Scope and responsible operator
This draft covers the Engagivo website and workspace. Engagivo is the public operator name used in this notice. Contact the Engagivo team through /contact for privacy enquiries. For customer information in a workspace, the organization using Engagivo determines its purposes and instructions; Engagivo processes that content to provide the configured service. Engagivo’s own account, support and security processing needs a separate confirmed legal basis.
Information and purposes
Account setup uses identity and authentication information, organization membership and permissions. Workspace activity can include channel identities, contact fields and tags, consent records, messages, attachments, content drafts, approved knowledge, automation activity and delivery outcomes. These support the features the workspace configures. Contact requests contain name, work email, organization, optional role and request text so the team can route and answer the enquiry. Newsletter signup uses email, consent time and subscription status for confirmation and requested updates; a contact enquiry does not subscribe you.
Security and operational records
The service uses session and request-security information, connection state, error records, usage and audit events to authenticate access, separate organizations, investigate failures and prevent misuse. Browser requests pass through the frontend to the API. Inquiry and newsletter email records use encrypted storage; credentials are held in the API environment. These controls reduce risk but are not a certification or a guarantee that incidents cannot occur.
Recipients and connected services
Vercel serves the frontend; Hostinger hosts the API and related services. Google/Firebase can support authentication. Connected Meta channels, LINE, email delivery, enabled AI providers and configured payment services receive the information required for their selected function. Authorized workspace members can access information according to their permissions, and authorized administrators can handle enquiries and subscriptions. A provider’s own account and platform practices are covered by its notices. The actual subprocessors, locations and transfer safeguards must be confirmed before approval; the existence of an integration does not mean every customer uses it.
AI and customer content
An enabled AI provider may receive the prompt, relevant conversation context and selected knowledge needed for a configured task. Approve source material and provider terms before enabling that processing. This notice makes no unverified promise that an external provider never retains data or uses it for training. Test with fictional data and keep sensitive decisions on a human path. Account-level automated replies require separate authorization from reviewing an AI suggestion.
Retention and deletion
Retention depends on record type, workspace controls, legal obligations and the operational retention schedule. The implementation’s seeded inquiry-PII retention is 90 days, but the current production control and execution schedule must be verified before promising an exact deletion date. Newsletter subscriptions remain available until unsubscribe or an authorized deletion; unsubscribe stops updates and is distinct from erasure. Audit, receipt, billing and backup records can have separate retention needs. Disconnecting a channel does not by itself erase all conversation or backup records. Confirm the applicable schedule with the team and use the data-deletion instructions for a scoped request.
Your choices and requests
Use the newsletter unsubscribe link to stop updates and cookie choices to control optional analytics. For access, correction, export, objection, withdrawal or deletion, contact the team from the account email and identify the organization and request scope. The team must verify authority without requesting passwords or tokens. Your available rights and response deadlines depend on applicable law; contact Engagivo through /contact for a privacy complaint; applicable regulatory complaint rights remain available. Workspace end customers may need to contact the organization that controls their records.
Cookies and changes
The cookie notice describes essential session protection, browser preferences and optional analytics. Review it before enabling optional measurement. Material changes to this notice need an updated revision and effective date, with notice where applicable. This revision is a draft and does not establish an effective date or waive statutory rights.
Facts needed before approval
- Engagivo policy contact route and responsibility for handling requests
- Applicable jurisdictions, legal grounds and any age restrictions
- Current provider inventory, processing locations and transfer arrangements
- Production retention settings, backup expiry and deletion procedures
- Trial, renewal, cancellation, refund and support commitments
- Qualified policy review and an approved effective date