1. Data Controller
Trilho is the Data Controller responsible for processing your personal data under the Brazilian General Data Protection Law (LGPD - Law No. 13.709/2018). For any privacy inquiries or data subject requests, contact our DPO channel at privacy@trilho.online.
2. Personal Data We Collect
- Account Registration Data: Full Name, Email Address, and encrypted Password Hash (bcryptjs).
- Avatar Preferences: Avatar URL and seed generated via DiceBear SVG API.
- Workspace Content: Boards, columns, cards, and custom field definitions created or assigned to your account.
3. Legal Bases for Processing
We process personal data based on LGPD Art. 7, I (Consent) upon user registration and LGPD Art. 7, V (Execution of Contract) to provide Kanban project management features and services.
4. Third-Party Data Processors
- DiceBear API: Renders SVG user avatars (
https://api.dicebear.com). - Resend API / SMTP: Transmits transactional emails for account verification and password recovery.
5. Your Rights as a Data Subject (LGPD Art. 18)
Under LGPD Art. 18, you have full self-service rights directly accessible in your Account Settings:
- Confirmation & Access (Art. 18, I & II): View account and workspace data anytime.
- Correction & Rectification (Art. 18, III): Update name and avatar in Account Settings.
- Data Portability (Art. 18, V): Export all personal data in structured JSON format.
- Account Erasure (Art. 18, VI): Permanently delete your account and personal data ("Right to be Forgotten").