Privacy policy

1. Who we are

Givvigo is run by [Company name] (org. no. [org. no.]), “we”. You can reach us at tomdeng0611@gmail.com.

2. Our two roles

For the data about you and your account (your name, work email, company name and a hashed password) we decide why and how it is used. We are the “controller” of that data.

For the data you type into Givvigo about your own customers, contacts, cases, activities and offers, your company decides why and how it is used. You are the controller and we are your “processor”: we only handle that data to run the service for you. A data processing agreement is available on request.

3. What data we handle

• Account data: name, work email, company name, role, and your password stored only as a one-way hash (nobody, including us, can read it).
• Content you enter: customers, contacts (name, email, phone), cases, activities, notes and offers.
• Offer activity: when an offer you sent is opened, accepted or declined, and the time. The customer who answers does not need an account.
• Emails we send: sign-up confirmation, password reset, and the offers you choose to send. Offers are sent in your name with your address as the reply-to.
• Technical logs kept by our hosting provider (time, page, IP address, errors) for security and troubleshooting.
• Cookies: one to keep you signed in and one to remember your language. We do not use advertising or tracking cookies.

4. Why we use it, and the legal basis

• To provide the service you signed up for, including sending emails you ask for (contract, GDPR art. 6(1)(b)).
• To keep the service secure and prevent abuse, for example login limits and sign-up checks (legitimate interest, art. 6(1)(f)).
• To follow the law, for example accounting or requests from authorities (legal obligation, art. 6(1)(c)).
• We do not sell personal data and we do not use it for advertising.

5. AI features

The AI features (a next-step suggestion for a case, and “Plan my day”) only run when you click the button. They only suggest; nothing changes until you add the suggestion yourself.

When an AI provider is switched on, the text needed for your request is sent to OpenAI: customer names, case titles, values, activity texts and offer totals. Email addresses and phone numbers are not sent. The screen says which provider answered. Without an AI key, simple built-in rules are used and no data leaves the service. See OpenAI’s current terms for how they handle API data.

6. Who we share data with

We use a few service providers (sub-processors) to run Givvigo. We do not share data with anyone else unless the law requires it.

• Google Cloud: hosting and database, in the europe-north1 region (Finland).
• Resend: sending email (EU region).
• OpenAI: only for AI suggestions, only when you use them (USA).

7. Transfers outside the EEA

Some providers may process data outside the EEA (for example OpenAI in the USA). In that case we rely on the safeguards the provider offers, such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

8. How long we keep data

We keep your data while your account exists. If you ask us to close your account, we delete the company’s data within 30 days. Backups and logs are cleared on their normal schedule. We may keep what the law requires us to keep.

9. Security

Passwords are hashed. Each company’s data is kept separate and is only reachable by that company’s signed-in users. Traffic is encrypted. Logins and sign-ups are rate-limited. No system is perfectly secure; if a breach affects you we will tell you and the authorities as the law requires.

10. Your rights

You can ask us for access to your data, to correct it, to delete it, to restrict or object to its use, and to receive it in a portable format. Write to tomdeng0611@gmail.com. If you disagree with how we handle your data you can complain to the Norwegian Data Protection Authority (Datatilsynet, datatilsynet.no).

If you are a customer or contact of a company that uses Givvigo, please contact that company first: they decide how your data is used. We will help them answer you.

11. Children

Givvigo is for businesses. It is not intended for anyone under 18.

12. Changes

If we change this policy in a way that matters, we will tell you by email or in the app before it takes effect. The date at the top shows the latest version.