Privacy Policy

Account information you provide: name, work email, company name and password credentials handled by our managed authentication provider.

Content you upload: invoices, contracts and related documents, along with the structured data extracted from them.

Operational evidence: timestamps and event records associated with the movements you ask us to verify.

Usage records: sign-in events, actions taken in the product and administrative activity, retained for security and audit purposes.

To operate the verification workflow: extracting obligations, gathering evidence, reconstructing timelines, calculating supported amounts and issuing Reality Certificates.

To secure the service, investigate abuse and maintain an audit trail of privileged actions.

To support you, respond to enquiries and improve the product.

We do not sell personal information and we do not use your contracts or invoices to train third-party models.

Uploaded documents are processed server-side to extract structured fields. Processing may involve a third-party language model provider acting on our instruction as a processor.

Model output is validated against a strict schema before storage and is never used to perform financial arithmetic. All monetary calculations are performed by deterministic code.

Data is stored in our managed cloud database with row-level security policies that isolate each customer organization.

Documents are stored under a per-organization prefix with access-controlled reads.

We retain your content while your account is active. On written request we delete your organization's content, except records we must keep for security or legal reasons.

We share information with infrastructure and processing providers strictly to operate the service, and where required by law.

We do not disclose your contracts, invoices or verification results to other customers, carriers or counterparties.

You can access and correct your account information in the product, request an export of your organization's data, or request deletion of your account.

Depending on where you are located you may have additional rights over your personal information. Contact us to exercise them.

We describe our implemented security controls on the Security page. We hold no security certifications or audit attestations and this policy is not a compliance statement.

No system is perfectly secure. We will notify affected customers without undue delay if a breach affecting their data occurs.

Questions about this policy: hello@obligepay.com.