Legal · Privacy
Privacy notice
A plain-language account of the personal information Topoloom receives through this website, why we use it, and the choices available to you.
At a glance
Limited collection.
Explicit purposes.
No advertising profile
We do not sell information submitted through this website or use it for third-party behavioural advertising.
Form values stay out of interaction events
Website events can describe a page, CTA, or submission status; they do not include the text you enter into a form.
A defined website scope
This notice covers the public site, enquiries, and the administration of access requests and evaluations under managed availability. Customer workspace content is outside this website notice; applicable evaluation, customer, or data-processing terms may provide additional rules.
01 · Scope
Scope and controller
Relia1 Pte. Ltd. (“Relia1”, “we”, “us”) is the controller for personal information covered by this notice. It applies when you visit topoloom.dev, submit an access or demo request, contact us, or interact with us while we administer Topoloom managed availability.
Customer workspace content, evaluation data, product telemetry, and support data may be governed by a separate evaluation, customer, or data-processing agreement. This website notice does not expand those terms or claim authority over data held by your repositories, service catalogs, CMDBs, telemetry systems, or connected providers.
02 · Collection
Information we collect
Information you choose to provide
- Access requests: work email, company or product, engineering team size, submitted page locale, and any optional outcome you describe.
- Demo requests: name, work email, company, role, submitted page locale, and any optional workflow or system interest you describe.
- Correspondence and access administration: messages, scheduling details, access decisions, and information needed to support the conversation or evaluation.
Please do not submit passwords, credentials, confidential architecture, production data, or other sensitive information through a website form.
Website and delivery information
Our hosting and security infrastructure may process request data such as IP address, browser and device headers, requested URL, timestamps, and security signals to deliver the site, prevent abuse, diagnose failures, and keep the service available.
Limited interaction events
We may record a page path, locale, timestamp, CTA identifier, form-start event, submission result, HTTP status, or broad error category. These events do not contain names, email addresses, company names, free-text responses, or other form values.
03 · Purpose
How and why we use information
- Respond to your enquiry, arrange a demonstration, and shape a relevant technical evaluation.
- Review access requests, administer managed availability, and communicate about that request.
- Operate, secure, troubleshoot, and improve the website and submission flow.
- Prevent spam, abuse, fraud, and security incidents.
- Maintain business records and meet legal, accounting, or regulatory obligations.
Where data-protection law requires a legal basis, we rely as appropriate on steps you ask us to take, our legitimate interests in running and securing a business-to-business service, consent where requested, and compliance with legal obligations. We do not use these website forms to make solely automated decisions that produce legal or similarly significant effects.
04 · Data flow
Service providers and disclosure
We use a small set of providers to deliver the current website workflow. They process information for the purposes described here and under their applicable contractual and security terms.
| Provider | Purpose | Information involved |
|---|---|---|
| Cloudflare | Website delivery, edge processing, and security | Requests, network and device headers, security signals, and submitted form payloads in transit |
| Google Sheets / Apps Script | Access-request system of record | Access-request fields, submission time, source, and administration status |
| Resend | Delivery of demo requests and optional access-request notifications | Relevant form fields, recipient and reply-to address, message metadata, and delivery status in transit |
| Relia1 business email service | Receipt, response, and necessary business record handling | Demo and access-request messages, delivery metadata, and related correspondence |
We may also disclose information to professional advisers bound by confidentiality, to authorities when lawfully required, or in connection with a corporate transaction subject to appropriate safeguards. We do not sell personal information submitted through this website.
These providers may process information outside your country. Where applicable law requires safeguards for a transfer, we will apply the required contractual or other transfer measures.
06 · Lifecycle
Retention and deletion
We keep personal information only while it is reasonably needed for the purpose collected, to maintain necessary business or security records, to resolve disputes, or to meet legal obligations. Retention varies by the type of information and why we hold it; we use these criteria:
- Access-request information is kept while a request remains relevant to managed availability and follow-up, unless you ask us to remove it sooner and no obligation requires retention.
- Demo requests and correspondence are kept while we respond, evaluate a potential relationship, and retain necessary business records.
- Infrastructure and delivery records are retained according to security need and the applicable provider configuration.
When information is no longer needed, we delete it, anonymize it, or allow it to expire from active systems, subject to proportionate backup and legal-retention cycles.
07 · Security
Security and assurance
Topoloom’s information security management system is certified to ISO/IEC 27001:2022. We use organizational and technical safeguards appropriate to the information and workflow, including access control, transport encryption, provider and account access controls, input validation, no-store responses on form endpoints, and security-focused infrastructure controls.
Certification and controls reduce risk; they do not make any internet service infallible. Website submissions must be readable by us and the selected processors in order to respond, so this notice should not be read as a promise that every submission is end-to-end encrypted or processed under a zero-knowledge design.
08 · Your control
Your choices and rights
Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or an objection to certain processing, and to withdraw consent without affecting earlier lawful processing. You may also complain to your local data-protection authority.
To make a request, email [email protected]. Tell us the email address or request involved and the action you want us to take. We may ask for proportionate information to verify your identity and protect other people’s data.
You can opt out of non-essential follow-up at any time by replying to the message or contacting us. Operational replies to a request you initiated are not marketing subscriptions.
09 · Other details
Business users, children, and changes
Topoloom is intended for technical organizations and business users, not children. We do not knowingly solicit personal information from children through the access-request or demo forms. If you believe a child has submitted information, contact us so we can review and remove it where appropriate.
We may update this notice when the website, provider configuration, or legal requirements change. We will publish the revised date here and give additional notice when a change materially affects how we use information.
10 · Contact
Questions or requests
Contact the Topoloom privacy team at [email protected].
Relia1 Pte. Ltd.Asia Square Tower 1#42-01, 8 Marina ViewSingapore