Privacy policy

1. What this policy covers

This policy applies to the Trapezia website at trapezia.ai, and to email you send to the address published on it. When we say “Trapezia”, “we”, “our”, or “us”, we mean Christopher Advena, based in Pennsylvania, United States.

It does not, by itself, cover Trapezia Salus. Salus handles health information; this website does not. Section 9 explains how that boundary works.

2. What we collect and why

Nothing.

There are no forms, no accounts, no sign-ups, no newsletter, and no search box. There is no way to submit personal information through this site, because there is nowhere to submit it to. We run no analytics, no tracking pixels, no advertising tags, and no A/B testing. We set no cookies and use no browser storage. We do not build a profile of you, and we have no visitor identity to attach one to.

This is a property of how the site is built — a set of static files with no application behind them — not merely a policy commitment. If that ever changes, this policy changes with it, and the effective date above changes too.

3. Hosting and request data

The site is served by Cloudflare, which acts as our hosting provider. Delivering any web page requires the host to process standard request information: the requesting IP address, the browser user-agent string, the page requested, and timing. Cloudflare processes that data to serve the page and to protect the service from attack and abuse. It has a legitimate interest in doing so, and so do we.

We do not receive, store, query, or analyse that information, and we do not use it to identify visitors. Cloudflare's handling of it is governed by its own terms as a service provider.

4. Voluntary correspondence

When you email Trapezia with a question or to ask for help, we keep that correspondence, including your email address, so that we have a history of past correspondence to reference if you reach out in the future. Inbound mail reaches us through Cloudflare Email Routing, which forwards it.

We use that correspondence to reply to you and for nothing else. We do not add you to a mailing list, and we do not use it to market to you.

Please do not send health information, financial account details, or other sensitive personal information by email. Email is not a secure channel, and this address is not set up to receive that kind of material.

5. When we disclose your information

We do not sell personal information, and we never have. We do not share it with advertisers or data brokers, and we do not use anything you send us to train machine-learning models.

We may disclose information in a small number of narrow circumstances:

• To service providers who make the site and our email work — currently Cloudflare for hosting and mail forwarding, and Google for the mailbox correspondence is forwarded to. They may process it only to provide that service.
• When required by law — in response to a valid, binding legal request. If we are permitted to tell you about it, we will.
• To protect people — where we believe in good faith that disclosure is necessary to prevent harm, fraud, or abuse.

If Trapezia is ever acquired or reorganised, information may transfer as part of that transaction. It would remain subject to a policy no less protective than this one.

6. Your rights with respect to your information

We apply the same rights to everyone, wherever you are. Because the only personal information we hold is correspondence you chose to send us, these rights apply to that correspondence:

• Right to know. You can ask what personal information we hold about you, and how it is used.
• Right of access. You can ask for a copy of it.
• Right to correction. You can ask us to correct it if it is wrong.
• Right to erasure. You can ask us to delete it, subject to any legal obligation we have to keep it.
• Right to complain. If you are in the EU or UK, you may lodge a complaint with your local supervisory authority.

To exercise any of these, email the address in section 12. We will not charge you for it or treat you differently for asking.

7. How we secure your information

The site is served over HTTPS, with certificates provisioned and renewed automatically. Because the site holds no accounts, no database, and no submitted data, there is very little to secure on it — the smallest attack surface is the one that does not exist. Correspondence sits in an ordinary mailbox protected by account authentication.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Data retention

We keep information only for as long as it serves the purpose it was collected for. In practice that means correspondence is kept while it is useful to have a record of the exchange, and deleted on request under section 6 unless we are legally required to keep it. The website itself retains nothing, because it collects nothing.

9. Trapezia Salus

Trapezia Salus is a separate product, described at trapezia.ai/salus. It is in development and is not generally available.

Salus reads health records over SMART on FHIR, with read-only access that you authorize through your own health system and can withdraw there. That is a different activity from serving this website, with different obligations, and it is not covered by this policy.

Before Salus is offered to anyone, a privacy addendum specific to it will be published at /salus/privacy, setting out what is stored, where, for how long, who processes it, and on what basis. That addendum will add to this policy rather than replace it.

Until then: no health information is collected through this website, and none is requested by it.

10. Location of site and data

Trapezia is based in the United States and this site is operated from there. If you are in the European Union, the United Kingdom, or elsewhere outside the United States, please be aware that any information you send us will be transferred to and stored in the United States. By emailing us, you consent to that transfer.

11. Children

This site is not directed at children, and it collects nothing from anyone, including children.

12. Changes and questions

We may update this policy to reflect new practices or to comply with relevant regulations. The revised version is published at this URL with a new effective date and version number at the top of the page. The URL does not change, so a link to it always resolves to the current policy.

Questions, comments, or concerns about this policy, your information, or your rights? Email contact@trapezia.ai.

Portions of this policy are adapted from the Basecamp open-source policies, used under CC BY 4.0.