VINCIVO
Privacy
Effective September 4, 2026.
Internally drafted document. Must be reviewed by a Connecticut attorney before charging anyone or signing a creator. Does not replace legal advice.
The data we handle
| Data | Purpose | Retention |
|---|---|---|
| Your name and email | Your account and service notices | While you have an account, and for 90 days afterward |
| Your visits: business, outcome, objections and notes | Your CRM, metrics and aggregate learning | While you have an account (append-only records) |
| Public business data (name, address, business phone and reviews) | Building and prioritizing routes | While the businesses are in the territory |
| Approximate location | Ordering your route and calculating travel | No history of your movements is stored |
| Dictation audio | Converting your voice to text | Not stored. Transcribed by your phone |
What we do NOT do
- We do not sell your data or the data of businesses you visit.
- We do not show your visit notes to other Operators. Other team members see only a count to avoid overlapping visits.
- We do not track your location in the background or build a history of your movements.
- We do not use your data for advertising.
Artificial intelligence
The Vinci assistant uses models from Anthropic. Before being sent, text passes through two layers that mask phone numbers, emails, URLs and addresses. The business name, category, city and your cleaned visit notes may be sent. Other Operators' notes are never sent. These models are not trained on this data.
Who we share data with
- Supabase: your account and authentication.
- Netlify and Fly.io: where the system runs.
- Anthropic: only as described above, when you use the assistant.
- Google Places: to retrieve public business data. We do not send your personal data.
- If you joined through a creator, they see how many students they have and how many pay. They never see your visits, notes, customers or sales.
Your rights
You can request a copy, correction or deletion of your data by contacting hola@vincivo.com. We respond within 30 days. Deleting your account removes your account name, email, sessions, routes, follow-ups and territory, and closes access. The organization's field records remain without your account name or email: visits with notes as entered, voice transcripts and reported sales, along with evidence of your acceptance of these documents (date, IP and browser). Aggregated, anonymized data already used by the system cannot be reversed because it cannot be linked back to you.
Business owners' data
The data used to create routes is public. If an owner asks not to be contacted, the business is flagged and no Operator will see it on a route again. If an owner wants their record deleted, they can contact the same address and we will do so.