Legal

Privacy Policy

Private beta. Last updated 2026-09-04.

EchoTrellis is currently a private, invite-only friend test — a small group of people helping us try out the product before it's ready for anyone else. This policy describes, in plain language, what EchoTrellis actually collects today and what we do with it. It will change as the product changes, and we'll update this page when it does.

What EchoTrellis Collects

EchoTrellis is designed to collect only what it needs to run the product for you. Here's everything, organized by category:

Account and identity information. EchoTrellis uses Discord to sign you in. We do not have or ask for a password — signing in happens entirely through Discord's own login screen. Once you sign in, we store a small account record: your Discord user ID, your Discord display name at the time you last signed in, an internal EchoTrellis account ID we generate, and the display name you've chosen for EchoTrellis to call you (if any). We never receive or store your Discord password.

Workspace and Discord configuration information. When you connect a Discord server ("guild") to EchoTrellis, we store what we need to manage it: the Workspace's name and identifier, which EchoTrellis account owns it, the connected Discord server's ID, and the structural configuration you've designed or that EchoTrellis has observed — things like categories, channels, roles, and the permission rules between them, plus a record of what EchoTrellis has actually changed on Discord and when. This is configuration and structure, not content: EchoTrellis does not collect or store message text, direct messages, attachments, or a list of your server's members beyond the Discord IDs that are already visible to anyone with access to the server.

Preferences. The display name you'd like EchoTrellis to call you, stored against your account.

Entitlement and account-status information. Whether your account has been granted permanent "Free for Life" access to the EchoTrellis product, and whether it's been granted AI-feature access under a specific usage allowance — plus a small record of who granted it and when, for our own bookkeeping.

Essential security and session information. The cookies and short-lived security values described under "Cookies and Security Technologies" below.

AI usage and accounting information. See "AI Features" below — EchoTrellis has the underlying accounting in place, but does not yet make any calls to a third-party AI provider.

Bug-report information. See "Bug Reports" below.

Product-usage telemetry. See "Product-Usage Telemetry" below.

Technical and log information. Ordinary web server information such as your browser's user-agent string, and operational logs we keep to run and debug the service (for example, whether a sign-in attempt or an email delivery succeeded). We do not run any third-party analytics, advertising, or tracking service — no Google Analytics, no ad pixels, no session replay, nothing that shares your activity with an outside analytics vendor. The one first-party exception is the limited, private product-usage telemetry described below, which stays entirely on EchoTrellis's own infrastructure.

How We Use This Information

We use what we collect to:

• provide and operate EchoTrellis;
• authenticate you and keep your session secure;
• determine which Workspaces belong to which account, and keep them separate;
• connect to Discord and reflect your server's structure back to you accurately;
• let you preview and, once you approve, apply configuration changes to Discord;
• maintain account entitlements like Free-for-Life status;
• enforce AI feature access and usage allowances, once AI features exist;
• diagnose bugs you report to us;
• keep the service secure and operating correctly; and
• improve the product during this friend test.

We do not sell your data, use it for behavioral advertising, or build advertising profiles from it. We're a small private beta, not an ad business.

Discord

EchoTrellis's relationship with Discord happens in two separate ways:

Signing in. When you sign in with Discord, EchoTrellis asks Discord only to confirm who you are (Discord calls this the identify permission) — your Discord user ID and username. This never gives EchoTrellis access to your Discord messages, servers, or account settings.

Connecting a server. Separately, installing the EchoTrellis bot on a Discord server grants it only the specific Discord permissions a given change actually requires — never broad, standing access "just in case." You choose which server to connect, and you're responsible for having the authority to do so (see the Terms of Service).

EchoTrellis is an independent product built on Discord's platform. It is not operated, endorsed, or reviewed by Discord.

AI Features

EchoTrellis has built the account-level groundwork for AI features — whether your account has AI access, what usage allowance applies to it, and a ledger for tracking usage against that allowance. As of this policy, EchoTrellis does not yet make any calls to a third-party AI provider — no Workspace data, Discord data, or personal information is currently sent to one for AI processing. When real AI functionality is introduced, this policy will be updated first to describe exactly what's sent, to which provider, and why, and that functionality will remain subject to the access and usage-allowance rules already described in the Terms of Service.

Bug Reports

EchoTrellis includes an in-app "Report a bug" tool. When you use it, we automatically attach diagnostic context to help us investigate, in addition to what you type:

• a report ID, timestamp, and your account/Discord identity;
• your Free-for-Life and AI-access status;
• the page and tool you were using;
• the Workspace and connected Discord server, if any, you had open;
• the deployed version of EchoTrellis you were using;
• your browser's user-agent information; and
• whether you were using the hosted or a local copy of EchoTrellis.

A bug report never automatically includes your Discord message history, channel contents, a member list, passwords, cookies, authorization tokens, or any other credential or secret value — the tool is deliberately built so those can't be attached. Submitted reports are saved on EchoTrellis's own infrastructure and then emailed to our team at hello@echotrellis.com through Resend, a transactional email service, for review.

Product-Usage Telemetry

While EchoTrellis is in the friend-test phase, it records a limited set of product-usage events — things like "opened the Manual," "Preview succeeded," or "Apply failed" — so we can tell which parts of the product are actually being used, where a workflow gets abandoned, and where something goes wrong, without having to ask every tester what they clicked. This is first-party telemetry we built and run ourselves; it is never sent to an outside analytics company.

Each recorded event carries only a small, fixed set of information: which kind of event it was, when it happened, an internal account identifier (never your Discord ID), which Workspace it concerned (when relevant), a general category like which kind of resource was involved, whether the action succeeded or failed, and — for the deployed version of EchoTrellis you were using — a build identifier.

This telemetry never includes:

• Discord message content or channel history;
• passwords, the private-beta access code, or any Discord/API/OAuth token or secret;
• the actual name you gave a category, channel, or role;
• the text of a bug report or feedback submission — only that one was submitted, and whether it succeeded;
• your raw IP address or anything resembling a browser fingerprint; or
• a recording or replay of your session.

Telemetry events are kept for 90 days and then automatically deleted. They're visible only to us, through a private, internal view of the product that nobody outside the EchoTrellis team can reach. You can turn this off entirely for a self-hosted copy of EchoTrellis; the hosted friend-test instance runs it so we can support the friend test properly.

Cookies and Security Technologies

EchoTrellis uses a small number of essential cookies — nothing related to advertising or tracking:

• a private-beta access cookie, set once you enter the shared friend-test access code, so you're not asked for it again on every visit;
• a sign-in session cookie that keeps you logged in after you authenticate with Discord; and
• a short-lived cookie used only during the few seconds of the Discord sign-in process, to confirm a login attempt actually came from you.

Both are cryptographically signed so they can't be forged or tampered with, and neither is used to track you across other sites. EchoTrellis also uses standard anti-forgery tokens embedded in its own pages to make sure requests that change your data actually came from a page EchoTrellis served you.

Third-Party Services

Operating EchoTrellis relies on a small number of outside services. These are the ones that actually handle account or Workspace data as part of running the product:

• Discord — for sign-in and for connecting to your Discord server, as described above.
• Render — hosts the EchoTrellis application and the data described in this policy.
• Resend — delivers bug-report emails on our behalf to our own inbox.
• Cloudflare and Network Solutions — route and host the hello@echotrellis.com mailbox those emails arrive in.

Each of these services has its own privacy practices governing how it handles data on our behalf.

Data Retention

EchoTrellis is a private beta and doesn't yet have an automatic data-deletion schedule for most of what it stores. Account, Workspace, entitlement, and bug-report records persist on our infrastructure for as long as your account or Workspace exists, or until we no longer need them to operate the service. If you'd like your account or Workspace data deleted, contact us at hello@echotrellis.com and we'll handle it directly — this is a manual process during the friend-test period, not an automated one. The one exception is product-usage telemetry (see above), which is automatically deleted after 90 days.

Your Choices

• You can set or clear your preferred display name at any time from Preferences inside EchoTrellis.
• You can sign out at any time.
• You can review or revoke EchoTrellis's Discord authorization from your own Discord settings at any time.
• You can contact us at hello@echotrellis.com with any question or request about your data, including deletion.

Security

We use safeguards designed to protect your information — including signed sessions, access controls tied to your Discord identity, and keeping credentials like our Discord bot token server-side and out of source control. No online service can guarantee perfect security, and we don't claim one.

Children

EchoTrellis is built on Discord and follows Discord's own minimum age requirements. EchoTrellis is not directed at children, and we don't knowingly collect information from anyone below the minimum age Discord itself requires to hold an account.

Changes to This Policy

We'll update this page whenever what we collect or how we use it materially changes, and update the date at the top when we do. We'll do this especially before introducing any feature — like real AI processing — that changes what data leaves EchoTrellis.

Contact

Questions about this policy or your data: hello@echotrellis.com.