Privacy Policy
Version 2026-09-28.v2 · Effective 28 September 2026
Short version
If you order on this site we hold what you type in the order form: your name, email, phone, business name, mailing address if you want it mailed, and your notes. We use it to confirm, deliver and support your order. There is no advertising pixel on this site, no third-party analytics, and nothing is sold or rented to anyone. You can have your data deleted with one email.
Who is responsible
Vincivo is responsible for this data. Questions, corrections and deletion requests go to support@vincivo.com and are answered within 30 days.
To complete before public launch: the registered legal entity name and postal address of the controller.
What we collect, and why
| Data | Why | Basis |
|---|---|---|
| Order details: name, email, phone, business name, products, delivery method, mailing address, notes | To confirm, deliver, charge and support your order, and to keep the sales records the law requires | Performing the order you asked for; legal obligation for records |
| A salted hash of your connection and browser, with the order | To stop automated or repeated fake orders | Legitimate interest in preventing abuse |
| First name, email (early-access list, while it existed) | To contact you about early access | Your consent, given with the checkbox |
| Use case and short description | To understand who the first small run would be useful for | Your consent |
| Campaign tags in the link you arrived on (utm_source and similar), referring page | To know which post or video actually brought people here | Legitimate interest in knowing what works |
| Page events: page loaded, button clicked, form submitted, demo screen opened | To see which parts of the page are used and which are ignored | Legitimate interest |
We record the timestamp and the version of the consent text you agreed to, so that consent means something specific rather than a vague yes.
What we do not collect
- No advertising or social pixels. No Google Analytics, no Meta pixel, no TikTok pixel, no session recording.
- No cookies for tracking. The site stores nothing in your browser for advertising purposes.
- No card numbers. This site never asks for them. If you pay online, you pay on the payment provider’s own page and we never see your card number.
- No purchased lists. If you are hearing from us, you typed your address into this form.
- No review content, no customer audio, no Google account credentials.
Smart Cards, Review Points and the Connect form
When someone taps or scans a Vincivo card or stand, we record that an action was opened (the time, the kind of action and whether it came from NFC, QR or a direct link). We do not store the visitor's IP address or device identifier; a salted hash is used only to rate-limit abuse and is purged within 48 hours.
If a visitor fills in the Connect form on a card, we store the name, phone or email and message they typed, together with the version and hash of the consent text they accepted, for the card owner to reply. That data is kept for 90 days and then erased. It is shared only with the owner of that card.
If a visitor chooses to ask the card's assistant (Vinci) a question and ticks the AI processing box, that single question is sent to an AI provider (Anthropic) to draft the reply. The provider does not receive the visitor's contact details or the conversation history.
Who else sees it
The site is hosted on Netlify, which serves the pages and necessarily sees the IP address of anyone loading them. Orders and account data are stored in a Supabase database in the United States (us-east-1) under our control. Sign-in and verification emails are delivered through Resend. Each of them processes data on our behalf.
How long it is kept
Orders are kept for three years for tax and accounting records, then deleted. Early-access entries are kept until the launch they were collected for is finished, or until you ask us to delete them, whichever happens first. If the product is discontinued the list is deleted. Page event records are kept for 24 months and are not tied to your name.
Your rights
Wherever you live, you can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or withdraw consent. One email to support@vincivo.com is enough and we will not ask you why.
If you are in the EU or UK you have these rights under the GDPR, including the right to complain to your supervisory authority. If you are in California you have the rights described in the CCPA/CPRA, including the right to know and the right to delete; we do not sell or share personal information as those terms are defined there. If you are in Connecticut you have the rights described in the CTDPA.
Every email carries an unsubscribe link that works on the first click. Unsubscribing removes you from the list; it does not require you to write to anyone.
Children
This is a product for working adults. We do not knowingly collect anything from anyone under 16, and we delete it if we find out we have.
Security
Data travels over HTTPS and is stored with the hosting provider's access controls. No system is perfect; if a breach affects your data we will tell you and the relevant authority as required by law rather than quietly.
Changes
If this policy changes in a way that affects what we do with data you already gave us, we will email the list before it takes effect. The version number at the top of this page changes every time the text does.