Legal & Compliance

Privacy Policy & Terms of Service

Last updated: November 2026

1. Privacy & Zero-Payload Data Handling

Trezko is designed on a privacy-by-architecture model. Our browser-based Live Inspector executes entirely within your client browser (`window.localStorage` only) and transmits zero JSON payloads to external servers.

When using our optional cloud ingestion API (`ingest.nerbo.xyz`), the sidecar collector strips all scalar string, numeric, and boolean values inside your infrastructure prior to transmission. We process only structural metadata (JSON field paths, value types, byte counts, and timestamps) alongside standard account billing details (work email address and organization identifier).

2. Subprocessors & Data Retention

Account metadata and structural schema snapshots are hosted on encrypted cloud infrastructure in the United States and European Union. Schema history is retained strictly according to your workspace plan quota (7 days on Developer, 90 days on Team, 365 days on Scale) and purged permanently within 14 days of workspace deletion.

3. Terms of Service

By accessing Trezko software, CLI packages, or hosted ingestion endpoints, you agree to use the service solely for authorized software engineering, testing, and observability on systems you own or have permission to inspect.

Paid subscriptions renew monthly or annually based on the selected billing cycle and may be canceled at any time prior to the next renewal date. Usage exceeding included monthly AST quotas on Team or Scale plans is billed at the published per-million overage rate unless hard rate-limiting caps are enabled in workspace settings.

4. Security & Contact

To report a security vulnerability, request a signed Data Processing Addendum (DPA), or submit privacy inquiries, contact marcello@nerbo.xyz.