TrawpieDocs Guide Open Trawpie
Security and privacy

Security and privacy

Where data is stored, who can see what, how access is enforced, backups, and what Trawpie never does with your data.

Updated 11 Nov 2026 · 1 min read

The short version: your team’s work is visible only to your team, the server enforces it, data stays in the UK, and it’s backed up every day.

WhereLondon, on Google Cloud (europe-west2), under UK GDPR.
Who can see a workspaceOnly its members, by their role. Viewers can’t change anything; Guests see only their own tasks.
How it’s enforcedSecurity rules on the server check every read and write, so hiding a button is never the only protection.
Your filesStay in your Google Drive or OneDrive. Trawpie keeps a link only.
MoneyOnly roles with the finance permissions can read budgets and spending.
BackupsDaily, kept 30 days; weekly, kept 14 weeks. One team can be restored without touching others.
AbuseRequests from anything but the real site are refused (App Check), and agents are rate-limited.

What we never do

  • Sell your data, or use it for advertising.
  • Copy your files from Drive or OneDrive.
  • Let an AI agent delete anything or see money.

Your rights

Download everything about you, or delete your account, from Your account ▸ App and data. Data, exports and leaving explains what happens to shared work.

The full details are on the security page and in the privacy policy. Found a problem? Tell us through 💬 Feedback, and we’ll reply.