Privacy Policy

Last updated: June 24, 2026

Trilogy Banking ("Trilogy Banking," "we," "us," or "our") provides a financial budgeting, performance tracking, and board reporting platform for community banks. This Privacy Policy explains how we collect, use, and safeguard information when a bank client and its authorized users access our platform, and when visitors interact with our marketing website.

By using our platform or website, you agree to the practices described in this policy. If you do not agree, please do not use our services.

1. Information We Collect

We collect information in the following ways:

• Account information: name, work email address, role, and bank affiliation provided when a user account is created.
• Bank financial data: budget figures, actuals, chart of accounts, FFIEC peer data, and incentive compensation data that a bank client uploads or enters into the platform.
• Usage data: log-in activity, pages visited within the platform, and actions taken (for audit trail and security purposes).
• Contact form submissions: name, email, bank name, and message content submitted through our website's contact or demo request forms.
• Technical data: IP address, browser type, and device information collected automatically for security and performance monitoring.

2. How We Use Information

We use the information we collect to:

• Provide, operate, and maintain the Trilogy Banking platform for our bank clients
• Authenticate users and enforce role-based access controls
• Respond to support requests, contact form submissions, and demo requests
• Monitor platform security and investigate suspicious activity
• Improve our platform's features and reliability
• Communicate important updates about the service, including planned maintenance or security notices

We do not sell bank financial data or user information to third parties, and we do not use bank client data to train external models or for any purpose outside of providing the platform to that client.

3. Data Security

We apply administrative, technical, and physical safeguards designed to protect information against unauthorized access, alteration, or disclosure, including:

• Role-based access controls (site_admin, bank_admin, bank_user) that limit what each user can view or change
• Encrypted connections (HTTPS/TLS) for all data transmitted to and from the platform
• Multi-factor authentication (MFA) available for user accounts
• Audit trails that log access to sensitive financial and compensation data
• Regular review of account access and prompt deactivation of accounts no longer in use

No system can guarantee absolute security. If we become aware of a security incident affecting your data, we will notify affected bank clients in accordance with applicable law.

4. Data Sharing & Disclosure

We do not share bank financial data or personal information with third parties except in the following limited circumstances:

• Service providers: infrastructure and hosting providers who process data on our behalf under confidentiality obligations
• Legal requirements: if required to do so by law, subpoena, or other legal process
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to continued protection under this policy or one materially similar
• With your consent: any other disclosure will only occur with the explicit consent of the affected bank client

5. Data Retention

We retain bank financial data and account information for as long as a bank client maintains an active subscription, plus a reasonable period afterward to comply with legal, accounting, or audit-trail obligations. Upon written request following contract termination, we will work with the bank to export or delete their data in accordance with the terms of their service agreement.

6. Your Rights & Choices

Depending on your role and applicable law, you may have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate account information
• Request deletion of your individual user account (subject to your bank's administrative controls and recordkeeping obligations)
• Opt out of non-essential marketing communications

To exercise these rights, contact us using the information in Section 9 below, or speak with your bank's site administrator if your request concerns access controls within the platform.

7. Cookies & Tracking

Our marketing website uses minimal cookies necessary for basic site functionality. We do not use third-party advertising trackers or sell visitor data to advertising networks. The platform itself uses session cookies required for authentication and maintaining your logged-in state; these are essential to the service and cannot be disabled while remaining logged in.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will update the "Last updated" date at the top of this page when changes are made. Material changes affecting bank clients will be communicated directly.

9. Contact Us

If you have questions about this Privacy Policy or how we handle your information, please contact us at:

Trilogy Banking
Email: privacy@trilogybanking.com
Or visit our Contact page.