Privacy Policy

We process your data based on:

• Contract performance: To provide our services
• Legitimate interests: To improve our services and prevent fraud
• Legal compliance: To meet regulatory requirements
• Consent: For marketing communications (where required)

We retain your data for:

• Account data: During your subscription and up to 24 months after termination
• Financial records: As required by law (typically 7 years)
• Marketing data: Until you withdraw consent
• Technical logs: Up to 12 months for security purposes

We may share your data with:

• Service providers: Cloud hosting, payment processing, analytics
• Integration partners: Fleet management systems you connect
• Legal authorities: When required by law
• Business transfers: In case of merger or acquisition

We never sell your personal data to third parties.

You have the right to:

• Access: Request copies of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data
• Portability: Receive your data in a structured format
• Restriction: Limit how we process your data
• Objection: Object to processing based on legitimate interests
• Withdraw consent: For consent-based processing

We use cookies for:

• Essential cookies: Required for service functionality
• Analytics cookies: To understand usage patterns
• Preference cookies: To remember your settings

You can manage cookie preferences in your browser settings.

Visit statistics for vivadrive.ai are kept in our own analytics tool, which does not use cookies or any other identifiers stored permanently on the user's device. We record page views, clicks on page elements, form submissions, the traffic source (referring page and campaign parameters), language, an approximate country derived from the browser time zone, and the device type. IP addresses are not stored; they are used only to compute a cryptographic hash that changes every day and does not allow a person to be identified or visits on different days to be linked. The session identifier is kept in the browser tab memory (sessionStorage) and is deleted when the tab is closed. The legal basis is our legitimate interest in analysing and improving the use of the website (Article 6(1)(f) GDPR). Statistical data are retained for no longer than 13 months. When a contact form is submitted, the course of the current session on the website (pages visited and elements clicked) is attached to the enquiry so that we can respond to it better.

Your data may be transferred outside the EU to our service providers. We ensure adequate protection through:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions by the European Commission
• Other appropriate safeguards under GDPR

We protect your data through:

• Encryption in transit and at rest
• Regular security assessments
• Access controls and authentication
• Employee training on data protection
• Incident response procedures

We may update this Privacy Policy periodically. We will notify you of significant changes via email or through our service. Continued use after changes indicates acceptance.