc. (“Trinitek,” “we,” “us,” or “our”) operates the ADVOstack platform and services (the “Service”). This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to all users of the Service and visitors to advostack.ai.

By using the Service, you agree to the collection and use of information as described in this policy. This policy is incorporated into our Terms of Service.

1. Information We Collect

1.1 Information You Provide

Account information: your name, work email address, and organization name when you sign up or purchase a subscription.
Payment information: billing contact details submitted at checkout. Payment card and bank account numbers are processed directly by Stripe, Inc. and are never stored on our servers.
Profile and content: folders, bill positions, client names, contact notes, annotations, vote-count data, and other content you create within the Service.
Communications: messages you send to our support team or in response to our emails.

1.2 Information Collected Automatically

Usage data: pages visited, features used, search queries, and actions taken within the Service, along with timestamps.
Device and browser information: IP address, browser type and version, operating system, device identifiers, and referring URLs.
Log data: server logs recording requests made to our infrastructure, including error reports and performance metrics.
Cookies and similar technologies: session cookies required for authentication and security. We do not use third-party advertising cookies. See Section 6 for more detail.

1.3 Information from Third Parties

Clerk (authentication): we use Clerk to manage user accounts and organization membership. Clerk provides us with your email address, name, and organization membership status.
Stripe (payments): Stripe provides us with payment confirmation, subscription status, and billing contact information.
Legislative data providers: we license and ingest publicly available legislative, regulatory, and budget data from the Florida Legislature, state agencies, and licensed data providers. This data does not contain your personal information.

2. How We Use Your Information

We use the information we collect to:

Provide, operate, and improve the Service.
Process payments, manage your subscription, and send billing-related communications (receipts, renewal notices, payment failures).
Send alert emails and push notifications for legislative events based on your folder and alert preferences.
Send service announcements, product updates, and policy changes. You cannot opt out of transactional and policy communications while your account is active.
Respond to your support requests and communicate with you about your account.
Monitor for abuse, security threats, and violations of our Terms of Service.
Analyze aggregate, de-identified usage patterns to understand how the Service is used and to guide product development. We do not sell individual usage data.
Comply with legal obligations and enforce our agreements.

We do not use your personal information to train AI or machine-learning models, nor do we sell your personal information to any third party.

3. How We Share Your Information

3.1 Within Your Organization

Content you create in the Service — folders, contacts, vote counts, client profiles — is visible to other members of your organization account. Organization administrators can view and manage all content created by members of their account.

3.2 Service Providers

We share information with trusted third-party vendors who help us operate the Service, subject to confidentiality agreements and restrictions on further use:

Clerk — user authentication and organization management
Stripe — payment processing and subscription management
Neon / Vercel — database hosting and application infrastructure
Florida Legislature — public legislative data (bills, hearings, statutes)
Sentry — error monitoring and crash reporting (may capture limited request metadata)

3.3 Legal Requirements

We may disclose your information if required by law, subpoena, court order, or other legal process, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Trinitek, our users, or the public.

3.4 Business Transfers

If Trinitek is acquired, merges with another company, or sells substantially all of its assets, your information may be transferred as part of that transaction. We will notify you by email or a prominent notice on advostack.ai before your information is transferred and becomes subject to a different privacy policy.

3.5 With Your Consent

We will share your information with third parties not listed above only with your explicit consent.

4. Data Retention

We retain your account information and content for as long as your subscription is active. After your subscription ends or is canceled:

Your account and data are retained for 90 days to allow for reactivation.
After 90 days, your account and associated content are permanently deleted from production systems.
Backup copies may persist for up to an additional 30 days before deletion.
We may retain anonymized, aggregated data derived from your usage indefinitely.
Financial and billing records are retained for seven (7) years as required by law.

You may request an export of your data before your account is deleted by contacting support@advostack.ai.

5. Security

We implement industry-standard security measures to protect your information, including:

Encryption of data in transit using TLS.
Encryption of data at rest in our database infrastructure.
Access controls limiting which Trinitek personnel can access production data.
Authentication managed by Clerk, which implements multi-factor authentication, session management, and credential security on our behalf.

No method of transmission or storage is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security. If you become aware of any security vulnerability or incident, please notify us immediately at support@advostack.ai.

6. Cookies

The Service uses cookies and similar local storage mechanisms solely for the following purposes:

Authentication: session tokens that keep you logged in. These are required for the Service to function and cannot be disabled.
Preferences: remembering your UI preferences such as sidebar state or selected filters.

We do not use advertising cookies, cross-site tracking cookies, or third-party analytics cookies. We do not participate in any ad network or retargeting program.

7. Your Rights and Choices

7.1 Access and Correction

You may access and update your account information at any time through your account settings. If you need to correct information that cannot be updated in-app, contact support@advostack.ai.

7.2 Data Export

You may request an export of your data at any time by contacting us. We will provide your data in a machine-readable format within 30 days of your request.

7.3 Deletion

You may request deletion of your account and associated personal data by contacting support. Note that deletion terminates your access to the Service. Financial records required by law will be retained per Section 4.

7.4 Marketing Communications

If we send marketing or product-announcement emails separate from transactional service communications, you may opt out at any time using the unsubscribe link in those emails or by contacting us. Transactional emails (billing, alerts, policy notices) are not subject to opt-out while your account is active.

7.5 Push Notifications

Legislative alert push notifications are sent to your mobile device based on your alert preferences. You may adjust or disable these in your account settings or through your device's notification settings at any time.

8. Florida Residents

If you are a Florida resident, you have rights under the Florida Digital Bill of Rights (FDBR), including the right to access, correct, delete, and obtain a copy of personal data we hold about you, and to opt out of certain data processing activities. To exercise these rights, contact us at support@advostack.ai. We will respond within the timeframes required by applicable law. We do not sell personal data and do not process personal data for targeted advertising, so certain FDBR opt-out rights may not apply.

9. Children

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that we have inadvertently collected information from a minor, we will delete it promptly. If you believe we have collected information from a minor, please contact support@advostack.ai.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email at least 30 days before the changes take effect and update the effective date at the top of this page. Your continued use of the Service after the effective date constitutes your acceptance of the updated policy.

11. Contact

Questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information:

Trinitek Holdings, Inc.
d/b/a ADVOstack
support@advostack.ai