Privacy Policy

Effective date: 2026-11-01

Trina Inc. (주식회사 트리나, “we”) provides Trina Drive services and the website https://drive.trina.app. This policy explains what personal information we collect about our customers, website visitors and people who contact us, why, and what rights you have. It is written to meet Korea’s Personal Information Protection Act (PIPA) and, for visitors in the EU/UK, the GDPR.

This policy does not cover the files you store in Trina Drive. Trina Drive runs on your own hardware. When we operate your server under a managed plan, we handle any personal data in your files only as your processor, under §11 of our Terms of Service.

1. What we collect and why

Purpose Information Legal basis (GDPR) Kept for
Responding to inquiries and setup calls Name, work email, company, role, phone (optional), message content Steps before a contract / legitimate interest 1 year after the last contact, unless you become a customer
Providing managed plans and setup services Customer contact names, work emails, company details, server and network details needed for operation, support tickets, operator access logs Contract For the term of the contract + 1 year (operator access logs: 3 years)
Billing and taxes Company name, billing contact, billing address, tax ID, order and invoice records. Card and payment details are collected by our payment providers, not by us Contract / legal obligation 5 years as required by Korean tax law (국세기본법)
Product and security emails Work email Contract / legitimate interest Until the contract ends
Newsletter (only if you opt in) Email Consent Until you unsubscribe
Website security and basic analytics IP address, browser type, pages visited, timestamps (server logs) Legitimate interest Up to 90 days

We do not collect resident registration numbers or sensitive information, and we do not sell personal information. We do not use your content or your files to train AI models.

2. Cookies

The website uses only cookies that are strictly necessary (for example, to keep the checkout working). The checkout window opened by Paddle sets its own cookies under Paddle’s policy. We do not use analytics or advertising cookies. You can block cookies in your browser settings; the checkout may then not work.

3. Sharing with third parties

We share personal information only: (a) with the processors listed in §5 so they can perform services for us; (b) with Paddle.com Market Limited, which acts as our reseller and Merchant of Record for online orders — when you buy through our online checkout, Paddle collects your payment and billing details and processes them as an independent controller under its own privacy policy (https://www.paddle.com/legal/privacy), and shares with us the order details we need (name, email, company, country, tax ID, items purchased); (c) when required by law or a valid order from a public authority; (d) to protect the rights, property or safety of our customers or others.

4. AI providers you connect

If you connect an AI client (Claude, ChatGPT, Codex, Cursor, etc.) to your Trina Drive server, the content the agent reads goes from your server to that AI provider under your own agreement with them. We are not a party to that transfer.

5. Processors and international transfers

We use the following service providers. Several are outside Korea, so your information is transferred abroad. You may refuse the transfer by not using the service concerned or by contacting us; for some items (such as billing), refusing means we cannot provide the Services.

Recipient Country What Why How / when Kept for
Paddle.com Market Ltd United Kingdom (and its payment partners) Name, email, company, billing address, tax ID, payment details Online checkout, tax, invoicing (Paddle is a controller for payment data) Over the network when you check out Per Paddle’s policy
Vercel Inc. United States Website server logs, order notifications from Paddle (no card data) Hosting drive.trina.app Over the network, continuously Up to 30 days
Our email provider May be outside Korea Emails you send to us; recipient address and content of service notifications we send Business email and service notifications Over the network when an email is sent or received Per our retention in §1
Tailscale Inc. Canada / United States Device names, operator account, connection metadata (not your files) Secure remote operation of your server Over the network during operation Contract term

All online payments, in Korea and elsewhere, are processed by Paddle.com. We use the National Tax Service’s Hometax system only to issue electronic tax invoices for setup services contracted directly by quote.

Contact details of overseas recipients are available on request at contact@trina.app.

6. How we delete information

When the retention period ends or the purpose is achieved, we delete electronic records so they cannot be recovered and shred paper records. Records we must keep by law (such as tax records) are stored separately and kept only for the required period.

7. Your rights

You can ask us to access, correct, delete or stop processing your personal information, to withdraw consent, and (in the EU/UK) to port your data or object to processing. Email contact@trina.app; we will respond within 10 days (PIPA) or one month (GDPR). You may also have a representative make the request. We may need to verify your identity. If a child under 14 is involved, a legal guardian may exercise these rights, though our Services are not directed at children.

8. Security measures

We apply administrative, technical and physical safeguards, including: access to customer systems limited to named staff with individual accounts and multi-factor authentication; logging of operator access; encryption in transit; least-privilege access to billing records; staff confidentiality commitments; and an internal personal-information management plan.

9. Privacy officer

Privacy officer (개인정보 보호책임자) Daehyun Nam (남대현), CEO
Contact contact@trina.app · +82 70-8064-3349

10. Complaints

If you have a concern you can contact us first. You may also contact: Personal Information Dispute Mediation Committee (www.kopico.go.kr, 1833-6972); KISA Personal Information Infringement Report Center (privacy.kisa.or.kr, 118); Supreme Prosecutors’ Office (www.spo.go.kr, 1301); Korean National Police Agency Cyber Bureau (ecrm.police.go.kr, 182). EU/UK residents may complain to their local data protection authority.

11. Changes

We will post changes on this page with a new effective date, and notify customers by email at least 7 days before material changes (30 days if the change is unfavorable to you).

← Back to home