Skip to content

Anonymity isn't a feature.
It's the foundation.

This page explains exactly how Trateum protects employee privacy and what data we collect (and don't collect).

How We Protect Employees

No PII stored with responses

When an employee responds to a survey, their answer is immediately separated from any personally identifiable information. We store the phone number for SMS delivery, but we never link survey responses to phone numbers in our database.

survey_responses:
  - response_id: "abc123"
    team_id: "team_xyz"
    question: "workload"
    score: 2
    timestamp: "2026-01-19T10:30:00Z"
    # No phone number, no employee name, no identifiers

Team minimums before reporting

We never show results for teams smaller than 5 active respondents. If fewer than 5 people respond in a given period, managers see "Insufficient responses for anonymity" instead of data. This prevents reverse-engineering individual responses.

Responses aggregated before storage

Survey responses are aggregated into team-level averages and trends in real-time. Individual responses are not stored long-term. Managers see "Your team's average workload score dropped from 3.8 to 2.1 this week," not "Employee X said 2."

What We Collect

Here's the complete list of data Trateum collects. This is exhaustive - if it's not on this list, we don't collect it.

  • Phone number

    +1-555-123-4567

    Used exclusively for SMS delivery. Stored separately from survey responses. Never sold or shared with third parties.

  • Survey responses

    workload: 2, autonomy: 4, recognition: 3, purpose: 4

    Numeric scores (1-5 scale) for the four burnout indicators. Stored without any link to phone numbers or employee identifiers.

  • Timestamps

    2026-01-19T10:30:00Z

    When surveys were sent and when responses were received. Used for trend analysis and alert timing. Not linked to individuals.

  • Team affiliation

    team_id: "engineering-backend"

    Which team an employee belongs to (e.g., "Engineering - Backend", "Sales - West"). Required to show team-level aggregated results to managers.

What We Don't Collect

These are common data points that many employee survey tools collect. Trateum does not collect any of these.

Names

Employee first name, last name, or full name

Email addresses

Work email or personal email

Device IDs

IMEI, phone serial number, or device fingerprints

Location data

GPS coordinates, city, state, or country

Browsing history

Websites visited, search queries, or cookies

IP addresses

Public or private IP addresses, network information

Job title or role

Position, department, or seniority level of employees

Salary information

Compensation, bonus data, or financial records

Demographic data

Age, gender, race, ethnicity, or other personal attributes

Social media profiles

LinkedIn, Twitter, or other social accounts

Voice recordings

Audio, transcripts, or voice analysis data

Legal Compliance

GDPR Compliance (EU)

Trateum complies with the General Data Protection Regulation (GDPR) for European users:

  • Right to access: Employees can request all data we have about them (their phone number and team affiliation - we don't have individual survey responses)
  • Right to deletion: Employees can request deletion of their phone number at any time
  • Data portability: We provide data exports in machine-readable JSON format
  • Lawful basis: We process data based on legitimate interest (employee wellbeing) with explicit consent from the employer

CCPA Compliance (California)

Trateum complies with the California Consumer Privacy Act (CCPA):

  • Right to know: California residents can request what personal information we collect and how we use it
  • Right to delete: California residents can request deletion of their personal information
  • Right to opt-out: We do not sell personal information, so there is nothing to opt out of
  • No discrimination: We do not discriminate against users who exercise their CCPA rights

Data Security

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). We use industry-standard security practices and are pursuing SOC 2 Type II certification. Our infrastructure is hosted on AWS with multi-region redundancy and automated backups.

Privacy Questions?

We take employee privacy seriously. If you have questions about how Trateum handles data, or if you want to exercise your data rights (access, deletion, portability), contact us:

Last updated: January 19, 2026
We'll notify you via email if we make material changes to this privacy policy.