We don't train models with your content
Your files, prompts, and generations don't train, fine-tune, or evaluate AI models. Providers are contracted under commercial terms that prohibit training and limit retention to processing.
Security & privacy
Your content is yours.
Including for AI.
Documents, uploads, prompts, generations, and brand kits aren't used to train models — not by us, and not by the AI providers we use. This page summarizes how we handle your data; the details are in the legal documents.
Security & privacy
The commitments.
What holds true today, in the product that's live.
Encryption in transit and at rest
TLS 1.2+ across all traffic; encrypted storage on Google Cloud. Internal access by role and least privilege.
Payments through Stripe
Card data stays with Stripe. Trakto keeps only an identifier, the last four digits, the brand, and the expiration date.
LGPD, GDPR, and CCPA
Legal basis, data subject rights (access, correction, export, deletion), and the data protection officer's contact channel are described in the Privacy Policy.
Consent by region
Analytics and marketing only with opt-in in the EU, UK, and Canada; opt-out available elsewhere. You can change your choice in the footer.
You control what's public
Trakto Links and share links are public by your own choice. Pausing or unpublishing is instant.
Subprocessors
Who touches your data to keep the platform running — and why.
| Service | Provider | Purpose |
|---|---|---|
| Infrastructure, storage, and rendering | Google Cloud Platform | Hosting, files, processing |
| Database | MongoDB Atlas | Account data, documents, and metadata |
| Payments | Stripe | Billing, subscriptions, receipts, fraud prevention |
| AI — text, image, video | Google Vertex AI / Gemini API | Generation and visual analysis (paid tier, no training) |
| AI — image and video | fal.ai | Image and video models in the picker |
| AI — text and assistance | OpenAI API | Text, analysis, editor assistance (no training by default) |
| AI — voice | ElevenLabs | Narration and voice synthesis |
| Monitoring | Sentry | Application errors and diagnostics |
The full list, with regions and retention periods, is in the Privacy Policy and is updated whenever a provider joins or leaves.
The documents.
Written to be read. Version and effective date on each one.
Questions that reach us
FAQ — Security & privacy
Do you use my designs to train AI?
No. Neither Trakto nor the providers we use train, fine-tune, or evaluate models with your content. It's a contractual commitment, not just a policy.
Where are my files stored?
On Google Cloud Platform, encrypted at rest. Regions are listed in the Privacy Policy.
How do I delete my account and my data?
Through account settings or the privacy channel listed in the Policy. Export and deletion follow LGPD and GDPR timelines.
Is there SSO and a data processing agreement (DPA)?
Yes, on Enterprise: SSO/SAML, a DPA with a security-measures annex, and contract terms. Talk to sales.