Legal
Privacy policy
Last updated: 2026-05-02
Traib is a multi-tenant knowledge platform operated by Bincenzo S.r.l. ("Traib", "we"). This page explains what personal data we collect, why, and what you can do about it. When you use a tenant workspace (e.g. iPratico Knowledge Hub), the workspace owner is the data controller and Traib acts as data processor under a separate Data Processing Agreement.
What we collect
- Account: email, hashed password, role per workspace, language preference.
- Audit logs: every mutation and significant action you take, with IP and user agent, kept for security and compliance.
- Email events: delivery status of emails we send you (sent, delivered, bounced, opened, clicked, complained), correlated to your account.
- Content you upload to your workspace (documents, recordings, knowledge items).
Why we process it
- Provide the service (contract): authentication, knowledge management, transactional email.
- Security and abuse prevention (legitimate interest): audit logging, rate limiting.
- Operate email delivery (legitimate interest + contract): hand off addresses to our email provider.
- Comply with legal obligations: tax/accounting where applicable.
Third parties (sub-processors)
We rely on the following providers. Each handles only what is needed for its role.
- Supabase (eu-central-1, Germany) — database, authentication, storage.
- Vercel (Frankfurt edge + US control plane) — application hosting.
- Resend (US, EU SCCs in place) — transactional email delivery.
- Google AI (Gemini API, US/multi-region, EU SCCs in place) — semantic embedding of the content you upload, to enable in-workspace search. Only the text extracted from your documents is sent to generate embeddings; it is not used for model training (Google opts out by default on the paid tier).
Your rights
Under GDPR you can:
- Access the personal data we hold about you.
- Correct or update inaccurate data.
- Request deletion ("right to be forgotten"), subject to legal retention obligations.
- Export your data in a portable format.
- Object to processing based on legitimate interest.
- Lodge a complaint with your local data protection authority.
Retention
Account data: until your workspace owner removes you or deletes the workspace. Audit logs and email events: 24 months from the event date, unless a longer period is legally required. Content: until deleted by your workspace owner.
Contact
Write to privacy@traib.online for any privacy-related request. We respond within 30 days.