PP-001 v1.2 · Last updated 2026-06-13 · Effective since 2026-06-03 · privacy@gage.industries
Trove holds your working record — conversations, plans, notes — and we treat that seriously. We collect only what we need to run the product, we never sell your data, and we never train AI models on it — ours or anyone else's. You can export every bit of it anytime. Deleted means deleted: trash clears after 30 days, and hard-deleted data ages out of backups within 14 days. If anything below is unclear, write us at privacy@gage.industries.
Gage Industries LLC ("Gage Industries", "we", "us") is a Washington limited liability company headquartered in Seattle, Washington. This policy covers our website at gage.industries and our product Trove — a Claude-powered planner — together with any related services we provide (the "Services"). It is governed by Washington law.
Our mailing address — 522 W Riverside Ave #7934, Spokane, WA 99201 — is our registered agent and mail-forwarding box, used for legal notices and correspondence only; it is not an office. For the purposes of applicable data-protection laws, Gage Industries is the "data controller" of information collected through the Services.
We use the information we collect to:
Trove is powered by Claude, from Anthropic — the only AI provider we use. When you use AI features:
We record token counts and cost per AI call — not content — to enforce fair-use limits and keep the books.
We do not sell your personal information. We share it only as follows.
These providers run parts of Trove under contract. Each is obligated to protect your data and use it only on our instructions:
| Provider | Purpose | Data it touches |
|---|---|---|
| Google Cloud Platform | Hosting and infrastructure | All service data |
| Anthropic | AI processing (Claude API) | Inputs to AI features. Commercial API terms: no training on API data, limited retention. |
| Stripe | Payment processing | Billing data only |
| Google (Calendar API) | Calendar sync | Event titles and details — only for users who connect Google Calendar |
| Proton AG | Email correspondence | Messages you send to our support and legal addresses |
| Let's Encrypt | TLS certificates | No customer data |
That is the whole list. We will update this list and note the change here before adding any provider.
If we receive a subpoena, court order, or other legal process seeking your data, we will comply only with valid, properly scoped demands. Unless legally prohibited, we will notify you before disclosing your data in response to legal process, and we will challenge requests that are overbroad. Outside legal process, we disclose your data without your direction only when necessary to prevent imminent harm to a person's life or safety.
If Gage Industries is involved in a merger, acquisition, asset sale, financing, reorganization, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or use of your information.
We may share information with third parties when you direct us to or otherwise consent.
| Data | How long we keep it |
|---|---|
| Live data (your account content) | For the duration of your account |
| Trash | 30 days after deletion, then hard-deleted |
| Encrypted backups | 14-day rolling window — hard-deleted data fully ages out of backups within 14 days |
| After account closure | Personal information deleted or anonymized within 90 days |
| Usage and billing records | Token counts and costs (no content), retained for accounting |
We retain data longer only when required by law, to resolve disputes, or to enforce our agreements.
Trove runs on Google Cloud Platform. Data is encrypted in transit (TLS 1.2+) and at rest. Accounts are isolated with Postgres row-level security, enforced at the database layer — not just in app code. Google OAuth tokens are encrypted at rest. Access is least-privilege: exactly one person — the founder — holds production access, and our working policy is to never read user content while debugging. We take nightly encrypted backups with a 14-day retention window. The full picture is at gage.industries/security.
No security measure is perfect. If something goes wrong, we will not sit on it: we will notify affected users within 72 hours of confirming a breach involving their data, along with any authorities required by law.
Export. Your full record — including conversations, AI memory, briefs, and trash — exports as JSON anytime from Settings.
Memory. Everything Trove remembers about you is listed at /memory, where you can edit or delete any entry.
Trash. Anything you delete is recoverable from /trash for 30 days before it is permanently removed.
Crew accounts. If you create or join a Crew account, your operational records — jobs, tasks, logs, notes, and metrics — are shared with every member of that account: each member can see and edit them, and every entry is permanently attributed to the member who created it. Your personal stream stays private even on a Crew — your capture conversations, your AI memory, and your daily brief are visible only to you, never to other members. The account owner manages membership: they invite members by email and can remove them at any time. Removing a member ends their access to the shared record but does not delete the entries they authored, which remain part of the Crew's shared history. When you export, you receive the shared record together with your own personal stream. For the shared record the account owner is the data controller; if you are a member and want entries you authored amended or removed, contact your account owner or privacy@gage.industries.
Depending on your location, you may also have legal rights to:
To exercise any of these rights, contact privacy@gage.industries. We will respond within the timeframes required by applicable law and may need to verify your identity first.
Washington residents have specific rights under the Washington My Health My Data Act and other state laws. If our Services collect health-related information about you, we will obtain your separate consent and provide additional disclosures as required by law. To request a list of personal information disclosed to third parties for direct marketing purposes, contact privacy@gage.industries.
California residents have rights under the CCPA, as amended by the CPRA, including the rights to know, delete, correct, and limit the use of sensitive personal information. We do not "sell" or "share" personal information as those terms are defined under California law — we run no third-party analytics or advertising on Trove.
Gage Industries is based in the United States and processes information on servers located in the United States. If you use the Services from elsewhere, your information is transferred to and processed in the United States, whose data-protection laws may differ from your country's.
Trove accounts require you to be at least 18. Our Services are not directed to children under 16, and we do not knowingly collect personal information from children under 16 — if we learn that we have, we will delete it. Contact privacy@gage.industries if you believe a child has provided us with personal information.
The Services may link to third-party sites. We are not responsible for their privacy practices — review their policies before providing them with personal information.
We may update this policy from time to time. We will post updates here and revise the "Last updated" date above; for material changes we will provide additional notice, such as email or an in-product note. Continued use of the Services after a change takes effect constitutes acceptance.
Email: privacy@gage.industries
Mail (legal notices — registered agent / mailing address): Gage Industries LLC · Attn: Privacy · 522 W Riverside Ave #7934 · Spokane, WA 99201 · USA
Download this policy as PDF (v1.2) · Archived: v1.1 (PDF) · v1.0 (PDF)