Who we are
Charisma Design, established in the Netherlands, operates tredcoo.ai, the Tredcoo platform and the T-Builder plugin. We are the controller for the data described here. Questions and requests go to hello@tredcoo.ai.
What we store about your account
- Account data: company name, your name, e-mail address, country, language, and a hashed password. Needed to run the account, send sign-in codes and invoices, and apply the right VAT.
- Billing: top-ups, usage per product and per site, receipts and monthly statements. Card details never reach us: payments run through Stripe, which keeps them under its own privacy policy.
- Team: the e-mail addresses of the people you invite, and which projects they may work on.
What we store about your sites and projects
- Projects: the site address, the key that links the plugin to the account, the conversations with the agent, the files you upload (templates, notes, pictures), the knowledge and skills you write, the schedules you set, and the activity log of what the agent changed.
- Site data the agent reads while it works: pages, posts, menus, forms, plugin and theme information, media, and settings, as far as a request needs them. The plugin sends them to the platform for the duration of the work; what the agent decides to keep as knowledge stays in the project until you delete it.
- Model calls: what you ask and what the agent answers are sent to the AI model provider to produce the answer. We meter the call (tokens, cost, time) to bill it. The provider processes it under its own terms; we do not use your conversations to train models.
Services you connect
You can connect outside services to a project. Each is connected by the person who owns the account there, on that service's own sign-in screen. We never see your password for them, and one click disconnects.
- Google Search Console: with your consent, through Google's sign-in, we receive a token that lets the agent read Search Console data for the property you pick: queries, clicks, impressions, positions, and the indexing state of pages. We also receive the e-mail address of the Google account, so the project can show who connected it. We store the token encrypted, use it only to answer requests in that project, never write anything to Search Console, and never share the data with anyone else. Disconnecting deletes the token; you can also withdraw access at myaccount.google.com/permissions. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
- Semrush and Ahrefs: you paste your own API key. It is stored encrypted and used only for requests in that project. Removing the connection deletes the key.
What we do not do
- We do not sell data, and we do not show advertising.
- We do not use your conversations, your sites or your connected data to train AI models.
- We do not read your connected services for anything other than what you ask the agent to do in that project.
Who else processes data for us
Hosting in the European Union (DigitalOcean, Frankfurt). Payments by Stripe. Transactional e-mail by our mail provider. AI answers by the model provider named in your project's model choice. Each processes data on our instructions under a data processing agreement.
How long
Account and project data stay as long as the account exists. Conversations and activity you delete are removed at once. Connected-service tokens and keys are deleted the moment you disconnect. Invoices and statements are kept for seven years, as Dutch tax law requires. A closed account is deleted within thirty days, except the invoices.
Your rights
You can see, correct, export and delete your data from your account. For anything the account does not cover, write to hello@tredcoo.ai; we answer within a month. You can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you think we got it wrong.
Cookies
tredcoo.ai sets only the cookies a sign-in needs: the session and a protection against forged requests. No tracking cookies, no analytics cookies, no third-party cookies.
Changes
When this page changes in a way that matters, we say so in the news and by e-mail to account owners.