Privacy Policy

This Privacy Policy explains how [Vivollo legal entity name] ("Vivollo", "we", "us") handles personal data when you visit our website, create an account, or use the Vivollo platform. It applies to website visitors, customers (the businesses that use Vivollo), and the end-customers who talk to a Vivollo agent.

1. Who we are

The data controller is [Vivollo legal entity name], registered at [registered address]. You can reach us about privacy at [privacy@vivollo.com]. For processing governed by Turkish law (KVKK), see also our KVKK disclosure.

2. Data we collect

Account data — name, work email, company, role, and billing details you provide when you sign up.
Usage data — how you use the panel: pages, actions, device and browser information, IP address and approximate location.
Content you provide — your knowledge base, product data, files and settings used to configure your agent.
Conversation data — messages exchanged between your end-customers and your agent across connected channels, and metadata such as timestamps and channel.
Cookies and similar technologies — see Cookies below.

For end-customer conversations, you (our customer) are the controller and Vivollo is your processor. We handle that data on your behalf, under your instructions.

3. How we use data

We use personal data to:

provide, operate and maintain the platform and its channels;
set up, train and improve your agent using your content;
respond to support requests and communicate service notices;
monitor, secure and troubleshoot the service and prevent abuse;
handle billing and manage your subscription;
comply with legal obligations and enforce our Terms.

We do not sell personal data, and we do not use one customer's conversation data to build features for another customer.

4. Legal bases

Where Turkish law (KVKK) or the GDPR applies, we rely on: performance of a contract with you; our legitimate interests in running and securing the service; your consent (for example, certain cookies and marketing); and compliance with legal obligations.

We share personal data only with service providers that help us run Vivollo, under contracts that require them to protect it: [cloud hosting provider], [AI model provider(s)], [payment provider], [analytics/email providers], and the messaging channels you connect (such as WhatsApp and Instagram). A current list of sub-processors is available on request at [privacy@vivollo.com]. We may also disclose data where required by law.

6. International transfers

Some providers may process data outside Türkiye. Where they do, we use safeguards permitted by KVKK and the GDPR (such as adequacy decisions or standard contractual clauses). Details are available on request.

7. Cookies

We use strictly necessary cookies to run the site and the panel, and — with your consent — analytics cookies to understand usage. You can control non-essential cookies through your browser and our cookie banner.

8. Retention

We keep personal data only as long as needed for the purposes above or as required by law. Account and billing records are kept for the duration of your subscription and any statutory period after it. Conversation data is retained per your account settings and instructions, after which it is deleted or anonymised.

9. Security

We protect personal data with encryption, access controls and tenant isolation. See our Security overview for details.

10. Your rights

Subject to applicable law, you can ask to access, correct, delete or restrict your personal data, object to certain processing, withdraw consent, and receive a copy of data you provided. Turkish users have the rights in Article 11 of the KVKK — see the KVKK disclosure. To exercise any right, contact [privacy@vivollo.com]; we respond within the period set by applicable law.