Customer Data Handling
This page summarizes how TrainedOn handles customer uploads and related account data during MVP and pilot use. It is a practical overview and does not replace signed contracts, an NDA, or a DPA where those documents apply.
What uploads are used for
- Running the requested audit workflow.
- Generating derived features, result artifacts, and audit outputs.
- Supporting limited troubleshooting, reliability, abuse prevention, and customer support.
What we do not do
- We do not reuse customer uploads to train foundation models or customer-facing generative models.
- We do not sell customer uploads to third parties.
- We do not publish customer uploads publicly unless separately agreed in writing.
- We do not use customer uploads for unrelated product experiments.
Confidentiality and access
Access to customer materials is limited to personnel and service accounts that need access to operate, support, secure, or troubleshoot the service. For pilot and agency workflows, we can work under NDA and can provide additional contractual handling terms where needed.
Retention and deletion
- Uploaded portfolio assets: up to 30 days by default.
- Generated variation images: up to 30 days by default.
- Generated artifacts and downloadable outputs: up to 30 days by default.
- Metadata and logs: typically up to 180 days where needed for integrity, billing, security, traceability, or legal obligations.
- Users can request export or deletion through in-app controls or by contacting support.
Backup retention can create delayed deletion from backup media. Where a signed pilot agreement, order form, or DPA sets a different rule, that signed document controls.
Security baseline
- Encryption in transit using TLS.
- Encryption at rest where provided by managed cloud vendors.
- Least-privilege access practices and scoped secrets management.
- Operational logging for key account, billing, and job lifecycle events.
- Internal incident response workflow.
Contracts and support
Self-serve use is governed by our standard Privacy Notice, Cookies, and other public trust materials.
For B2B or pilot engagements, we can also provide a Mutual NDA, a Pilot / Design Partner Agreement, and a DPA where needed.
Contact support@trainedonai.com if you need an NDA, a DPA, or a bespoke retention arrangement before uploading materials.