1. Scope and privacy roles
This Privacy Policy describes how Tremvio handles personal data when Tremvio acts as a controller for its own business operations, including the public website, account administration, authentication, support, billing, security, and service analytics.
When a customer uploads documents, reviews extracted rows, or exports outputs that contain personal data, the customer usually decides why that information is being processed. In that context, Tremvio generally acts as a processor on the customer's behalf, and the processor-side terms are described in the Data Processing Addendum.
This Privacy Policy should be read together with the Terms & Conditions, the Data Processing Addendum, and the Refunds & Billing page.
In practical terms, Tremvio usually acts as controller for website, support, billing, and account-administration data, and usually acts as processor for personal data contained in customer-uploaded documents and outputs.
2. Personal data Tremvio collects
The data Tremvio collects depends on how you interact with the service. If you only visit the website, Tremvio usually receives much less information than when you create an account, upload files, or purchase a paid plan.
- Account and organization data: name, email address, login credentials, workspace details, organization name, and similar registration or profile information.
- Uploaded content and outputs: documents, images, scans, extracted table data, row-level review actions, exports, prompts, instructions, and related file metadata.
- Billing and transaction data: billing contacts, subscription status, transaction identifiers, invoices, receipts, tax information, and refund or chargeback records.
- Support and communications: messages, attachments, procurement requests, bug reports, privacy requests, and other information you send to Tremvio.
- Technical, usage, and security data: IP address, browser type, device and operating-system data, session activity, timestamps, authentication events, job metadata, and diagnostic logs.
- Analytics and derived signals: service measurements, performance indicators, fraud-risk signals, approximate region derived from IP, and aggregated or de-identified statistics.
For Tremvio's own controller-side purposes, Tremvio does not intentionally ask users to provide special-category personal data unless that is clearly necessary and lawfully supported. Customer-uploaded documents may nevertheless contain sensitive or regulated information if a customer chooses to process it through the service, and in that case the customer remains responsible for the underlying lawful basis and disclosures.
3. How Tremvio collects personal data
- Directly from you when you create an account, request a demo, contact support, submit privacy or billing questions, or otherwise communicate with Tremvio.
- From your use of the product when you upload documents, review flagged rows, export results, change settings, or use account features.
- Automatically through normal website and app operation, including server logs, authentication records, device signals, cookie-like technologies, and security telemetry.
- From billing, infrastructure, support, monitoring, and communications providers that help Tremvio run checkout, customer support, fraud prevention, availability monitoring, and related operations.
- From business counterparts or teammates acting on behalf of an organization, for example where they add you as a billing, support, or workspace contact.
4. How Tremvio uses personal data
- To provide, maintain, and secure the website, product accounts, document-processing workflows, exports, and support services.
- To authenticate users, manage workspaces, enforce plan limits, detect suspicious activity, and prevent fraud, abuse, or misuse.
- To process uploaded files, generate structured outputs, surface review signals, and support the features requested by the user or customer organization.
- To handle subscriptions, receipts, taxes, refund reviews, failed payments, and other billing operations.
- To respond to support tickets, procurement reviews, privacy requests, and security reports.
- To analyze product reliability, troubleshoot errors, improve workflow quality, and generate aggregated or de-identified service analytics.
- To comply with legal obligations, protect rights, resolve disputes, and maintain records needed for tax, accounting, incident response, and enforcement purposes.
Tremvio does not use customer-uploaded documents or extracted outputs to train public artificial intelligence or machine learning models.
5. Legal bases for processing
Where applicable data protection law requires a legal basis, Tremvio generally relies on one or more of the following:
- Contract: to create and administer accounts, provide the service, process subscriptions, and respond to requests tied to your use of Tremvio.
- Legitimate interests: to secure the service, prevent abuse, improve product quality, manage support, measure service performance, and run Tremvio responsibly as a business.
- Consent: where consent is required, such as for certain optional communications or non-essential website technologies.
- Legal obligation: to comply with tax, accounting, recordkeeping, fraud-prevention, law-enforcement, court-order, and other regulatory duties.
If Tremvio relies on consent where the law requires it, you may withdraw that consent later, but that will not affect processing that was already lawful before the withdrawal.
7. International transfers
Tremvio and its providers may process personal data in more than one country because cloud hosting, support, monitoring, billing, and operational tooling can involve international service delivery.
When personal data is transferred across borders, Tremvio aims to use lawful transfer mechanisms and appropriate contractual, technical, and organizational safeguards for the relevant processing context. Depending on the transfer, that may include standard contractual commitments or other recognized legal tools where appropriate.
8. Retention
Tremvio keeps personal data for no longer than reasonably necessary for the purposes described in this Privacy Policy, taking into account the nature of the data, the sensitivity of the information, the business or legal need for retention, and the feasibility of deletion or de-identification.
- Account, contract, and billing records may be retained for subscription management, tax, accounting, fraud-prevention, and recordkeeping purposes.
- Support and security records may be retained long enough to investigate incidents, resolve disputes, document decisions, and improve service reliability.
- Uploaded documents, extracted outputs, and export-related records may remain available until deleted by the customer, removed under product retention settings, or deleted after account closure or a verified request, subject to backups and legal exceptions.
9. Deletion and account closure
To request deletion of account information, uploaded files, extracted outputs, or other personal data held by Tremvio, email support@tremvio.com from the relevant account address or provide enough information for Tremvio to verify the request.
After a verified request, Tremvio aims to delete or de-identify the requested data within a reasonable period unless retention is still needed for backups, security, abuse prevention, dispute resolution, billing records, tax or accounting duties, or other legal obligations.
If the request concerns personal data contained in customer-uploaded documents and Tremvio processes that data only on the customer's behalf, Tremvio may need to route or coordinate the request with the relevant customer because that customer usually determines the purpose of the processing.
10. Security
Tremvio uses reasonable administrative, technical, and organizational measures designed to protect personal data against unauthorized access, misuse, loss, alteration, or disclosure. Those measures may include access controls, environment-level security controls, monitoring, backups, incident-response procedures, and role-based restrictions on internal access.
No service can promise absolute security. You are responsible for maintaining the confidentiality of your credentials and for notifying Tremvio promptly if you suspect unauthorized access, compromised credentials, or another account-related security issue.
11. Your rights and choices
Depending on where you live and the law that applies, you may have rights to request access to personal data, correction of inaccurate data, deletion, restriction, objection, portability, or a copy of the information Tremvio holds about you.
- You may ask Tremvio to confirm whether it processes your personal data in its controller role.
- You may request correction, export, or deletion of certain information, subject to verification and applicable exceptions.
- You may object to or request restriction of certain processing where the law provides that right.
- Where processing depends on consent, you may withdraw that consent.
Privacy requests can be sent to support@tremvio.com. Tremvio may ask for additional information needed to verify the request before acting on it.
If you believe Tremvio has not handled your request properly, you may also have the right to complain to the data protection or privacy regulator that applies to your location.
13. Third-party services and links
Tremvio may link to third-party websites, integrations, or external services. Except where Tremvio expressly states otherwise, this Privacy Policy does not govern the privacy practices of those third parties.
If you interact with an external billing page, support portal, embedded service, or linked website, the privacy terms of that third party may also apply to the information you provide there.
14. Changes to this policy
Tremvio may update this Privacy Policy from time to time to reflect product changes, legal developments, provider changes, or operational updates. If a change is material, Tremvio may provide notice through the website, the product, or the account email associated with your use.
The "Last updated" date at the top of this page shows when the current version became effective.
15. Contact
Privacy questions, rights requests, DPA questions, and procurement or vendor-review inquiries can be sent to support@tremvio.com.