Privacy policy

1. Who we are

Trivellu ("we", "us") is an AI engineering company registered in Pakistan, company registration number [REGISTRATION NUMBER], with its office at J7 Emporium Mall, Block B6, Islamabad, Pakistan. For questions about this policy or about your data, write to privacy@trivellu.com.

This policy explains what we do with personal data in two separate situations: when you use this website, and when you are our client and we handle data on your behalf.

2. This website

We have deliberately kept this site simple.

• No advertising or tracking cookies. We do not run advertising networks or cross-site trackers.
• One local preference. Your chosen language is stored in your browser's local storage so the site remembers it. It never leaves your device and we cannot read it.
• Fonts. Typefaces are served by Google Fonts, which receives your IP address as part of that request. If you prefer to avoid this, we can self-host the fonts — tell us and we will.
• Server logs. Our hosting provider records standard access logs, including IP address, for security and troubleshooting. These are retained for [NUMBER] days.

3. When you contact us

If you use the contact form or email us, we receive the details you provide: name, company, email address, the nature of your enquiry and your indicated budget range. We use this only to reply and to assess whether we can help. The legal basis is our legitimate interest in responding to business enquiries, or steps taken at your request before entering a contract.

We keep enquiry correspondence for [NUMBER] months if no engagement follows, then delete it. We do not sell, rent or share enquiry data with third parties for their own marketing.

4. When we work for you

On client projects we normally act as a processor: the personal data we touch belongs to you and we handle it only on your documented instructions. Before any such work begins we sign a data processing agreement setting out the subject matter, duration, categories of data and our obligations. Where camera footage or other sensitive material is involved, we prefer architectures that keep processing on your own premises or in your own cloud account.

We do not use client data to train models, and we do not reuse it for other clients.

5. Sub-processors

We use a small number of providers to run our business and deliver projects. Current sub-processors:

We tell clients in advance before adding a sub-processor that touches their data, and you may object.

6. International transfers

We are based in Pakistan, which has not received an adequacy decision from the European Commission. Where we process personal data originating in the EEA or the UK, transfers are made under the Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable), together with the technical and organisational measures described on our security page. We can provide the executed clauses on request.

7. Your rights

Depending on where you are, you may have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to processing, and to receive it in a portable format. To exercise any of these, email privacy@trivellu.com. We respond within 30 days.

If we handle your data as a processor for one of our clients, please direct your request to that client; we will support them in answering it.

If you are in the EEA or UK and believe we have handled your data improperly, you may complain to your national supervisory authority.

8. Security

Our technical and organisational measures are described in detail on the security and data protection page.

9. Changes

If we change this policy we update the date at the top of this page. Material changes affecting existing clients are notified by email.