Effective September 19, 2026 · edge-2026-09-19-v1
Drost Edge privacy notice
Trinity Cloud Inc. d/b/a Drost operates Drost Edge. This notice explains how we handle information in the service. For privacy questions or requests, contact hello@drost.ai. We verify the requester’s authority and assess requests under applicable law; there is no customer self-service content-deletion feature.
Information processed
Drost Edge processes account identity and organization details, browser and CLI session records, billing and usage records, target and authorization details, customer prompts, model output, support communications, security signals, and engagement events. Restricted hosted records can include native tool calls and results, downloaded material, and sensitive data encountered during an authorized assessment. Stripe handles hosted card checkout; Drost retains payment identifiers and credit-ledger facts, not full card numbers.
Local and hosted records
The active CLI conversation stays in memory and is not written as a local transcript. Customer-selected deliverables may persist on the customer’s device. The hosted backend keeps a growing canonical engagement JSONL and protected recovery copies. Ordinary customer interfaces do not display structured tool calls or results. Authorized Drost personnel may access restricted records when needed for service, safety, security, support, or legal purposes. A person controlling the customer device can inspect local software and activity; we do not promise local execution is secret from that person.
Use, service providers, and security
Information is used to authenticate organizations, run authorized engagements, meter and reconcile service credit, prevent fraud and abuse, deliver reports, preserve evidence integrity, maintain the service, and respond to support or legal requests. Identity, payment, cloud-hosting, and model-infrastructure services assist with those functions under their respective agreements. We may disclose information when required by law or to protect the service and its users. We do not sell customer engagement transcripts. Access controls and encryption protect hosted records, but no system is risk-free.
Retention and deletion
Active hosted engagement content has no automatic expiry. Financial and security records are retained separately as needed for accounting, fraud prevention, and legal obligations. A Trinity Cloud administrator-directed process for deleting one engagement or an organization’s hosted content is being developed but is not operational today; we do not promise immediate deletion or physical purge. If that process is later activated, protected recovery copies and database backups may remain for up to the existing seven-day recovery window after live access is blocked. Contact us about access, correction, deletion, or other privacy requests; we will assess what applicable law requires and what can be done with the current system.
Contact
For privacy or support questions, email hello@drost.ai. Do not send passwords, card details, cookies, target credentials, or raw tool output by email. Our terms of service describe service use, pricing, and refunds.