Privacy Policy
The short version.
- We use your photos to build your Trail. We don't sell them, and we don't use them to train AI models.
- Your Trail is public to anyone who has its link, unless you add a passcode. It isn't listed anywhere, and we ask search engines not to index it.
- We use a few outside services to run Trove (payments, hosting, email, and AI). They get only what they need to do their part.
- We run Meta and Google analytics on our marketing and checkout pages to measure our ads. We don't run them on your Trail.
- Email aj@tcbbcreativeagency.com any time to see, fix, or delete your information.
Trove is a service of TCBB Creative Agency LLC, a Minnesota company based in Ham Lake, Minnesota ("TCBB," "we," "us"). This policy covers the Trove pages at tcbbcreativeagency.com/trove, the Trail builder, and every Trail we host, including the guest photo and guestbook features. It applies to Trail owners (the people who buy and build a Trail) and to guests (the people who visit a Trail or contribute to one).
1. What we collect
From Trail owners
- Your email address. Stripe collects it at checkout and passes it to us. We use it to sign you in and to send you messages about your Trail.
- Payment details. Stripe handles them. We never see or store your card number. We keep a record of the purchase: the amount, any promo code, and Stripe's session reference.
- Your photos and videos, plus everything you type into the builder: names, event details, dates, places, captions, and chapter text.
- Choices you make, like template, music, narrator voice, and colors, along with anything we generate for your Trail (draft text, color palettes, music, narration, trailer videos).
- Sign-in records. When you request a sign-in code, we store a scrambled (hashed) copy of it for 15 minutes. Once you're signed in, your browser keeps a session token for up to 30 days.
From guests
- The name you enter, plus any photos, videos, typed notes, or voice notes you add to a Trail.
From everyone, automatically
- Standard web data that any website receives, like your IP address, browser type, and the pages you visit.
- On our marketing and checkout pages (not on Trails): cookies and similar tools from Meta (the Meta Pixel) and Google Analytics, plus Vercel's privacy-friendly page analytics.
2. How we use it
- To build, host, and show your Trail, including the AI first draft, music, narration, and trailer videos.
- To sign you in, keep your account secure, and stop abuse (for example, limiting how often guests can upload).
- To process payments and refunds.
- To email you about your Trail. We don't send newsletters or marketing email unless you ask for them.
- To measure whether our ads work. When you buy, we tell Meta that a purchase happened. That message includes a scrambled (hashed) copy of your email address, your IP address, and Meta's browser cookies, so Meta can match the purchase to an ad. It never includes your photos or what's in your Trail.
- To support you when you write in, and to meet our legal and accounting obligations.
We do not sell your personal information. We do not use your photos, videos, or Trail content to train AI models.
3. AI processing
Trove uses AI to write your first draft and to create media for your Trail. To do that, we send your photos and event details to AI providers. We use their business services, which process the content to return results to us. They don't get ownership of it.
- Anthropic (Claude) reads your photos and details to draft chapters, captions, and your palette.
- fal.ai generates music, narration voices, and video effects. That can include sending it your photos or clips to make moving backdrops.
AI output can get things wrong. You can review and edit everything before you publish.
4. Who we share it with
We share information only with the services that run Trove, only for the purposes above, and only as much as each one needs:
| Service | What it does for us |
|---|---|
| Stripe | Payments and refunds |
| Vercel | Website hosting and file storage (photos, videos, audio) |
| Supabase | Database (Trail details, guest posts, sign-in records) |
| Resend | Sends sign-in codes and "your Trail is ready" emails |
| Anthropic, fal.ai | AI drafting and media generation (see section 3) |
| GitHub | Runs the servers that render your trailer videos |
| Meta, Google | Ad measurement and site analytics (marketing and checkout pages only) |
We may also share information if the law requires it, to protect someone's safety, to investigate abuse, or as part of selling or reorganizing our business. If our business ever changes hands, this policy stays in effect for the information you've already given us.
5. Who can see your Trail
Anyone who has your Trail's link can view it. Trails aren't listed or searchable on our site, and we tell search engines not to index them, but we can't stop someone you share the link with from passing it along. Your Trail's address includes a random code so it's hard to guess. The photo and video files are stored at long, random addresses, and anyone who has one of those addresses can open that file.
Passcode. You can require a passcode to view your Trail, its guest posts, and its trailer page. A protected Trail doesn't show its name or photos in link previews either. The passcode protects the page, not the individual files: someone who already has a file's direct address can still open that file.
Guest posts. Guest photos, videos, and notes show up on the Trail right after they're posted, unless you turn on review. With review on, they appear only after you approve them. Either way, you can remove any of them from the builder.
Location data. Phone photos and videos usually record where they were taken. We remove that location data from photos and videos when they're uploaded, before they're stored.
Please think about what you share, especially photos of children. If you want something taken down, remove it in the builder or email us.
6. How long we keep it
Your Trail, its photos, and guest contributions stay up for as long as Trove operates, unless you ask us to delete them. If you get a refund, we may take that Trail offline. If we ever shut Trove down, we'll email Trail owners at least 30 days ahead.
Sign-in codes expire after 15 minutes, and session tokens after 30 days. We keep purchase records as long as tax and accounting rules require.
7. Your choices and rights
Wherever you live, you can ask us to:
- Show you the personal information we have about you
- Correct it
- Delete your Trail, a guest post, or your information
- Send you a copy of your photos and content
Email aj@tcbbcreativeagency.com from the address you used. We'll reply within 30 days, usually much sooner. Guests who want their own contribution removed can write to us too. Tell us which Trail it's on.
To limit ad tracking, you can block cookies in your browser, use Google's Analytics opt-out, or change your Meta ad preferences. Trove works fine with these blocked.
You can sign out of every device at once from the builder.
8. Children
Trove isn't meant for children. You must be 18 or older to buy a Trail, and guests under 13 shouldn't post anything. Many Trails include photos of children that their families upload. Trail owners are responsible for having permission to share those photos. If you think a child under 13 has given us personal information, or you want a photo of your child taken down, email us and we'll remove it.
9. Security
We use passwordless sign-in with short-lived codes, encrypt traffic in transit, limit how fast people can upload or request codes, and check that every change to a Trail comes from its owner. No system is perfectly secure. If a breach affects your information, we'll notify you as the law requires.
10. Changes
If we change this policy, we'll update the date at the top, and you'll be asked to review and accept the new version the next time you sign in. If a change materially affects how we use information we already have, we'll also email Trail owners before it takes effect.
11. Contact
TCBB Creative Agency LLC · Ham Lake, Minnesota
aj@tcbbcreativeagency.com
See also our Terms of Service.