The short version: your team’s work is visible only to your team, the server enforces it, data stays in the UK, and it’s backed up every day.
| Where | London, on Google Cloud (europe-west2), under UK GDPR. |
| Who can see a workspace | Only its members, by their role. Viewers can’t change anything; Guests see only their own tasks. |
| How it’s enforced | Security rules on the server check every read and write, so hiding a button is never the only protection. |
| Your files | Stay in your Google Drive or OneDrive. Trawpie keeps a link only. |
| Money | Only roles with the finance permissions can read budgets and spending. |
| Backups | Daily, kept 30 days; weekly, kept 14 weeks. One team can be restored without touching others. |
| Abuse | Requests from anything but the real site are refused (App Check), and agents are rate-limited. |
What we never do
- Sell your data, or use it for advertising.
- Copy your files from Drive or OneDrive.
- Let an AI agent delete anything or see money.
Your rights
Download everything about you, or delete your account, from Your account ▸ App and data. Data, exports and leaving explains what happens to shared work.
The full details are on the security page and in the privacy policy. Found a problem? Tell us through 💬 Feedback, and we’ll reply.