Privacy

Who we are

This policy applies to Trisilva Pte. Ltd. (Singapore, UEN 202612217Z) and Trisilva Co., Ltd. (Vietnam, MST 0111523527), together "Trisilva". It covers the trisilva.ai website, the InsureFlow platform and its products (including ClaimFlow and MicroFlow), and enquiries made to us.

Trisilva sells to insurers, brokers, and channel partners. Most personal data we process belongs to our customers' end users and is processed on our customers' instructions, under a separate data processing agreement. This policy describes that processing and the data we handle in our own right.

Data we collect

• Enquiry and account data. Name, work email, company, role, and the content of an enquiry or support request.
• Platform data. When a customer runs an insurance operation on InsureFlow, the platform processes records tied to that operation, such as policy, claim, and party details. Trisilva processes this as a data processor on the customer's behalf.
• Technical data. IP address, device and browser information, and usage logs, collected to operate, secure, and diagnose the service.
• Cookies. The website uses cookies necessary for its operation and, where consented, for analytics.

We do not sell personal data.

How we use it

• To provide, secure, and support the platform and website.
• To respond to enquiries and manage the customer relationship.
• To meet legal, regulatory, and audit obligations in the markets we operate in.
• To improve reliability and diagnose faults.

We process data on the legal bases available under applicable law, including performance of a contract, our legitimate interests in operating the service, consent where required, and compliance with legal obligations.

Data residency and cross-border transfers

InsureFlow can run in more than one region. Personal data is hosted in the region appropriate to the customer and the market it serves. Data residency, meaning where your data is physically stored, is set out in the customer's data processing agreement. Where data crosses borders, we apply the safeguards the applicable law requires.

Your rights

Subject to applicable law, including Singapore's Personal Data Protection Act (PDPA) and equivalent regional regimes, you may request to access, correct, or delete your personal data, withdraw consent, or object to certain processing. Where Trisilva processes data on a customer's behalf, we will refer a request to that customer as the controller.

To make a request, contact us using the details below. We will respond within the period required by the applicable law.

Retention

We retain personal data only as long as needed for the purpose it was collected, or as required by legal, regulatory, and audit obligations, after which it is deleted or anonymised. Platform data retention follows the terms of the relevant customer agreement.

Data protection contact

Questions and requests can be sent to our data protection contact at privacy@trisilva.ai, or by post to our registered office at 1 Raffles Place, #19-61, One Raffles Place, Singapore 048616.

Data processing agreement

What the agreement covers, the law it is written against in each market, and how it handles cross-border transfer are set out on the Data Processing Agreement page.

The agreement itself, a description of our security practices, and details of the sub-processors we engage (the outside providers we use to help run the service) are available to customers and prospective customers on request. Request them through /contact, selecting the security-pack enquiry type.

Data Processing Agreement · Terms · Security and trust · Contact