Privacy Policy
Trionex Technology Solutions (Pvt) Ltd
Trionex Technology Solutions (Pvt) Ltd (“Trionex,” “we,” “us,” or “our”) is a software house specializing in Odoo ERP implementation, custom software development, mobile applications, enterprise systems, web applications, and internet service provider (ISP) management platforms. This Privacy Policy explains how we collect, use, disclose, and protect personal data across our website, mobile applications, and the platforms we develop, deploy, or manage on behalf of our clients.
This policy applies to:
- Visitors to trionex.pk
- Users of applications we develop and operate directly
- End-users of ISP platforms we manage on behalf of our ISP clients
- Individuals whose data is processed within client ERP/POS systems we implement or support, where Trionex acts as a data processor on the client’s behalf
Information We Collect
Website Visitors
- Contact details submitted through forms (name, email, phone number, company name, message content) when requesting a consultation or demo
- Technical data such as IP address, browser type, device type, and pages visited, collected automatically through standard web analytics and/or cookies
Mobile Application Users
- Account information (name, phone number, email, password/authentication tokens)
- Profile and listing information you choose to provide
- Location data, where the app feature requires it, and only with your permission
- Device information (device ID, OS version, push notification tokens)
- Usage data (in-app activity, feature interactions, crash logs)
ISP Platform Subscribers
Where Trionex builds or manages subscriber management systems on behalf of ISP clients, the following categories of data may be processed:
- Subscriber identity and account information (name, CNIC where required by the ISP client, address, contact number)
- Service and billing data (package, usage limits, invoices, payment status)
- Network session data (login/logout timestamps, IP allocation, session duration) required for authentication, authorization, and accounting (AAA)
- Where enabled by the ISP client for network operations, IP detail records (IPDR) and related metadata (e.g., session IP, approximate geographic region via GeoIP) used strictly for regulatory compliance, network troubleshooting, and fraud/abuse prevention
Note: In these cases, the ISP client is the data controller and Trionex acts as a data processor, handling data solely under the client’s instructions and applicable regulatory requirements (including PTA and relevant Pakistani telecom regulations).
Client ERP / POS System Data
For Odoo ERP, POS, and enterprise systems we implement or support, we may have administrative or support access to systems containing:
- Employee and HR records
- Customer transaction and order data
- Inventory, accounting, and operational data
Note: In these engagements, the client is the data controller, and Trionex processes data only as needed to deliver, maintain, or support the contracted system, under confidentiality obligations set out in our service agreements.
How We Use Information
We use collected information to:
- Respond to inquiries and provide requested consultations or quotes
- Develop, operate, and improve our mobile applications and platforms
- Authenticate and manage subscriber sessions on ISP platforms
- Provide technical support and maintenance for client systems
- Monitor and improve system performance, security, and reliability
- Comply with applicable legal and regulatory obligations (including telecom regulations where relevant)
- Communicate service updates, maintenance notices, or changes to this policy
We do not sell personal data to third parties.
Legal Basis and Confidentiality
Where Trionex processes personal data on behalf of clients (ISP subscriber data, ERP/POS data), we do so under contractual confidentiality obligations and only to the extent necessary to perform the contracted services. Client agreements govern data ownership, access, and retention for such engagements; this policy does not override those agreements.
For data we collect directly (website, our own apps), our legal basis is your consent (e.g., submitting a form, granting app permissions) or our legitimate interest in operating and improving our services.
Data Sharing and Third Parties
We may share information with:
- Infrastructure and hosting providers necessary to operate our platforms and client systems
- Payment processors or integrated third-party services, only where a specific application or client system requires it, and only to the extent needed for that integration
- Regulatory or law enforcement authorities, where required by applicable law (e.g., PTA requirements for ISP subscriber records)
- Sub-processors or contractors engaged by Trionex, bound by equivalent confidentiality obligations
We do not share personal data with third parties for their own marketing purposes.
Data Security
We apply reasonable technical and organizational measures appropriate to the sensitivity of the data involved, including access controls, network security practices, encrypted storage/transmission where applicable, and restricted administrative access to client systems. No system can be guaranteed 100% secure, and we continuously review our practices as part of ongoing engagements.
Data Retention
- Website inquiry data is retained only as long as necessary to respond to and follow up on your request.
- App account data is retained while your account remains active, and for a limited period afterward as needed for legal, security, or operational purposes.
- ISP subscriber and client ERP/POS data is retained according to the retention terms agreed with the respective client and any applicable regulatory retention requirements.
Your Rights
Depending on your relationship with us, you may have the right to:
- Request access to personal data we or our clients hold about you
- Request correction of inaccurate data
- Request deletion of your data, subject to legal or contractual retention requirements
- Withdraw consent for optional data collection
For data processed on behalf of an ISP or ERP client, please direct requests to that client first, as they control the data; we will assist them in fulfilling valid requests as required by our service agreements.
To exercise these rights directly with Trionex, contact us using the details in Section 11.
Children’s Privacy
Our website and applications are not directed at children under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.
International Data Transfers
Where our infrastructure involves servers located outside Pakistan, personal data may be transferred internationally. We take reasonable steps to ensure such transfers are protected consistent with this policy.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our services or legal requirements. The “Last updated” date at the top of this page indicates the most recent revision. Material changes will be communicated where appropriate.
Contact Us
If you have questions about this Privacy Policy or how your data is handled, contact us at:
Lahore, Pakistan
Email: info@trionex.pk
Website: https://trionex.pk
Note: This document is a business draft and has not been reviewed by a licensed attorney. We recommend legal review before publishing, particularly regarding PTA/telecom regulatory requirements for ISP subscriber data and any PECA (Prevention of Electronic Crimes Act) obligations applicable to your operations.
