Privacy Policy

1. Introduction

VIV-Z ("we", "us", or "our") is committed to protecting the privacy of both Providers (service professionals who install VIV-Z) and Clients (end-users of the client portal). This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

2. Data We Collect

2a. Provider data

• Account information (name, email, business name)
• GoHighLevel sub-account ID and OAuth tokens
• Stripe Connect account ID
• Availability and calendar configuration
• Service packages and subscription plan details

2b. Client data

• Name and email address
• Phone number (optional, for reminders)
• Booking history and session records
• Package and subscription balances
• Questionnaire responses submitted through the portal
• Payment records (processed by Stripe; VIV-Z does not store card data)

2c. Usage data

• Log data (IP address, browser type, pages visited)
• Cookies for session management and authentication

3. How We Use Your Data

• Providing the Service: Processing bookings, managing packages, syncing data with GoHighLevel, and processing payments.
• Communications: Sending booking confirmations, session reminders, and support responses.
• Security: Detecting and preventing fraud, unauthorized access, and abuse.
• Improvements: Analysing usage patterns to improve the Service. This data is aggregated and anonymized.

4. Data Sharing

We do not sell your personal data. We share data only with:

• Web builder: Contact data is synced to the Provider's web builder account as part of the core integration.
• Stripe: Payment data is processed by Stripe under their Privacy Policy.
• Resend: Email delivery service for reminders and notifications.
• Neon: Our database infrastructure provider (data processed under a DPA).
• Clerk: Authentication provider for the Provider dashboard.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. If you close your account, we will delete your personal data within 30 days, except where we are required to retain it by law (e.g. financial records).

6. Your Rights

Depending on your location, you may have the following rights:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your personal data
• Object to or restrict our processing of your data
• Data portability (receive your data in a machine-readable format)
• Withdraw consent at any time where we rely on consent

To exercise any of these rights, contact us at privacy@viv-z.app.

7. Cookies

VIV-Z uses cookies for authentication (session tokens) and security. We do not use tracking or advertising cookies. You can disable cookies in your browser settings, but this will prevent you from staying logged in.

8. Security

We implement industry-standard security measures including encrypted data transmission (TLS), encrypted database storage, and access controls. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance.

11. Contact Us

For privacy-related questions or to exercise your rights, contact us at privacy@viv-z.app.