TrannoBook · Privacy · Terms
Privacy
TrannoBook, run by Tranno Robotics Inc. (operating as Tranno), files the receipts, photos and documents a contractor texts to us into the contractor's own Google Drive and Sheet.
What we keep, and where
On our servers (Canada or the US): your business name, your phone number and your crew's, the connection to your Drive (encrypted), any website logins you chose to save (encrypted, see below), and short-lived technical records (message IDs, open questions about a receipt, for at most 7 days). We keep no copies of your files, amounts, client names or addresses: those stay in your own Google Drive and Sheet. The one exception is job photos you tap Post for: we keep the blurred copies that go public, until you text "take my photos down" or "delete everything".
Your Google account
When you sign in with Google we ask for these permissions, and no others. Drive (drive.file): we create and read only the folders, files and Sheet this app made for you, plus any file you pick for it; we never see the rest of your Drive. Drive app storage (drive.appdata): a hidden space inside your own Drive, where we keep the record of your chats with the assistant so it remembers what you told it; it never shows in your Drive, and Google removes it when you remove the app. Gmail (gmail.send) and your email address, only if you connect Gmail: we send the emails you approve, from your own address, so they sit in your Sent folder; each one is shown to you first and goes only after you tap Send; the address is used only to tell you which account sends. We never read, search or change your mail. The sign-in token is stored encrypted and is deleted when you text "disconnect gmail" or "delete everything", or remove the app at myaccount.google.com/permissions. We use Google data only to provide these features to you: never for ads, never sold, never shared beyond the providers listed below, and never to develop or train AI models. How the AI that answers you sees this data, and the rule that it never trains on it, is set out under "AI, and your Google data" below. The use of raw or derived user data received from Google Workspace APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
AI, and your Google data
An AI model reads what you send us so the assistant can understand and answer you: your messages, a receipt, photo or document you text, and, when you ask about your books, the rows of the Sheet and the files this app made in your Drive, and the record of your past chats kept in the hidden Drive app storage. Voice notes are turned into text by a speech-to-text AI, which gets the audio and nothing else. A second, independent AI check reads the message in question before anything goes out to a client. These are third-party AI services, used through their business APIs under terms that forbid them to use what we send to train or improve their models; they may hold it briefly for abuse monitoring under their own policy (within 30 days) and then delete it. We call each provider directly, not through an AI gateway, aggregator or model hub; we run no self-hosted or offline models; and we never use your data, or anyone's, to build, train or improve an AI model of our own. Google user data in particular is never transferred to any AI service that would train on it, never sold, and used only to answer you and keep your books, as the Limited Use requirements demand. We name the providers to you on request, and in the table below by their role.
How we protect it
Sensitive data never rests with us. Receipts, contracts, invoices and what is read from them (amounts, vendors, client names, addresses) are written straight into your own Google Drive and Sheet; any temporary copy on our server is deleted as soon as it is filed, and the copy WhatsApp holds is deleted after we download it. In transit: every connection, to you, to Google, to the AI providers, to WhatsApp, is encrypted (TLS); WhatsApp messages are end-to-end encrypted between your phone and WhatsApp. At rest: your Google and Facebook connection tokens and any website logins you save are encrypted with AES-256-GCM, with the key held in Google Secret Manager and never in our code or database; the database itself is encrypted at rest by its host. Access: only the operator's own accounts, protected by 2-step verification, can reach the servers and the database; the AI never sees a saved password; crew members never see money or client details. Logs: our logs never contain file contents, amounts, names, addresses, message text or phone numbers; a number appears only as a one-way hash. Minimum access: we ask Google only for the files this app made (drive.file), its hidden app storage (drive.appdata) and, if you connect Gmail, sending (gmail.send); never your whole Drive or your mail. Retention and deletion: what little we keep is listed above with its lifetime; "delete everything" erases it and revokes our access. If something goes wrong: should we learn of a breach that puts your data at risk, we tell you and the privacy authorities the law requires without undue delay, and say what happened and what to do.
Facebook and Instagram, only if you connect them
When you connect your Facebook Page we ask for five permissions and no others: to see the list of Pages you manage, to read your own Page and the Instagram account linked to it, to post photos to that Page, and to post photos to that Instagram account. We keep three things: the Page's access token (encrypted), the Page's id and the Instagram account's id. We keep nothing else from Facebook or Instagram: no followers, no messages, no comments, no insights. A photo is posted only after you tap Post for it in the chat. To delete this data, text "delete everything" (the token and ids are erased with your account) or remove Tranno under Settings → Business integrations on Facebook; either way we can no longer post for you from that moment.
Website logins you save
If you want the assistant to do something on a website for you (your supplier, your phone company, the city's permit page), you can save that site's login on a one-time page we send you, never in the chat. It is stored encrypted on our servers. The assistant's AI never sees the password: our software types it, only on that exact site and only when you ask for something there, and nothing is sent, booked or paid without your tap. Say "forget my Bell login" to remove one; "delete everything" removes them all.
Who processes it
| Who | What for | Where |
|---|---|---|
| your Drive and Sheet, your Business Profile (if connected: reviews, and the job photos you tap Post for), voice notes to text, hosting and logs; checking photos you choose to post for faces, plates and house numbers (Cloud Vision) and keeping the posted copies (Cloud Storage) | Canada and US | |
| Supabase | our database: your business name, address, email and licence number, phone numbers, plan status, your QuickBooks receipt address, the Gmail address you send from, and the encrypted Google and Facebook connections | US |
| AI model provider | reads receipts, files you ask about and your messages | US |
| AI verification provider | second check before a message goes to a client | US |
| Meta (WhatsApp) | carries the messages | US and other countries |
| Meta (Facebook, Instagram) | posting the job photos you tap Post for, if you connect them | US and other countries |
| Google (Gmail) | sends the emails you approve from your own Gmail (to your clients, and receipts to your QuickBooks); the copies stay in your Sent folder | US and other countries |
| Google (Maps Platform) | looks up your job addresses for the weather there and the driving time between jobs (we don't keep the results) | US and other countries |
| Intuit (QuickBooks) | receives the receipts you choose to forward there and, if you connect your QuickBooks, the costs we post into it for you (vendor, amount, tax, job, receipt image) | US and Canada |
Our servers and some of these providers may be in the US or other countries outside Canada, where data can be accessed by courts, law enforcement and national security authorities under that country's laws.
How long
Until you text "delete everything". Technical records go sooner (message IDs 7 days, anonymous usage counts 730 days). If a client texted STOP, we keep a scrambled copy of their number so they are never texted again.
Your choices
Text "send me my data" for a copy, or "delete everything" to erase what we keep and disconnect. Your Drive files and Sheet are yours; we never delete them. Disconnecting stops our access from then on; it doesn't undo what was already filed or sent.
Statistics
We may make de-identified statistics from many contractors' use (never naming a person, business or address; areas no finer than a ZIP5 or the first three characters of a postal code; only from groups of at least five contractors). We keep such data de-identified, publicly commit not to re-identify it, and contractually require anyone who receives it not to either.
California residents
If you live in California, you have the right to know what personal information we collect and how we use it (this notice), to get a copy, to have it corrected or deleted, and not to be treated differently for using these rights. We do not sell or share personal information for cross-context advertising, and we don't use sensitive personal information for anything beyond providing the service. For your contractor's clients, the contractor decides; we act as their service provider. To use a right, text "send me my data" or "delete everything", or contact info@gotranno.com. You may use an authorized agent; we may need to verify the request comes from you.
Contact
info@gotranno.com. If you're not satisfied, you can contact the Office of the Privacy Commissioner of Canada (priv.gc.ca), or in California the California Privacy Protection Agency (cppa.ca.gov).
Version 2026-10-26; wording updated 2026-10-31 (the "AI, and your Google data" and "How we protect it" sections were added; nothing new is collected).