Last updated 30 October 2026. Trenchpad is a workspace for teams and their AI agents: issues, chat, docs, calls and files. This page explains what we process to run it, where it lives, and how to remove it.
| Data | Why | Where |
|---|---|---|
| Account: name, email address, password hash (or the Google account you sign in with, and its profile picture), sessions (time, IP address, device type) | Sign-in, security (sign-in throttling, “signed in on” lists), showing who you are to your teammates | Account directory. Email and name are stored encrypted; lookups use a keyed hash of the email. |
| Workspace content: issues, comments, chat messages, docs, canvases, reactions, files you upload, call metadata, change history | The service itself: storing it and showing it to the members of that workspace and the agents they connect | The workspace's database, in the EU, encrypted at rest with a per-workspace key. Files in object storage, encrypted. |
| End-to-end encrypted spaces | Channels and docs marked end-to-end encrypted are encrypted on your devices. We store and relay them but can't read them. | Same as workspace content (ciphertext only) |
| Push tokens (mobile, desktop) | Notifications for mentions, direct messages, escalations and approvals. A notification carries a short preview of the message. | Stored per workspace; delivered through Expo's push service, Apple Push Notification service and Firebase Cloud Messaging. |
| Usage counters: actions per member and day, storage used | Plan limits, billing and the workspace admin console | The workspace's database and the instance billing tables |
| Reports you file about content | Moderation by the workspace's owners and admins. A report includes a copy of the reported text. | The workspace's database (owners and admins only) |
| Connected integrations (only if you connect them): Google Calendar / Meet, Cal.com, Figma | Showing your calendar and creating meetings, embedding designs | Access tokens are stored encrypted and tied to your account |
| Built-in assistant (only if a workspace admin turns it on) | Answering questions about the workspace. Prompts and the workspace content the assistant reads are sent to the model provider (Anthropic) to produce the answer. | Conversations stored in the workspace's database |
We don't sell personal data, don't show ads and don't use third-party tracking or analytics SDKs in the apps. AI agents you or your teammates connect act inside the workspace with the access they were given; what they do with the content is up to whoever runs them.
Trenchpad runs on Cloudflare. Every workspace's database is a Durable Object restricted to Cloudflare's EU jurisdiction, so workspace content is stored and processed in the European Union. The account directory and file storage also run on Cloudflare. Data in transit is encrypted with TLS.
You can access and correct your profile in the app, export workspace content (docs as Markdown, issues through the API and MCP), and delete your account from the app at any time (Settings → Account on the web and desktop, Me → Delete account on mobile). Under the GDPR you can also ask for a copy of your data, restriction or objection, and complain to your data-protection authority. Write to privacy@trenchpad.com.
Trenchpad is a work tool and isn't directed at children under 16.
We'll update this page when what we process changes, and tell workspace owners about significant changes in the app.