Privacy Policy

Smart Icon Cover, a Trello Power-Up by Digio Sync LLC. Effective date: [OWNER: effective date]. Last updated: [OWNER: date].

This policy says what personal information Smart Icon Cover (“SIC”, “we”) handles, why, who else sees it, and how to have it deleted. Digio Sync LLC, [OWNER: company address], is responsible for it. Questions and requests: [PRIVACY EMAIL]. Support: [SUPPORT EMAIL].

Smart Icon Cover gives Trello cards a small AI-generated icon cover. It is not made by or affiliated with Atlassian. Trello handles your Trello data under Trello's own privacy policy; this one covers what SIC does.

1. What we collect

From Trello, when you authorize

You authorize SIC with Trello's consent screen. SIC asks for the scope read,write,account and a token that does not expire (until you revoke it). With it SIC reads and keeps:

• your Trello member id, full name and username;
• your email address. Trello only gives an email to the account scope, which is why SIC asks for it. SIC uses that scope only to read your email; it never changes your Trello account details or notifications.
• the token itself, kept encrypted (see Security). Members who authorized before SIC needed an email are asked to authorize again only when a feature needs it.

From Trello, as you use SIC

• Board names and links, for the boards where you use SIC, so the dashboard can list them.
• Card titles and ids of the cards that get an icon cover, kept with the cover record. For auto-cover, the title of each new card on a board with Auto-Gen Board Covers on is kept too, so SIC can wait for the title to settle and make the cover.
• Whether a card already has a cover, and which one, so SIC never replaces someone else's cover without asking.
• A board's title and description, read once per board to choose its category and activity (see “The board-context step” below). The description is not kept; the chosen category and activity are.
• Trello webhook notices for boards where Auto-Gen Board Covers is on. SIC does not store the notice itself; it keeps the card id and title it needs to decide what to do.

The icon covers

Each cover is a PNG. SIC keeps its own copy in a private Supabase Storage bucket, filed under your account and the cover's id, and attaches another copy to the Trello card. The one on the card belongs to your Trello board and follows Trello's rules.

Your SIC account

• A billing email for the account (taken from the Account-Holder's Trello email), your plan, and a ledger of cover credits: grants, uses and refunds, with no personal information in it.
• Which boards have Auto-Gen Board Covers on, who turned it on, and when. Teammates on the same Team or Business account, and people sharing a board across accounts, can see the Trello name or username of who turned it on, so they can ask them to turn it off.
• On Team and Business accounts: members, their roles (Account-Holder, Manager, Contributor), team boards, and invite codes. Codes are stored only as a one-way hash. Wrong codes tried are counted per member so SIC can stop guessing (ten an hour).
• For Free's one-time cover credits: a one-way hash of your email address (lower-cased, ignoring a +tag and Gmail dots), kept in the ledger so one person cannot collect them on several Trello accounts. The address itself is not kept in the ledger.

Payments

SIC bills you directly through Stripe. Card details are entered on Stripe's pages and never reach SIC. SIC keeps Stripe's customer, subscription and price ids, the subscription's status and billing dates, and a record of each Stripe event it has processed (id, type, time).

Technical records

SIC's server writes structured logs with request and job ids to find faults. A log line never contains request bodies, headers, tokens or email addresses; they are cut out before anything is written. Our hosting provider may keep its own connection logs, including IP addresses: [OWNER: hosting provider, what it logs, for how long].

If error tracking is switched on (it is off unless we set it up), error reports go to Sentry with tokens, secrets and email addresses removed, and no user data, request bodies, cookies or breadcrumbs attached. [OWNER: confirm Sentry is on at launch; region]

The SIC pages inside Trello use no advertising or analytics trackers. The browser keeps a short-lived signed session token (15 minutes) in the tab's session storage so the pages can talk to our server; it is not a cookie and is not your Trello token.

2. What we use it for

• to make your icon covers and put them on your cards, as the member who asked;
• to run Auto-Gen Board Covers on the boards you turn it on for;
• to count your cover credits, charge for plans, and send receipts and billing notices;
• to keep the service safe and fair (limits, preventing repeat free credits, faults);
• to look at unusual usage: a daily email to the owner lists alerts by account id and numbers (for example, a month of credits used in a day). It does not contain member emails or card titles. It is sent through Resend;
• to answer you when you write to support.

We do not sell your personal information and we do not use card titles or board text for advertising. [LEGAL: confirm this statement and any “sale or sharing” wording required by state law]

3. Who else handles it

We may also disclose information if the law requires it. [LEGAL: wording for legal process, business transfer]

4. Security

• Your Trello token is stored encrypted with AES-256-GCM, with the key held in the server's environment, not in the database. The ciphertext is tied to your member id, so a copy on another row would not decrypt.
• The token is never written to logs or error reports and is never sent back to the pages in your browser. Your browser gives it to our server once, when you authorize.
• Cover images are in a private bucket. How many covers you can make, and your plan, are worked out on our server, not in the browser.

No system is perfectly secure. [LEGAL: breach-notification wording]

5. How long we keep it

Account data is kept while your account is active, and until you ask for deletion. [OWNER: retention periods for logs, backups, cover images, and records of closed accounts: the product does not delete these on a schedule today]

6. Your choices and deletion

• Revoke SIC's access at any time in your Trello account settings. SIC then cannot use your token.
• Turn Auto-Gen Board Covers off on a board. SIC deletes the board's webhook and keeps no further connection to it. Covers already on cards stay; they are your cards' attachments and you can remove them in Trello.
• Delete your data yourself in SIC (Help, “Delete my data”), or ask us at [PRIVACY EMAIL] from the address SIC has for you. Either way it happens in these steps, within minutes:
  1. Boards with Auto-Gen Board Covers on are turned off and their webhooks deleted.
  2. A live subscription is cancelled at once, without a refund, and your saved payment cards are removed from Stripe, so nothing can be charged again. Stripe keeps its record of past payments.
  3. Your cover image files in storage are deleted, and SIC's access to your Trello account is revoked.
  4. The personal data in the database is erased: for a member, the email, full name and username are cleared, the Trello id is replaced with a placeholder, the stored token is deleted, and their place in accounts ends. For an account, also the billing email, board names and links, card titles (including those on cover records), and any open invites.
• What we keep after erasure: the cover credit ledger and subscription history (what was granted, used and paid, without names or emails) and the plain record that a cover was made, for accounting, fraud prevention and legal reasons. Stripe keeps its own payment records as the law requires.

[LEGAL: rights by region (EU/UK GDPR, California and others): access, correction, portability, objection, complaint to a regulator; response time; how to verify identity]

7. Children

SIC is for people who can use Trello and is not aimed at children. [OWNER/LEGAL: minimum age]

8. Where data is processed

[OWNER/LEGAL: regions of the database, storage and hosting; the transfer mechanism for people outside them]

9. Changes

If this policy changes in a way that matters, we will say so in SIC and update the date at the top. [LEGAL: notice period]

10. Contact

Digio Sync LLC, [OWNER: company address]. [PRIVACY EMAIL]. Terms of service: Terms of Service.