1. Introduction
Welcome to Trinavo ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application hosting and management services.
2. Information We Collect
2.1 Personal Information
- Account Information: Name, email address, and password when you create an account
- Profile Information: Profile photos and any additional information you choose to provide
- Contact Information: Email addresses and any other contact details you provide
2.2 Application Data
- App Information: Details about applications you create, including app names, descriptions, and configurations
- Domain Information: Domain names associated with your applications
- Usage Data: Information about how you use our services, including access logs and performance metrics
2.3 Technical Information
- Device Information: IP addresses, browser type, operating system, and device identifiers
- Log Data: Server logs, error reports, and analytics data
- Cookies and Tracking: Information collected through cookies and similar technologies
3. How We Use Your Information
3.1 Service Provision
- To provide, maintain, and improve our hosting services
- To process your applications and manage your account
- To handle domain management and configuration
- To provide customer support and respond to inquiries
3.2 Communication
- To send important service updates and notifications
- To respond to your questions and provide support
- To send marketing communications (with your consent)
3.3 Security and Compliance
- To ensure the security of our services and prevent fraud
- To comply with legal obligations and enforce our terms
- To investigate and resolve technical issues
4. Information Sharing and Disclosure
4.1 Service Providers
We may share your information with trusted third-party service providers who assist us in:
- Hosting and infrastructure services
- Payment processing (Stripe)
- Analytics and monitoring services
- Customer support tools
4.2 Legal Requirements
We may disclose your information when required by law or to:
- Comply with legal processes or government requests
- Protect our rights, property, or safety
- Prevent fraud or security threats
4.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.
5. Connecting ChatGPT or Claude to Your Store
You can connect an AI assistant, such as OpenAI's ChatGPT or Anthropic's Claude, to your store and ask it questions about your own business. This section explains what happens to your data when you do.
5.1 How a Connection Is Made
- Only you start a connection, from inside the assistant. You sign in on your own store with the email and password of your store control panel, then approve a consent screen.
- Only the store owner, or staff the owner has allowed, can connect. Vendors on multi-vendor stores cannot.
- Each connection reaches one store only.
5.2 What the Assistant Can Read
You choose what to share on the consent screen. Basic store information (your currency, time zone and which features you use) is always included. You can add or leave out:
- Sales figures: revenue, number of orders, average order value and profit
- Products and stock: stock levels, categories, best and worst sellers
- Customer numbers: how many customers are new and how many come back
- Individual orders, including what was bought and what it came to
- Customer names, phone numbers, emails and addresses
The connection is read-only. It can never change prices, orders, stock, customers or settings.
5.3 What Is Shared, and With Whom
- When you ask a question, the assistant requests only the report it needs (for example, sales for a date range), and we send that report to the assistant you connected. Nothing is sent otherwise.
- From then on, that data is handled by the assistant's provider under its own privacy policy and your settings with them: OpenAI for ChatGPT, Anthropic for Claude.
- We do not receive or store your conversations with the assistant. We only see the report requests it makes.
- We do not sell this data or use it for advertising.
5.4 What We Keep
- A record of each connection: the assistant's name, the permissions you approved, when you approved them, the IP address and browser used to approve, and when the connection was last used. You see these records in your store under Users, then ChatGPT & Claude access.
- The sign-in codes and access keys of each connection, stored in a form that cannot be read back.
- Sign-in codes are deleted within a day of expiring, expired or withdrawn keys within 30 days, and withdrawn connections within a year. We keep them that long only to detect and investigate misuse.
5.5 Your Control
- Disconnect at any time from Users, then ChatGPT & Claude access, in your store control panel. Access stops immediately. You can also remove the connection from the assistant's own settings.
- A connection ends by itself after 180 days unless you approve it again.
- If your store is deleted, all of its connections end with it.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication measures
- Secure data centers and infrastructure
7. Data Retention
We retain your personal information for as long as necessary to:
- Provide our services to you
- Comply with legal obligations
- Resolve disputes and enforce agreements
- Maintain business records
8. Your Rights and Choices
8.1 Access and Control
You have the right to:
- Access and review your personal information
- Update or correct your information
- Delete your account and associated data
- Export your data in a portable format
8.2 Communication Preferences
You can:
- Opt out of marketing communications
- Update your notification preferences
- Control cookie settings in your browser
8.3 Account Deletion
You may request deletion of your account and associated data by contacting us. Note that some information may be retained for legal or business purposes.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with applicable laws.
10. Children's Privacy
Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the updated policy on our website
- Sending email notifications to registered users
- Displaying prominent notices in our application
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Email: [email protected]
Address: Shams Business Center, Sharjah Media City Free Zone, Al Messaned, Sharjah, UAE
Website: https://trinavo.com
13. Governing Law
This Privacy Policy is governed by and construed in accordance with the laws of the United Arab Emirates, without regard to conflict of law principles.