Privacy Policy

Effective date: 01 January 2026

This Privacy Policy explains how Trippling ("Trippling", "we", "us", "our") handles information when you use https://trippling.app (the "Service"). Trippling is designed to be privacy-first. We do not store time off records, personal data, or any content that identifies individual employees.

Summary

Information We Do Not Store

We do not store, log, or persist any of the following:

Any time off information accessed from third-party systems is processed in memory solely for the purpose of generating the configured summary and is not written to our databases.

Information We Store

The only information we store is the configuration explicitly created by an authorised admin user to enable the Service. This includes:

We do not use these mappings to identify individuals. They are used only to route and format summaries according to the admin's configuration.

How the Service Works

Trippling connects to third-party services (such as Slack and a time off provider) to produce a channel-based snapshot. To do this, we temporarily retrieve the minimum necessary information required to generate the snapshot, then discard it. We do not create profiles of employees, and we do not build a historical database of leave records.

Legal Bases for Processing

Where applicable under UK GDPR, our processing is based on:

Data Retention

Because we do not store time off data or employee PII, we do not retain those categories of information. We retain admin-configured mappings and connection metadata only for as long as the integration remains active or as needed to provide the Service. When an organisation disconnects or uninstalls the integration, we will delete or anonymise stored configuration within a reasonable period unless we are required to retain it for legal, security, or accounting purposes.

Security

We use reasonable administrative, technical, and organisational measures designed to protect the Service and the limited configuration data we store. This includes access controls and encryption in transit where supported by the integrating platforms. No method of transmission or storage is completely secure, but we work to maintain appropriate safeguards for the nature of the data we hold.

Third-Party Services

The Service integrates with third-party platforms (for example, Slack and a time off provider). Your use of those platforms is governed by their own terms and privacy policies. Trippling acts on behalf of the organisation's admin configuration to route summaries to Slack channels. We encourage you to review the privacy policies of any connected services.

International Transfers

Depending on where you and our service providers are located, limited configuration data may be processed outside the UK. Where international transfers occur, we take steps intended to ensure an adequate level of protection, such as relying on appropriate contractual safeguards.

Your Rights

If UK GDPR applies, you may have rights including access, rectification, deletion, restriction, and objection. Because we do not store employee PII or time off records, requests relating to individual leave records are usually best directed to your organisation or the relevant third-party time off system.

Admin users may request deletion of stored configuration by contacting us using the details below.

Children's Privacy

The Service is intended for use by organisations and is not directed to children. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the Service or legal requirements. We will update the "Effective date" at the top of this page when changes are made. If changes are material, we may provide additional notice.

Contact Us

If you have questions about this Privacy Policy or want to request deletion of stored configuration, contact us at:


Note: This template is provided for general informational purposes and is not legal advice. You may wish to have counsel review it to ensure it matches your exact data flows, security practices, and hosting arrangements.