This Privacy Policy explains how Trinovix W.L.L., Kingdom of Bahrain (“Trinovix”, “we”, “us”), collects, uses, and protects personal data in connection with Obligo, our compliance management software platform (the “Service”).
By using the Service, you acknowledge this Privacy Policy.
1. Who We Are
Obligo is operated by:
Trinovix W.L.L.
Kingdom of Bahrain
Trinovix acts as:
- Data Controller for account-level data
- Data Processor for company and client data entered by users
2. Information We Collect
We collect the following categories of information:
A. Account Information
- Name
- Email address
- Organization name
- Billing information
- Subscription plan details
B. Usage Data
- Login activity
- Feature usage
- System interaction logs
- Device/browser metadata
C. Company & Client Data (User-Provided)
- Company names and registration numbers
- Compliance deadlines
- Employee-related compliance data
- Uploaded documents
- Notes and communications
This data is entered by users and processed solely to provide the Service.
D. Payment Information
Payments may be processed by third-party payment providers. We do not store full payment card details.
3. How We Use Information
We use collected information to:
- Provide and operate the Service
- Manage subscriptions and billing
- Generate compliance reports
- Send reminder emails
- Improve platform functionality
- Maintain system security
- Respond to support requests
We do not sell personal data.
4. Legal Basis for Processing
Where applicable, we process data based on:
- Contractual necessity (to provide the Service)
- Legitimate business interests (service improvement, security)
- Legal obligations (if required by law)
- User consent (where required)
5. Data Sharing
We may share data only with:
- Cloud hosting providers
- Email service providers
- Payment processors
- Analytics providers (if enabled)
All service providers are contractually required to safeguard data.
We do not sell or rent user data.
6. Document Vault & Stored Data
Documents uploaded to Obligo are stored securely in our cloud infrastructure.
Users remain responsible for:
- Determining what documents to upload
- Compliance with applicable retention laws
- Maintaining independent backups if required
We process documents solely to provide storage and access functionality.
7. Client Portal Data
Where users enable client read-only portals:
- Users control what client data is visible
- Obligo acts as a processor
- Users are responsible for client consent and data accuracy
8. Data Retention
We retain data:
- For the duration of an active subscription
- For a limited period after termination for operational or legal purposes
After retention periods expire, data may be deleted or anonymized.
9. Security Measures
We implement reasonable technical and organizational safeguards including:
- Encrypted connections (HTTPS)
- Access controls
- Role-based permissions
- Secure hosting infrastructure
No system can guarantee absolute security.
Users are responsible for protecting login credentials.
10. International Data Transfers
Data may be processed in secure cloud infrastructure located outside Bahrain.
Where required, we implement appropriate safeguards for cross-border data transfers.
11. Cookies & Tracking Technologies
Obligo uses cookies and similar technologies for:
Essential Cookies
- Authentication
- Session management
- Security
These are required for the Service to function.
Analytics Cookies (if enabled)
We may use analytics tools to understand usage patterns and improve performance.
These cookies may collect:
- Anonymous usage metrics
- Browser/device information
Users may manage non-essential cookies via browser settings or cookie preferences (if implemented).
We do not use cookies for advertising resale.
12. User Rights
Subject to applicable law, users may request:
- Access to their personal data
- Correction of inaccurate data
- Deletion of personal data
- Restriction of processing
- Data portability
Requests can be submitted to:
13. Data Breach Response
In the event of a data security incident, we will:
- Investigate promptly
- Take corrective action
- Notify affected users where required by law
14. Children's Data
The Service is not intended for individuals under 18 years of age.
We do not knowingly collect data from minors.
15. Changes to This Policy
We may update this Privacy Policy from time to time.
Continued use of the Service after changes constitutes acceptance.
16. Contact Us
Trinovix W.L.L.
Kingdom of Bahrain
info@obligopro.comThis Privacy Policy explains how Trinovix W.L.L., Kingdom of Bahrain (“Trinovix”, “we”, “us”), collects, uses, and protects personal data in connection with Obligo, our compliance management software platform (the “Service”).
By using the Service, you acknowledge this Privacy Policy.
1. Who We Are
Obligo is operated by:
Trinovix W.L.L.
Kingdom of Bahrain
Trinovix acts as:
- Data Controller for account-level data
- Data Processor for company and client data entered by users
2. Information We Collect
We collect the following categories of information:
A. Account Information
- Name
- Email address
- Organization name
- Billing information
- Subscription plan details
B. Usage Data
- Login activity
- Feature usage
- System interaction logs
- Device/browser metadata
C. Company & Client Data (User-Provided)
- Company names and registration numbers
- Compliance deadlines
- Employee-related compliance data
- Uploaded documents
- Notes and communications
This data is entered by users and processed solely to provide the Service.
D. Payment Information
Payments may be processed by third-party payment providers. We do not store full payment card details.
3. How We Use Information
We use collected information to:
- Provide and operate the Service
- Manage subscriptions and billing
- Generate compliance reports
- Send reminder emails
- Improve platform functionality
- Maintain system security
- Respond to support requests
We do not sell personal data.
4. Legal Basis for Processing
Where applicable, we process data based on:
- Contractual necessity (to provide the Service)
- Legitimate business interests (service improvement, security)
- Legal obligations (if required by law)
- User consent (where required)
5. Data Sharing
We may share data only with:
- Cloud hosting providers
- Email service providers
- Payment processors
- Analytics providers (if enabled)
All service providers are contractually required to safeguard data.
We do not sell or rent user data.
6. Document Vault & Stored Data
Documents uploaded to Obligo are stored securely in our cloud infrastructure.
Users remain responsible for:
- Determining what documents to upload
- Compliance with applicable retention laws
- Maintaining independent backups if required
We process documents solely to provide storage and access functionality.
7. Client Portal Data
Where users enable client read-only portals:
- Users control what client data is visible
- Obligo acts as a processor
- Users are responsible for client consent and data accuracy
8. Data Retention
We retain data:
- For the duration of an active subscription
- For a limited period after termination for operational or legal purposes
After retention periods expire, data may be deleted or anonymized.
9. Security Measures
We implement reasonable technical and organizational safeguards including:
- Encrypted connections (HTTPS)
- Access controls
- Role-based permissions
- Secure hosting infrastructure
No system can guarantee absolute security.
Users are responsible for protecting login credentials.
10. International Data Transfers
Data may be processed in secure cloud infrastructure located outside Bahrain.
Where required, we implement appropriate safeguards for cross-border data transfers.
11. Cookies & Tracking Technologies
Obligo uses cookies and similar technologies for:
Essential Cookies
- Authentication
- Session management
- Security
These are required for the Service to function.
Analytics Cookies (if enabled)
We may use analytics tools to understand usage patterns and improve performance.
These cookies may collect:
- Anonymous usage metrics
- Browser/device information
Users may manage non-essential cookies via browser settings or cookie preferences (if implemented).
We do not use cookies for advertising resale.
12. User Rights
Subject to applicable law, users may request:
- Access to their personal data
- Correction of inaccurate data
- Deletion of personal data
- Restriction of processing
- Data portability
Requests can be submitted to:
13. Data Breach Response
In the event of a data security incident, we will:
- Investigate promptly
- Take corrective action
- Notify affected users where required by law
14. Children's Data
The Service is not intended for individuals under 18 years of age.
We do not knowingly collect data from minors.
15. Changes to This Policy
We may update this Privacy Policy from time to time.
Continued use of the Service after changes constitutes acceptance.
16. Contact Us
Trinovix W.L.L.
Kingdom of Bahrain