Privacy Policy

1. Introduction

Welcome to ObligeIQ. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, process, and protect your information when you use our web application and services.

ObligeIQ operates out of London, United Kingdom. For the purposes of the UK General Data Protection Regulation (UK GDPR), we are the data controller for your account information.

2. Information We Collect

We collect information to provide, secure, and improve our services:

• Account Information: Name, email address, and authentication credentials.
• Billing Information: We use Stripe as our payment processor. We do not store your full credit card details on our servers.
• Customer Data (Documents): The PDFs, leases, and real estate documents you upload to our platform for AI extraction.
• Usage Data: Standard analytics regarding how you interact with our platform (hosted via Vercel).

3. How We Process Your Data & AI Usage

Because ObligeIQ processes highly sensitive B2B documents, we have strict data boundaries regarding our Artificial Intelligence infrastructure:

• No Model Training: We utilize the paid API tier of Google's Gemini model to process your documents. Your uploaded documents, prompts, and extracted data are NOT used by Google to train or improve their foundation AI models.
• Purpose: Your documents are processed solely for the purpose of extracting obligations and returning that data to your dashboard.

4. Data Storage, Security, and International Transfers

• Infrastructure: Your data and uploaded files are stored securely using Supabase, hosted in the eu-west-1 (Ireland) region, ensuring compliance with European and UK data residency standards.
• International Data Transfers: Because we utilize global cloud infrastructure, your information may be transferred to, and processed in, countries outside of your home jurisdiction (such as the UK or the US). When we transfer data internationally, we rely on legally approved mechanisms, such as Standard Contractual Clauses, to ensure your data remains protected.
• Security: We implement industry-standard security measures to protect your data during transit and at rest.

5. Data Retention and Account Deletion

We retain your data only for as long as your account is active or as needed to provide you services.

• Account Deletion: If you wish to delete your account and all associated data, please email us at contact@obligeiq.com.
• Deletion Timeline: Upon receiving a verified deletion request, we will permanently and irreversibly hard-delete your account details, uploaded documents, and extracted properties from our database within 30 days.

6. Your Global Privacy Rights (UK/EU GDPR & CCPA)

Depending on where you reside, you may be protected by specific data privacy regulations, including the UK/EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

• UK & EU Residents: You have the right to access, correct, update, or request deletion of your personal data. You also have the right to restrict processing or request data portability.
• California Residents: You have the right to request access to the specific pieces of personal information we have collected about you, request deletion, and opt-out of the sale of your personal data. (Note: ObligeIQ does not and will not sell your personal data).

To exercise any of these rights, please contact us at contact@obligeiq.com.