Privacy Policy

1. Who we are

OBANVAL INC (“OBANVAL INC”, “we”, “us”, or “Provider”) is a corporation duly registered in the State of Delaware, United States (EIN 33-1234349), with its fiscal address at 1166 Bear Corbitt Rd, Bear, DE 19701, USA, and is insured and licensed as required for its business. NO COMPLIANCE is a software product within the NO UNIVERSE portfolio operated by OBANVAL INC. OBANVAL INC is the entity that markets, sells, invoices, collects payment, and remits applicable taxes for NO COMPLIANCE and other NO UNIVERSE applications.

OBANVAL INC operates NO COMPLIANCE at https://no-compliance.nestorobando.com as part of NO UNIVERSE. Product support contact: nocompliance@nestorobando.com.

This Policy explains how we handle personal information of account holders, staff users, and individuals whose data appears in a firm’s workspace. For privacy purposes, the controller of account, billing, and security data is OBANVAL INC.

2. Information we collect

Account data: name, email, organization name, role, hashed password, plan and billing identifiers when you subscribe.

Workspace data you or your clients enter: company profiles, compliance records, documents, signatures, notes, and credentials you choose to store in vault or company fields.

Technical data: IP address, user agent, approximate device/browser metadata, and essential session cookies.

Support and billing communications you send to us or that arise from payment processing.

3. How we use information

To provide and secure the Service; authenticate users; isolate organizations; deliver documents and signatures; process subscriptions; communicate about the account; diagnose incidents; and improve reliability.

We do not sell personal information. We do not use Customer Content to train public generative AI models.

4. Legal bases (where applicable)

Depending on your location, we rely on performance of a contract, legitimate interests in operating a secure multi-tenant service, consent where required, and legal obligations.

5. Sharing

Infrastructure and service providers under contract (hosting, database, email delivery, and payment processors such as Stripe), only as needed to run the Service.

Firm staff and client users according to roles and assignments configured by the firm.

Authorities when required by law, or to protect rights, safety, and security.

A successor in connection with a merger, acquisition, or asset sale, subject to continued protection of personal data.

6. International transfers

Infrastructure may be located in the United States or other countries. Where required, we use appropriate safeguards with processors.

7. Retention

See the Data Retention & Deletion policy. We keep data while the organization is active and for a limited period afterward for backups, disputes, fraud prevention, and legal requirements.

8. Security

We apply role-based access, organization scoping, httpOnly sessions, encryption for selected secrets, and authenticated document routes. Details are in the Security Overview. Report suspected incidents to nocompliance@nestorobando.com.

9. Your choices and rights

Account holders may update profile data in the app. Organization owners may request export or deletion by emailing support.

Client users should contact their firm for access, correction, or deletion requests about firm-held records; we will assist the firm as processor.

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, or port data, or to object to certain processing. We will not discriminate against you for exercising rights available by law.

10. Children

The Service is directed to business users. We do not knowingly collect personal information from children under 16.

11. Changes

We may update this Policy by posting a revised version with a new effective date. Material changes will be communicated when practicable.