Trevra records limited first-party events such as page views and CTA clicks, attribution fields, a session-scoped visitor identifier, and the current path. The analytics contract excludes email bodies, documents, invoice details, client content, and IP-address storage.

Workspace records, evidence, integrations, and credentials are used to provide the product. Provider credentials belong in the integration provider or secret manager rather than application tables or source control.

Self-hosted operators control their own infrastructure, retention, backups, access policy, and legal obligations. Trevra does not receive self-hosted workspace data unless the operator deliberately sends it to a Trevra-managed service.

Privacy requests may be sent to support@usetrevra.com. Identity verification may be required.