Privacy Policy

Who we are

This Site is operated by Tabseet Technology ("Tabseet"), a Bahrain online commercial registration (CR no. 126423-1). No physical registered address is listed for the online CR. Tabseet is the controller for account, contact, registration, billing, security, and direct marketing information that it determines how and why to process. For client, matter, case, billing, and document data that a law firm stores in its workspace, the firm is generally the controller and Tabseet acts as its processor. This policy may be updated as our practices or applicable law change; please check this page periodically for the current version.

Information we collect

We collect information about users in the following ways:

• Directly from you through the workspace-registration form and other communications with us;
• From the law firm or organization that asks us to create or administer its workspace; and
• Automatically through essential session and security technologies used to operate this Site.

The personal information we collect may include your name, firm name, email address, phone number, country, account details, communications, and technical information needed to secure the Site. Workspace data may also include the client, matter, billing, and document data your firm chooses to store. Registration details are sent to Tabseet internal APIs to process the workspace request. Our infrastructure is hosted with Amazon Web Services (AWS) in the us-east-1, me-south-1, and eu-west-1 regions, as applicable to the deployment.

How we use your information

We process information for the following purposes and legal bases, as applicable:

• Process a registration request and perform steps requested before entering a service contract;
• Provide support and service communications, based on contract, legitimate interests, or legal obligations as applicable;
• Protect the Site, prevent misuse, and maintain security, based on legitimate interests and legal obligations;
• Send promotional communications only where permitted and, where required, with your consent; and
• Comply with legal obligations and keep appropriate business records.

How we store and protect your data

We use reasonable administrative and technical measures to protect personal information against unauthorized access, loss, misuse, or alteration. Service providers may process information on our behalf under appropriate instructions and confidentiality obligations. No system can be guaranteed completely secure.

Data retention

Our retention periods are: registration requests and leads until you request deletion; account and billing records until you request deletion, subject to any legal retention duty; support emails until you request deletion; workspace and client data for one month after cancellation; security logs for one month; backups for three months; and no marketing consent records, because we do not use client data for marketing. We may retain information longer where necessary to comply with law, resolve disputes, or protect the service.

Your rights

Subject to applicable data protection law (see our GDPR page on this Site for more detail), you have the right to:

• Access your personal information;
• Request correction of inaccurate information;
• Request erasure of information, subject to applicable exceptions;
• Request restriction of processing or object to processing where applicable;
• Receive personal information in a portable format where the right applies; and
• Withdraw consent at any time where processing relies on consent.

We may need to verify your identity before responding. You may also complain to the supervisory authority in the country where you live, work, or believe an infringement occurred.

Data breaches

We will assess suspected personal-data breaches and respond in accordance with applicable law. Where Tabseet acts as a processor, we will notify the relevant customer without undue delay. Where Tabseet acts as controller, we will notify the relevant supervisory authority and affected individuals when legally required. Payment processing is provided by Paddle.com under its applicable terms.

Cookies

This Site currently uses only essential session and CSRF-protection cookies. It does not currently use analytics, advertising, or marketing cookies. See our separate Cookie Policy for the current cookie names, purposes, and lifetimes.

Agreement

This policy explains our processing practices. Where consent is required, we will request it separately and you may withdraw it at any time. Other processing is carried out on the legal bases described above and under applicable data protection law.

Contact us

If you have any questions or concerns about this Privacy Policy, please contact us:

• Legal entity: Tabseet Technology
• Commercial registration: 126423-1
• Registered address: N/A — online commercial registration
• Email: hello@tabseet.org