Security
How Trove handles your data — where it lives, who can see it, and how to remove it. Only what's true today; if something isn't listed here, assume we haven't made that guarantee yet.
Where your data is stored
Your account, chats, Tros, projects, artifacts, and uploads are stored in Trove's database (hosted SQLite via Turso). Published websites are served from Trove's hosting. There is no self-hosting option today.
Which model providers see your prompts
To generate replies, your prompts and relevant context are sent to the model providers Trove uses (currently Apertis and OpenRouter, serving models including Gemma). Providers process your input to produce output; their own data-handling terms apply to that processing.
Training use
Trove does not sell your data. We don't make broad claims about provider training policies here — check the provider's own terms if that matters for your use case, and avoid pasting anything you couldn't share with a third-party processor.
Your account hygiene
- Use a strong, unique password and keep your recovery email current
- Sign out on shared devices
- Only grant team access to people you trust
- Never paste API keys or credentials into prompts or chat
Cloud computer
A Tro's cloud computer is a remote browser session it drives on your behalf — for research, booking flows, and interacting with websites. Here's what that does and doesn't protect:
- Sessions run on Trove's infrastructure, not on your device — sites see the cloud browser's network identity, not yours.
- We don't guarantee isolation between your sessions and other users' sessions at the network level today. Treat the cloud browser as a shared-resource convenience, not a hardened sandbox.
- Anything the Tro types or submits in the browser — logins, forms, payment details — is visible to the Tro and passes through Trove's servers. Use test or non-production accounts for third-party logins, and never enter credentials you wouldn't hand to a contractor.
- The Tro asks for your explicit confirmation before consequential actions (purchases, bookings, submissions).
Retention and deletion
- Chats, artifacts, and uploads persist until you delete them — use the in-app delete controls on the item.
- Deleting your account removes your workspace data. If you need a full export or deletion handled manually, contact us below.
Report a security issue
Email official@troveai.site with "Security report" in the subject. Include what you found and how to reproduce it; please don't probe other users' data.
Related: Credits & plans · Quickstart