Privacy Policy

This policy explains what happens to your data when you use trepide (the “Service”), operated by OBLIQVE LIMITED (“we”, “us”, “our”). trepide is a trading name of OBLIQVE LIMITED, a company registered in England and Wales. This policy covers what we collect, why, who we share it with, and your rights. Questions or requests: support@trepide.com.

The short version

• Your uploaded documents are deleted immediately after they are processed.
• We send your documents to our AI processing providers only to produce your result. We do not use your documents to train AI models.
• The extracted result is available to you for 10 minutes by default (1 hour for field-extraction batches), then it becomes inaccessible and is deleted. In your settings you can choose a longer window; how much longer depends on your plan, and never more than 48 hours. If your account is linked to another account for billing, that account sets the window instead.
• We keep job information (such as the filename, page and token counts, and time) to run your account and billing. We do not keep the document contents.
• You can ask us to delete your account and the data linked to it at any time, and we will, apart from mandatory legal information relating to payments.
• We use privacy-friendly analytics that count visits and measure page speed without cookies, and they never see your documents. We also advertise online, so if you agree we use advertising cookies to see which ads bring people here. We ask first, nothing optional is stored until you say yes, and you can change your answer at any time.

The rest of this policy is the detail behind those points.

1. Who we are, and our role in your data

OBLIQVE LIMITED is responsible for the personal data described here. Our role depends on the data:

• For your account, billing, and usage data, we act as the controller (we decide how and why it is processed).
• For the contents of the documents you upload, we act as your processor: we process them only on your instructions to return your result, and you are the controller of any personal data those documents contain (see section 3).

We are established in the United Kingdom and regulated by the Information Commissioner’s Office (ICO).

2. What we collect

• Account data: your email address and a hashed password, plus any profile details and client names and categories you choose to enter.
• Uploaded documents: the files you submit for text extraction or translation, and their contents, while they are being processed (see section 4 for how briefly).
• Job metadata: filename, page counts, token usage, model or engine used, status, and timestamps, retained to power your usage history and billing.
• Content you create in the app: glossaries, field-extraction templates, and any ratings you give a result. We keep these until you delete them, because they are yours to reuse.
• Billing data: handled by our third-party payment processor. We receive confirmation of payment and pack or subscription details. We do not receive or store your full card number.
• Communications: the content of emails or support messages you send us, so we can respond and keep a record.
• Technical and log data: standard server logs such as IP address, device and browser information, and error information, used to operate and secure the Service.
• Analytics data: aggregate measurements of visits and page performance, used to see whether the site is working and fast. This does not identify you and never includes your documents.
• Advertising data: if you arrive from one of our ads, the advertising platform adds an identifier to the link you clicked. Where you have agreed through the cookie banner, we and Google use cookies and similar identifiers to measure whether an ad led to a visit or a sign-up. If you have not agreed, we collect nothing here. This never includes your documents or your results.

3. Personal data inside the documents you upload

The documents you upload may contain personal data about other people, and may include special-category data (such as health information) or other sensitive information (such as financial, identity, or legal details). This is important:

• For that information, you are the controller and we act as your processor, handling it only to perform the extraction or translation you requested, then deleting the file (see section 4).
• You are responsible for having a lawful basis and any necessary consents to upload that information, and you should not upload information you are not permitted to share. Redact anything that should not leave your control.
• We do not use this information for any purpose other than returning your result, and we never use it to train AI models.
• The terms on which we process it for you (our instructions, confidentiality, security, sub-processors, and deletion) are set out in the Data processing section of our Terms of Service, which applies automatically to every account. You do not need to request a separate agreement.

4. What happens to your uploaded documents

• When you submit a document, it is processed in the request and, if it is large, stored transiently in private cloud file storage until the job finishes. That storage is not public: the file cannot be reached from a web address, and only our servers can read it back to run your job.
• Its contents are sent to a third-party AI processing provider to perform the text extraction or translation, solely to return your result. We use paid, business API tiers, and under their terms these providers do not use your content to train their models.
• Those providers may keep a copy in their own systems for a short period, to detect abuse of their APIs and to meet their own legal obligations, before deleting it. That is their standard API practice and is outside our control; it is never used for training.
• As soon as processing finishes, the uploaded file is deleted from our systems. We also run a daily scheduled clean-up across our storage and database as a second check, so that nothing is left behind.
• Your result (the extracted or translated text) is available to you for 10 minutes by default, after which it becomes inaccessible and is deleted. Field-extraction batches default to 1 hour, because they are meant to be reviewed rather than downloaded once. You can change both windows in Settings → Data & retention; how long you may extend them depends on your plan, and we never keep a result for more than 48 hours. If your account is linked to another account for billing, that account sets both windows and yours are read-only. Download what you need within that window.
• We retain job metadata (see section 2) after the document is gone, to run billing and give you a usage history.

5. Why we process it, and our legal basis (GDPR)

This section covers the data we handle as controller. For the contents of the documents you upload we act as your processor, and you provide the legal basis for that processing (see section 3).

• To provide the Service you asked for (process your documents, return results): performance of a contract.
• To run your account and billing (tokens, purchases, history): performance of a contract.
• To secure the Service and prevent abuse (rate limiting, fraud prevention, logs): legitimate interests.
• To send service emails and respond to you (password resets, support replies, invoices): performance of a contract / legitimate interests.
• To send you product news or offers, where you have asked to receive them or where you are an existing customer and we are telling you about similar services: consent / legitimate interests. Every such message has an unsubscribe link, and you can opt out at any time without affecting your use of the Service.
• To understand whether the site is working (aggregate visit and performance measurement): legitimate interests.
• To comply with legal obligations (for example, tax and accounting): legal obligation.
• To measure and improve our advertising (whether an ad led to a visit or a sign-up, and to show our ads to people who have already visited): consent, given through the cookie banner. If you do not agree, nothing is stored on your device and nothing is sent to our advertising provider.
• Where we ever rely on consent, you can withdraw it at any time.

6. Who we share it with

We use a small set of trusted providers to run the Service. Each only receives the data needed for its role, under contracts that require them to protect it:

• AI processing providers to perform text extraction and translation on your document contents, under paid business API tiers where your content is not used to train their models.
• Cloud hosting and infrastructure providers to run the app, database, and transient file storage.
• Payment processing to take purchases securely. We do not receive or store your full card number.
• Email delivery to send service emails (password resets, support replies, invoices).
• Analytics and performance monitoring to measure visits and page speed in aggregate. This provider never receives your documents or your results.
• Advertising platforms (currently Google) to measure whether our ads work and, where you have agreed, to show our ads to you elsewhere. They receive information about your visit, such as the ad you clicked and whether you signed up. They never receive your documents, your results, or your file names. For this data Google acts as a separate controller, and its own privacy terms apply alongside ours.

If your account is linked to another account for billing, that account can see how much you have used (documents processed, pages, and tokens spent) while the link is active. They cannot see your documents, file names, or clients.

We can provide the names of our current providers on request. The terms we process your data under are in the Data processing section of our Terms of Service and apply to every account. We do not sell your personal data. The only advertising sharing we do is what section 12 describes, which happens only if you agree to it, and we never share the contents of your documents, your results, or your file names with an advertising provider under any circumstances. We may disclose data if required by law, to enforce our terms, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets (in which case we will require the recipient to honour this policy).

If we add or change a provider that processes the contents of your documents, we will update this policy and tell you before the change takes effect, so you can object or stop using the Service.

7. International transfers

Some providers above may process data outside your country (for example, in the United States). Where that happens, transfers are covered by appropriate safeguards, such as UK and EU approved standard contractual terms and recognised data-transfer frameworks. You can ask us for more detail about the safeguards that apply.

Where you agree to advertising cookies, the information they collect is processed by Google in the United States under its own safeguards.

Your data is processed in the United Kingdom, the European Economic Area, and the United States.

8. How long we keep things

• Uploaded documents: deleted immediately after processing, with a daily scheduled clean-up as a second check.
• Results: 10 minutes by default (1 hour for field-extraction batches), or longer if you choose it in Settings (or, on a linked account, if the account paying for it does), never beyond 48 hours, then deleted.
• Glossaries, extraction templates, and ratings: kept until you delete them, or until your account is deleted.
• Job metadata and account data: kept while your account is active. Filenames are part of this history, so if a filename itself contains personal or sensitive information, rename the file before uploading.
• Billing and tax records: kept for 6 years, as UK company and tax law requires, even after you close your account.
• If you delete your account: we delete your account and the data linked to it, apart from the billing and tax records above and anything we must keep by law.
• Communications: kept for as long as needed to handle your request and for our records.
• Server logs: kept for a limited period for security and troubleshooting.

9. Automated decision-making

The Service uses automated processing to extract and translate text at your request, but it does not make any decision that produces a legal or similarly significant effect about you without human involvement. You control what you upload and how you use the results.

10. Your rights (GDPR / UK GDPR)

If you are in the EU, EEA, or UK, you have the right to: access your data; correct it; delete it; restrict or object to processing; data portability; object to direct marketing at any time; and withdraw consent where we rely on it. To exercise any of them, email support@trepide.com, including a request to delete your account and the data linked to it. We will respond within the time the law requires (generally one month). You also have the right to complain to your local data protection authority, though we would appreciate the chance to help first.

11. If you are outside the EU, EEA, or UK

We apply the same approach wherever you live: you can ask us what personal information we hold about you, ask us to correct or delete it, and we will not treat you differently for asking. We do not sell or share your personal information, including as those terms are defined under California law. To make a request, email support@trepide.com.

12. Cookies and similar technologies

Cookies are small files a site stores on your device. Some are needed to make the site work. Others are optional, and we ask before using those. This section covers anything stored on your device, not only cookies.

Necessary (always on). These make the site function and cannot be switched off. They do not track you:

• Sign-in cookies: keep you signed in, protect the sign-in form against cross-site attacks, and send you back to the right page once you have signed in. The one that keeps you signed in lasts until you sign out or it expires; the others last only for the browser session.
• Your cookie choice: remembers what you chose here so we stop asking. Lasts 6 months. We set this one even if you refuse everything else, because refusing is itself a choice worth remembering.
• Interface preferences: choices like the light or dark theme or the width of a panel, saved in your browser only when you change them. They stay until you clear your browser data, and they are never sent anywhere.

Analytics (no cookies, no consent needed). Our analytics and performance monitoring (section 2) work without cookies: they count visits and measure page speed in aggregate, they do not store anything on your device, and they do not identify you. Because they do not use cookies or similar device storage, they do not require your consent, which is why they do not appear in the cookie banner. If that ever changes, we will update this policy and ask for your consent where required.

Advertising (off until you agree). We advertise online. If you agree, we load Google’s advertising software on the page. It sends Google information about your visit, and it may store cookies and similar identifiers on your device, so that we can see whether an ad led to a visit or a sign-up and so that we can show our ads to people who have visited before.

What gets stored depends on how you arrived. Coming from one of our ads is what creates something to remember, so a visit that did not start with an ad may set nothing on your device at all, even after you have agreed. Anything set here is set by Google and is governed by Google’s privacy policy as well as ours.

Until you agree, no advertising cookies are set and nothing is sent to Google at all. We do not load their software on the page until you have said yes.

Changing your mind. Select Cookie settings in the footer of any page. Withdrawing is as easy as agreeing, and it takes effect immediately. You can also block or delete cookies in your browser, though blocking the necessary ones will stop you being able to sign in.

13. Security

We use encryption in transit and at rest, hashed passwords, access controls, and prompt deletion of uploaded documents after processing. While a document is being processed it is held in private storage that is not publicly accessible and is never served from a public web address; our servers read it directly to run your job. Only a small number of people can access production systems, and only where needed to operate or support the Service. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.

If you believe you have found a security problem, email support@trepide.com and we will look into it.

14. Data breaches

If a personal-data breach occurs that is likely to affect you, we will notify the relevant supervisory authority and, where the law requires, affected users, within the timescales set by applicable law.

Where a breach affects the contents of documents you uploaded, we act as your processor, so we will tell you without undue delay, so that you can meet your own notification duties.

15. Links to other sites

The Service may link to third-party sites or services we do not control. This policy does not cover them, and we are not responsible for their privacy practices. Review their policies before providing them with your data.

16. Children

The Service is not intended for anyone under 18, and we do not knowingly collect their personal data. If you believe a child has provided us with data, contact us and we will delete it.

17. Changes

We may update this policy. Material changes will be signposted (email or in-app notice), and the “Last updated” date above will change. Your continued use of the Service after an update takes effect means you accept the updated policy.

This policy was updated on 21 August 2026 to introduce optional advertising cookies, which are off until you agree to them. Nothing about how we handle your documents changed.

18. Contact

Data controller: OBLIQVE LIMITED, registered in England and Wales, trading as trepide. Privacy contact: support@trepide.com. You can use the same address to exercise any of the rights above.