Privacy Policy
Effective date: November 8, 2026
Trellis runs on your computer. Your library and your listening stay there unless you join someone else's library or share your own.
What Trellis keeps centrally
It depends on how you use Trellis.
Local. If you never enter an access code or buy a license, we keep nothing about you. Each time it opens, the app checks for updates without identifying itself, and we count those checks by country. If you buy a license, we keep the license ID, the email it was issued to, the purchase date and the Trellis version at purchase. If you enter an access code, we keep the records listed under Member, except membership status.
Member. Membership runs through the Trellis Hub, our central service, which keeps:
- a random user ID, the display name you choose, your email address, and anything you wrote on the sign-up form
- for each computer you link: its platform, operating system version, Trellis version, and when it was last seen
- your membership status and dates, and any free membership we grant you, with our note on why
- whether you were invited to the library we host, and when you joined or were removed
- scrambled copies of your access codes, and which computer used each
- hosted Lomax: per run, the date, the kind of research, the model, tokens used, web searches, whether it succeeded, our estimated cost, and how many suggestions you accepted or dismissed. Responses that Lomax composes are stored in a cache and may be delivered to other members that request the same information. The cache does not record who made a request, and answers to questions you type are not cached. Your requests pass through to Anthropic, which keeps them and Lomax's answers for 30 days
- for beta testers: your tester category and the date we approved you
Website sign-up. If you sign up for updates or the beta, we keep your email, your name, anything you write about yourself, which boxes you ticked, and the status of your beta request.
In every case, the Hub never stores your music, your library, your listening or your API key. A hosted Lomax request carries the details of the recording or artist you asked about, and related entries from your library, to Anthropic through the Hub. The Hub keeps none of it.
What your Trellis installation keeps
Everything about your library lives on your computer, in a database you control:
- your recordings, their details, info files and your edits
- favorites, ratings, collections and play history
- Lomax research on your recordings and artists
- your settings, and your Anthropic API key if you add one, kept in your computer's secure credential store
We cannot see any of it. It stays on your computer until you delete it.
What a library host collects about you
If you join a library someone else hosts, including the one we host for members, that host's copy of Trellis keeps:
- a name for you, the name of your library as a label for each computer you join from, and a scrambled access token for each
- any note the host writes about you
- which tracks you play there, and when
- when you last connected
A host sees the name of your library and nothing in it, and nothing of what you play outside theirs.
We do not sell your information or use it for advertising.
Who we are
Trellis Music Library is made by Jacoenzo LLC, a California company, 438 W Grand Ave, Oakland, CA 94612. This policy covers the Trellis app, the website trellismusiclibrary.com, and the Trellis Hub.
Using Trellis without signing up
You can run every part of Trellis on your own computer without signing up. Your library database, your files and your settings stay on your computer. In that case the app reaches outside your computer only for these things:
- Update checks. Each time it opens, the app asks us whether a newer version exists. If you have not entered an access code, the request carries no ID; we count it by day and country and keep nothing else. A linked copy identifies its computer so it gets the right updates, and we note when that computer was last seen.
- Public music databases. When you look up an artist, album, photo or show, the app asks the source directly: MusicBrainz, Cover Art Archive, Wikidata, Wikimedia Commons and the Internet Archive. Each one receives the search (an artist name, for example) and your IP address, under its own privacy policy. Each request names Trellis and its version. We receive nothing.
- Lomax with your own key. If you add your own Anthropic API key, Lomax sends its research request from your computer straight to Anthropic. It never passes through us. The request holds the details of the recording or artist you asked about, such as names, dates, venue, info file text, track lists and notes, and other recordings by that artist in your library, plus any question you type. Anthropic handles it under its own terms.
Signing up on our website
The sign-up form asks for your email, your name and, optionally, a few words about yourself and your collection. You choose whether to request a place in the beta, to receive updates, or both. We send one email to confirm the address is yours. We use what you enter to review beta requests and to send the messages you asked for.
Linking the app
Entering an access code links your copy of Trellis to a Trellis user record. The app then asks for a display name. Each linked computer gets a random access token. We store only a scrambled (hashed) form of that token and of your access code, so neither can be read back from our records. A second computer links to the same user with its own code. While the app is open, a linked copy renews its membership status with the Hub every few hours.
Hosted Lomax
Members and beta testers can use Lomax without their own key. The request then goes from your computer, through the Trellis Hub, to Anthropic, and the answer comes back the same way. It carries the same details as a request made with your own key. The Hub keeps no copy of the request or the answer. Anthropic keeps both for 30 days to check for misuse of its service, then deletes them, and does not use them to train its models.
For each run, the Hub records the date, the kind of research, the model, tokens used, web searches, whether the run succeeded, our estimated cost, and how many of Lomax's suggestions you accepted or dismissed. These are tied to your user record and the computer that ran them. We use them for your monthly allowance and our costs.
One exception: when you ask Lomax for an artist's history without typing a question, we keep the biography Lomax writes. Other members then get that biography without a new run. It is built from public sources and contains nothing about you or your library, and we do not record who requested it.
Licenses and membership
For a license we store the license ID, the email it was issued to, the purchase date and the Trellis version at purchase. The license key is checked on your computer, offline. For membership we store its status and dates.
Members can join a shared library that we host. See the next section.
Listening to another library
You can join a Trellis library that someone else hosts, including the one we host for members. Joining gives that library's host a record of you: a name for you, the name of your library as a label for each computer you join from, a scrambled access token for each, and any note the host writes about you. While you listen, the host's copy of Trellis records:
- which tracks you play, and when
- the date and time you last connected
The host can review this, and can remove your access at any time. A library you join sees the name of your library and nothing in it, and nothing of your favorites or your listening outside theirs. Your library's stars stay on your computer.
For the library we host, we keep these records while you are a member and delete them when your access ends. Another host keeps them under their own practices, not ours.
If you share your own library, the people you invite see your display name, your library's name, your profile picture if you set one, the published recordings on its shelf, the details of each, and the recordings you have marked as favorites. They do not see your play history.
Beta testers
If you join the beta, we also store the tester category we assign you (Listener, Collector or Archivist) and the date we approved you. Test cases you mark as done in the Beta tab go to our issue tracker, Jira, run by Atlassian.
Problem reports you send from the Beta tab include your user ID, your computer's operating system and Trellis versions, what you write, and recent app logs. App logs can contain folder and file paths from your library, artist and recording names, and the addresses the app looked up. Reports are stored in our issue tracker, Jira, run by Atlassian.
Problem reports and test results in Jira are deleted 12 months after they are sent. Your tester category stays with your user record.
We send email from hello@trellismusiclibrary.com through Resend. Messages that confirm your address, answer a beta request or send a download link go to you because you asked for them. Update emails go only to people who ticked "Sign up for Updates", and each one has an Unsubscribe link.
Our emails record when they are opened and when a link in them is clicked. To do this, Resend adds a small image to each message and routes each link through links.trellismusiclibrary.com. Resend keeps that record, including the full link you clicked. Those links include the code or user ID that identifies you. Most email apps let you block images, which stops the open record.
Services we use
These companies handle data for us. Each sees only what its job needs.
| Service | What it does for Trellis | What it receives |
|---|---|---|
| Anthropic | Runs Lomax | Hosted Lomax requests and answers (details of the recording or artist, any question you type) and the web searches Lomax runs, kept 30 days |
| Resend | Sends our email | Your email address, the message, and open and click records |
| Cloudflare | Hosts the website and counts its visits, carries traffic to the Hub and to the library we host, forwards mail sent to us | Your IP address and the pages and addresses you request, as the network carrying them |
| GitHub | Stores the installers | Your IP address, when your browser downloads an installer from GitHub through a link we hand it |
| Atlassian (Jira) | Holds beta problem reports and test results | Problem reports and test results, your user ID, and the app logs attached to reports |
| Google (Gmail) | Receives the mail you send to hello@trellismusiclibrary.com | Your message and email address, under Google's own terms |
The Trellis Hub runs on a server we operate in the United States. If you join our Discord server, Discord's own privacy policy covers what you post there.
How long we keep data
| Data | How long |
|---|---|
| Sign-up never confirmed | Deleted after 30 days, unless an access code was issued to it |
| Beta request | Kept until we decide. If declined, deleted 90 days later, unless you also asked for updates |
| Update subscription | Until you unsubscribe or ask us to delete it |
| Confirm link | Expires after 48 hours; deleted once used or expired |
| Download link | Expires after 30 days; deleted once expired |
| A linked computer not seen for 12 months | Deleted, with its usage records |
| Hosted Lomax counts, per run | 90 days, then combined into monthly totals for that computer |
| Monthly totals per computer | 24 months, then combined into totals for all users, with nothing that identifies you |
| Listening in the library we host | While you are a member; deleted when your access ends |
| Beta problem reports and test results | 12 months after they are sent |
| Daily update-check counts | Kept, as counts by day and country |
| Artist biographies from Lomax | Kept, as public reference data |
| User record and profile | While you use Trellis, or until you ask us to delete it |
| License | While the license is valid, or until you ask us to delete it |
Our backups hold a copy of the Hub's records for about a week, so deleted data is gone from them within that time.
Cookies and tracking on our website
Our website sets no cookies and runs no advertising trackers. We count visits with cookieless analytics, currently Cloudflare Web Analytics: the page, the site you came from, your browser type, your country and how fast the page loaded. These counts are not used to identify you or to follow you across sites.
Because nothing on the site follows you to other sites, we do not change anything in response to a browser's Do Not Track signal.
Your choices and rights
- See your data. Ask us, and we will send you what the Hub holds about you.
- Correct it. You can change your display name in the app, or ask us to correct anything else.
- Delete it. Ask us, and we delete everything the Hub holds about you: your user record and profile, your linked computers, your license and membership records, your hosted Lomax records, and your record and listening history in the library we host. Totals already combined across all users identify no one and stay.
- Stop update emails. Use the Unsubscribe link in any update email.
- Stay unlinked. You can use Trellis without an access code, or without ever signing up.
Send requests to hello@trellismusiclibrary.com from the address we hold for you. We answer within 30 days. We do not treat you differently for using any of these rights.
Security
On the Hub, access tokens, access codes and email links are stored only in hashed form. The Hub's admin pages are reachable only from our own network. Our logs record errors without names, email addresses or request contents.
Children
Trellis is not meant for children under 13, and we do not knowingly collect information from them. If we learn that we hold information about a child under 13, we delete it.
People outside the United States
The Trellis Hub is in the United States, and data you send us is processed there. Anthropic, Resend, Cloudflare and Atlassian handle it under data protection agreements that use the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.
If you are in the European Economic Area or the United Kingdom
Jacoenzo LLC is the controller of your data. We rely on these legal bases:
- Your consent: update emails, and email open and click records. You can withdraw consent at any time.
- Our agreement with you: beta access, access codes, licenses, membership, hosted Lomax and access to the library we host.
- Our legitimate interests: preventing abuse, counting update checks, and tracking our costs.
You have the right to access, correct, delete, restrict or object to our use of your data, and to receive it in a portable form. You can complain to your local data protection authority, or in the UK to the Information Commissioner's Office. Trellis makes no automated decisions about you that have legal or similar effects.
Changes to this policy
We post every change here with a new effective date. Before a change that affects data we already hold, or that adds a new kind of data, we email registered users first.
Contact
Jacoenzo LLC, 438 W Grand Ave, Oakland, CA 94612
hello@trellismusiclibrary.com