Compliance & Privacy

Our approach to personal data

The platform is designed to be a PII-free analytics layer. It intentionally does not accept or store personally identifiable information.

What the platform stores

Your responsibility

⚠️ Do not pass personally identifiable information in event properties. No email, name, phone, address, or any other information that could identify a real person. Use only an anonymous user_id from your own system.

This warning appears at three points:

1. During project creation (onboarding)
2. In the SDK documentation (including Quickstart and the REST API reference)
3. In the UI when the platform detects suspicious property names (e.g., a field named email, phone, or name)

Roles under GDPR

Data Processing Agreement (DPA)

A standard DPA is available for signing at trichidata.com/legal/dpa. The DPA is required if you process data of EU residents under GDPR.

Right to erasure

You can delete all events associated with a specific user_id to comply with right-to-erasure requests (GDPR Article 17).

Via UI

1. Go to Project → Settings → Data Management
2. Enter the user_id
3. Click Delete All Events for This User

Via API

DELETE /v1/users/{user_id}/events
Authorization: Bearer prj_ak_xxxxxxxxxxxx

Response:

{
  "deleted": true,
  "user_id": "usr_7f3a9b2c",
  "events_deleted": 142
}

Deletion is applied across all storage layers within 24 hours.

Privacy Policy

The platform's full Privacy Policy is available at trichidata.com/privacy.