Trybely Privacy Policy

Effective date: October 1, 2026
Last updated: October 1, 2026

This Privacy Policy explains how SoftPro Solution, doing business as Trybely ("Trybely", "we", "us"), collects, uses, shares and protects personal information when you use the Trybely website at trybely.com, the Trybely apps for iPhone and Android, and related services, including Aurex, our AI business assistant (together, the "Services").

If you have questions about this Policy or your information, call us at 774-415-0001 or write to us at 64 Arnold Street, New Bedford, Massachusetts.

1. Who this policy covers

• Members — people who create a personal Trybely account.
• Business accounts — merchants and service businesses that use Trybely for point of sale (POS), inventory, staff, bookings, invoicing, accounting (ERP) and marketing, and the staff they invite.
• Visitors — people who browse trybely.com or sign up for our newsletter.

When a business uses Trybely to record information about its own customers or employees (for example a customer's name on a receipt, a loyalty member, or an employee's timesheet), that business decides why and how that information is used and is responsible for it. Trybely processes that information on the business's behalf and only to provide the Services. Please contact the business directly about those records.

2. Information we collect

Information you give us

• Account information: name, email address, password (stored only as a one-way hash), phone number, profile photo, business name, address and profile text.
• Sign in with Google or Facebook: if you choose it, we receive your name, email address and profile photo from that provider. We do not receive your provider password.
• Business and POS/ERP data: products, prices, inventory, barcodes, sales and receipts, refunds, customers and loyalty members, suppliers and purchase orders, invoices, expenses, ledger and tax records, bookings and appointments, staff profiles, roles, PINs (stored hashed) and time-clock records.
• Payments: subscription and checkout payments are processed by Stripe. Card numbers are entered into Stripe and are not stored by Trybely. We receive and keep payment status, amounts, the card brand and last four digits, and Stripe customer and subscription identifiers. Charges from Trybely appear on your card statement as TRYBELY.
• Content you create or upload: posts, comments, stories, messages, documents, receipts and item photos.
• Messages to Aurex: questions and instructions you type or dictate to the AI assistant, and files you ask it to read.
• Support requests and communications you send us.
• Newsletter: your email address, the sign-up source and the time you subscribed.

Information collected when you use the Services

• Camera and photos (only when you use those features): the camera is used to scan barcodes and to take item or receipt photos. Barcode scanning is processed on your device; only the decoded code is sent to Trybely. Photos you choose to save or upload are stored with your account. You can choose photos from your library; we only receive the photos you select.
• Microphone (only when you turn on voice): used for voice commands and dictation. Speech is converted to text by your device's or browser's built-in speech recognition (which, depending on your device and browser, may be processed by its maker, such as Apple or Google). Trybely does not receive or store your voice recordings; we receive only the resulting text.
• Push notifications (only if you allow them): a device or browser push token so we can send notifications you asked for (for example order or low-stock alerts). You can turn notifications off at any time in your device or browser settings.
• Usage and diagnostics: pages and features used, sign-in events, error and crash reports from the app (for example the error message, page and browser/app version), and server logs that include IP address, device and browser type and timestamps.
• Cookies and local storage: see Section 7.

We do not collect precise location, contacts, calendar, SMS or health data, and we do not use third-party advertising or cross-app tracking SDKs.

3. How we use information

• To provide, operate and secure the Services: create your account, sign you in, run POS and ERP features, sync your data across devices, and process payments and subscriptions.
• To power Aurex and other AI features (see Section 4).
• To send service messages (receipts, security notices, changes to the Services) and, if you subscribed, our newsletter. You can unsubscribe from the newsletter at any time.
• To provide support, prevent fraud and abuse, enforce our Terms, and keep the Services reliable (including error monitoring).
• To understand how the Services are used in aggregate and improve them.
• To comply with law, including tax and accounting record-keeping.

Legal bases (for users in the EEA/UK): performance of our contract with you; our legitimate interests in operating, securing and improving the Services; your consent (for example push notifications, camera/microphone access and the newsletter), which you can withdraw at any time; and compliance with legal obligations.

4. AI features (Aurex)

When you use Aurex or other AI features (for example asking a question, summarising a document, suggesting product details from a photo), the text of your request, the relevant business data needed to answer it, and any file or image you submit may be sent to an AI model provider to generate the response. We currently use Google Gemini, Groq, OpenRouter and Hugging Face for this. Requests are sent from our servers through our AI gateway, never directly from your device.

• We send only what is needed to answer the request.
• We use these providers through their business API services, not their consumer apps. Each provider processes requests under its own API terms and privacy policy and may keep request data for a limited time, for example for abuse monitoring. We do not share your information with them for advertising.
• AI output can be wrong. Check important results (for example tax, payroll or pricing figures) before relying on them.
• Do not submit sensitive personal information (such as health information or government ID numbers) to AI features unless it is necessary.

5. How we share information

We do not sell your personal information and we do not share it for cross-context behavioural advertising.

We share information only:

• With service providers that process it for us under contract: hosting and infrastructure (DigitalOcean), database and authentication services (Supabase), payments (Stripe), AI model providers (Section 4), push-notification services (Apple Push Notification service, Google Firebase Cloud Messaging, web-push services), email delivery providers, and sign-in providers you choose (Google, Facebook).
• Within a business account: information you enter in a business workspace is visible to that business's owner and to staff they authorise.
• With other users, when you choose: for example posts, reviews or a public business listing.
• For legal reasons: to comply with law or valid legal process, to protect the rights, property or safety of Trybely, our users or others, and to enforce our Terms.
• In a business transfer: if Trybely is involved in a merger, acquisition or sale of assets, subject to this Policy.

6. How long we keep information

• Account and profile data: while your account is active. When you delete your account, we erase or anonymise it immediately (see Section 8).
• Financial, tax and accounting records (sales, invoices, payments, payouts, ledger entries): kept for as long as the law requires (generally up to 7 years), but detached from your name, email and phone number after account deletion.
• Logs and diagnostics: kept for up to 90 days, then deleted on rotation.
• Backups: deleted data may remain in backups for up to 30 days before being overwritten.

7. Cookies and similar technologies

• Essential session cookie: a secure, HTTP-only cookie that keeps you signed in and protects against cross-site request forgery. It lasts up to 7 days.
• Local storage on your device or browser: your sign-in token, app preferences (such as theme and layout), and offline POS data (for example a cached product catalogue and queued sales) so the register keeps working without a connection. Signing out clears your sign-in data; deleting your account clears all of it on that device.
• Fonts: some pages load fonts from Google Fonts, which receives your IP address and browser information.
• We do not use advertising cookies or third-party analytics cookies. If that changes, we will update this Policy and ask for consent where required.

8. Your choices and rights

• Access and correct: you can view and edit your profile in Settings → Account Settings.
• Delete your account: in Settings → Account Settings → Delete my account, or by following the steps at https://trybely.com/delete-account/. This erases or anonymises your personal data, signs you out and cancels active subscriptions. Records we must keep by law are retained without your personal details.
• Newsletter: use the unsubscribe link in any newsletter or call us.
• Permissions: you can turn camera, microphone, photo and notification access on or off at any time in your device settings.
• Depending on where you live (for example the EEA, UK, California and other US states), you may have the right to access, correct, delete or port your personal information, to object to or restrict certain processing, to withdraw consent, and to not be discriminated against for exercising these rights. To make a request, call us at 774-415-0001 or write to us at the address in Section 13. We will verify your request using the details on your account. You may also complain to your local data protection authority.

9. Security

We protect information with encryption in transit (HTTPS), hashed passwords and PINs, role-based access controls, server-side sign-out, and monitoring. No system is perfectly secure; please use a strong, unique password and call us right away at 774-415-0001 if you suspect unauthorised access.

10. Children

The Services are intended for businesses and adults. You must be at least 18 years old to create an account, the Services are not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, call us and we will delete it.

11. International transfers

Our servers are located in the United States. We and our service providers may process information in the United States and other countries where those providers operate. Where required, we use appropriate safeguards such as Standard Contractual Clauses.

12. Changes to this Policy

We may update this Policy. If changes are material, we will notify you in the app or by email before they take effect. The "Last updated" date shows when it last changed.

13. Contact

SoftPro Solution, doing business as Trybely
64 Arnold Street, New Bedford, Massachusetts
Phone (privacy questions and requests): 774-415-0001
Website: trybely.com