Privacy Policy

Last updated: 11 June 2026 · TriYou Roadmap (roadmap.triyou.com)

This is a plain-language MVP policy for the TriYou Roadmap. It is self-reviewed by the TriYou team, has not been reviewed by external counsel, and is not legal advice. It describes what the Roadmap actually does with your data today; we will expand it as the product grows.

Who we are

TriYou Roadmap is the public product roadmap for TriYou, where the community suggests ideas, votes, and discusses what we build next. The data controller is the TriYou team. To contact us about your data, reach the team through your TriYou account.

What we collect

  • Your TriYou identity. You sign in with your existing TriYou account. The Roadmap does not store your password and does not keep its own copy of your account — it references your TriYou user ID and displays your public username and avatar.
  • Your email — held by TriYou, not stored here. The Roadmap does not keep your email address in its own database. When we need to email you (for example, a notification about an idea you subscribed to), we fetch your address on demand from the TriYou account service and hand it to our email provider to send that one message.
  • Content you create. Ideas you submit, your votes, and your comments. This content is public on the Roadmap and is shown next to your public username.
  • Technical data. Standard server logs — your IP address, request metadata, and a correlation ID — kept for security, abuse-prevention, and debugging. Rate-limit counters tied to your account or IP.

Why we use it, and our legal basis

  • To run the community Roadmap and attribute your contributions (legitimate interest).
  • To send you notifications you asked for, e.g. updates on ideas you subscribed to (consent — you can unsubscribe from any email).
  • To keep the service secure and prevent spam and abuse (legitimate interest).

Who we share it with (processors)

  • TriYou account service — sign-in and your account identity.
  • Our transactional email provider — receives your email address and the notification content solely to deliver that message.
  • Cloudflare Turnstile — a privacy-friendly bot check shown when you submit an idea, to stop spam.
  • Our hosting provider (AWS) — runs the servers.

We do not sell your personal data, and we do not use advertising or third-party tracking.

How long we keep it

  • Public content (ideas, votes, comments) stays on the Roadmap so the community history remains intact.
  • When you delete your TriYou account, that deletion cascades to the Roadmap: your contributions are anonymized — your username and avatar are removed and your rows are tombstoned. Comments may be kept in a redacted, anonymous form so reply threads stay readable.
  • Server logs are kept for a limited operational window and then rotated out.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. The simplest way to erase your Roadmap footprint is to delete your TriYou account, which triggers the anonymization cascade described above. For any other request — access, correction, or export — contact the TriYou team and we will respond.

Children

The Roadmap is not directed at children and we do not knowingly collect data from anyone under the age required by your local law to consent to online services.

Changes

If we change this policy we will update the date above and, for material changes, surface a notice in the product.

Contact

Questions about your data? Contact the TriYou team through your TriYou account. See also our Terms of Service and Cookie Policy.