Privacy policy.

Trestle provides the operating system for construction companies — estimating, budgeting, procurement, field, and finance in one connected system — with support based in Manila, Philippines. For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173), we act as the personal information controller for the information described in this policy.

This policy covers the Trestle website, the Trestle product and field app, the waitlist, the contact and booking forms, and support. It covers personal data you give us directly, personal data we observe as you use the service, and the project data your company enters into Trestle.

Where your company subscribes on its own behalf, that company is the controller for the project and personnel data it records, and we act as its processor under a data processing agreement.

To operate the service: sync your data across devices, keep records accurate, enforce the permissions your company sets, and keep the offline-first field app working where coverage drops.

To price your market correctly: detect your country so you see the right currency and price. This is not tied to an identity beyond your device.

To support you: onboarding, training, troubleshooting, and account administration, inside Philippine business hours.

To secure the service: detect abuse, fraud, and unauthorized access.

To comply with the law: tax, accounting, and regulatory obligations that apply to us or to your use of the service.

To improve the product: understand aggregate usage patterns and fix problems. Where possible, we aggregate and de-identify data used for this.

We process personal data under the bases recognized by the Data Privacy Act: your consent, where we ask for it; performance of a contract, to deliver the service you or your company signed up for; our legitimate interests, such as security, fraud prevention, and product improvement; and compliance with legal obligations.

You may withdraw consent at any time without affecting the lawfulness of processing that happened before withdrawal. Withdrawing consent may limit features that depend on the data (for example, geo-detected pricing).

We share personal data only with service providers who need it to run the service — hosting, storage, payment processing, and support — each bound by contract to protect it and to use it only for the purposes we specify.

We do not sell personal data. We do not rent it, and we do not share it for third-party advertising.

We may disclose personal data where required by law or a lawful request from an authority, or in the course of a merger, acquisition, or similar transaction — in which case we will give affected users reasonable notice where practicable.

Project data belongs to your company. It is disclosed to third parties only on your instructions or as your company's settings direct.

To run the service reliably, data may be stored or processed outside the Philippines. When data moves across borders, we apply contractual and technical safeguards consistent with the Data Privacy Act and the guidance of the National Privacy Commission.

Where you pay online, our payment processors handle the transaction under their own privacy policies, which apply to their handling of your payment data.

We keep your data while your account is active and for a reasonable period afterward to meet tax, accounting, and audit obligations under Philippine law, then we delete or anonymize it.

Your company's project data is kept for as long as the account is active and deleted on cancellation as described in the Terms of Service. You can export it in full at any time, and export on exit is free.

We use measures appropriate to the data we hold: encryption in transit (TLS) and at rest, access controls and role-based permissions, audit logging, and secure handling of the devices and credentials used to sync offline-first data.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affects your data, we will notify you and the National Privacy Commission as the law requires.

Under the Data Privacy Act, you have the right to:

• Be informed — a clear explanation of how your data is handled (this policy).
• Access — a copy of the personal data we hold about you.
• Correction — rectification of inaccurate or incomplete data.
• Erasure or blocking — removal or blocking of data that is no longer necessary or was processed unlawfully.
• Object to processing — in certain circumstances, to object to processing based on legitimate interest or direct marketing.
• Data portability — to receive your data in a structured, commonly used format, where technically feasible.
• Damages — to seek compensation for unlawful processing.

To exercise any of these rights, email privacy@trestle.ph. We will respond within the period the Data Privacy Act requires — one month as a rule — and may ask you to verify your identity. You may also lodge a complaint with the National Privacy Commission.

We use essential cookies to keep the site and the app working, and minimal analytics to understand how the site is used. You can control cookies through your browser settings; disabling them may affect parts of the site.

The service is directed at businesses and is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact privacy@trestle.ph and we will delete it.

We may update this policy as the service and the law evolve. Material changes will be posted here with a revised effective date, and where we have your email we will notify you before the change takes effect. Continued use after a change means you accept the updated policy.

You may file a complaint with the National Privacy Commission.

National Privacy Commission — privacy.gov.ph