Privacy Policy

Last updated July 24th, 2026

Spirit of this agreement

Below is some legalese from our lawyers. Here's the deal: we take privacy seriously and minimize your exposure in several ways. Your 3rd party credentials are encrypted at rest; most of our software and all of our firmware is open source; we only store your most recent screens; we don't have access to your local networking credentials. We do not maintain behavioral histories of individual users. We retain limited operational and security logs for 7 days where necessary to operate, protect, and troubleshoot the service. If when something goes wrong we take pride in making it right. Email the founder (me) at any time: [email protected].

This Privacy Policy is between TRMNL Holdings LLC (d/b/a TRMNL) ("TRMNL," "we," "us," or "our") and you, whether you are a visitor or registered user. It explains how we collect, use, store, and otherwise process information through our web application, available at https://trmnl.com.

Consent

By using our website, you hereby consent to our Privacy Policy and agree to its Terms of Service.

Information we collect

The personal information that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we ask you to provide your personal information.

If you contact us directly, we may receive additional information about you such as your name, email address, phone number, the contents of the message and/or attachments you may send us, and any other information you may choose to provide.

When you register for an Account, we may ask for your contact information, including items such as name and email address.

How we use your information

We use the information we collect in various ways, including to:

Access protections

Access to personal information is limited to authorized personnel and service providers who require it for legitimate business purposes. We use access controls, multi-factor authentication, least-privilege permissions, and periodic access reviews appropriate to the sensitivity of the information.

Encryption in transit

Information submitted through our website is protected in transit using HTTPS/TLS. Third-party credentials are encrypted at rest. Our SSL certificate is issued by Google Trust Services.

Breach notifications

We maintain procedures designed to detect, assess, contain, and remediate security incidents involving personal information. If we determine that a personal-data breach has occurred, we will document and investigate the incident and notify affected individuals, regulators, and other parties without undue delay when required by applicable law. Where appropriate and legally permitted, our notice will describe the nature of the incident, the categories of information involved, likely consequences, measures taken or planned, steps individuals may take to protect themselves, and how to contact us for further information.

Data retention

We retain personal information for as long as reasonably necessary to provide our services and satisfy applicable legal obligations. Our database backups follow a strict seven-day data retention policy: when information is deleted from our active systems, residual backup copies are retained for no more than seven days before being automatically deleted.

Your Google Data

TRMNL accesses Google user data only when you choose to connect a Google service and authorize the requested permissions. Depending on the service, this may include:

We use this data only to provide the feature you requested: displaying selected information on your TRMNL dashboard or device, synchronizing connected calendars and resources, and creating, updating, or cancelling calendar bookings when you enable a booking feature.

We store encrypted Google access and refresh tokens so connected features can continue operating. Depending on the feature, we may also retain selected settings, synchronized calendar resource and event data, recently fetched plugin data, and the most recent screens containing information you selected for display.

We do not sell Google user data or use it for advertising, retargeting, determining creditworthiness, lending, or training or improving generalized artificial intelligence or machine learning models. We disclose it only to your TRMNL devices and interfaces, to service providers that help us securely operate the requested feature, for security purposes, or when required by law.

You may revoke access from your TRMNL account dashboard or your Google Account permissions at any time. Disconnecting a Google integration stops future access and removes its credentials, configuration, and synchronized data from our active systems. Under our backup data retention policy, residual copies are retained for no more than seven days before being automatically deleted. Disconnecting TRMNL does not delete information from your Google account.

TRMNL's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Log Files

TRMNL follows a standard procedure of using log files. These files log visitors when they visit websites. All hosting companies do this and a part of hosting services' analytics. The information collected by log files include internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. These are not linked to any information that is personally identifiable. The purpose of the information is for analyzing trends, administering the site, tracking users' movement on the website, and gathering demographic information.

Cookies and Web Beacons

Like any other website, TRMNL uses 'cookies'. These cookies are used to store information including visitors' preferences, and the pages on the website that the visitor accessed or visited. The information is used to optimize the users' experience by customizing our web page content based on visitors' browser type and/or other information.

Advertising Partners Privacy Policies

We share a limited subset of web application activity with advertising and marketing partners. Depending on how you interact with TRMNL, this may include your IP address, approximate location, unique identifier, first name, pages visited, and information about product purchases. Partners use this information to measure marketing performance and display relevant marketing or social proof messages.

Third-party ad servers or ad networks uses technologies like cookies, JavaScript, or Web Beacons that are used in their respective advertisements and links that appear on TRMNL, which are sent directly to users' browser. They automatically receive your IP address when this occurs. These technologies are used to measure the effectiveness of their advertising campaigns and/or to personalize the advertising content that you see on websites that you visit.

Note that TRMNL has no access to or control over these cookies that are used by third-party advertisers.

This advertising-partner sharing is separate from the information we process to operate your TRMNL devices and provide the features you request. Information used to connect plugins, build screens, deliver content, or otherwise make your devices perform their features is not shared with advertising partners for advertising purposes. Google user data is never shared with advertising partners.

Our advertising and marketing partners include:

Third Party Privacy Policies

We share only the minimum information necessary for service providers to perform the functional services they provide to us. Depending on the service, this may include account identifiers, contact information, application activity, technical information, and messages you choose to send.

This limited operational information is separate from Google user data and other information we process to make TRMNL devices perform the features you request. Google user data is not shared with these service providers.

Our functional service providers include:

TRMNL's Privacy Policy does not apply to other advertisers or websites. Thus, we are advising you to consult the respective Privacy Policies of these third-party ad servers for more detailed information. It may include their practices and instructions about how to opt-out of certain options.

You can choose to disable cookies through your individual browser options. To know more detailed information about cookie management with specific web browsers, it can be found at the browsers' respective websites.

CCPA Privacy Rights (Do Not Sell My Personal Information)

Under the CCPA, among other rights, California consumers have the right to:

Request that a business that collects a consumer's personal data disclose the categories and specific pieces of personal data that a business has collected about consumers.

Request that a business delete any personal data about the consumer that a business has collected.

Request that a business that sells a consumer's personal data, not sell the consumer's personal data.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.

GDPR Data Protection Rights

We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

The right to access – You have the right to request copies of your personal data. We may charge you a small fee for this service.

The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete.

The right to erasure – You have the right to request that we erase your personal data, under certain conditions.

The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.

The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.

The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.

Children's Information

Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity.

TRMNL does not knowingly collect any Personal Identifiable Information from children under the age of 13. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records.