VYVO OS
This Privacy Policy describes how VYVO Living General Trading L.L.C-FZ ("VYVO," "we," "us," or "our"), a company registered at IFZA Business Park, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates, collects, uses, shares, and protects information when you use VYVO OS (the "Service"), accessible at vyvo-os.com and related subdomains.
VYVO OS is a software-as-a-service platform that connects to your Shopify store, advertising platforms, analytics services, and automation tools to provide unified analytics, intelligence, and automated workflows. By using the Service, you agree to the practices described in this Privacy Policy.
When you connect third-party services to VYVO OS, we receive data from those services on your authorization. This includes:
Our public marketing website records a small set of anonymous events using our own first-party systems: which pages were viewed, which buttons were clicked, which pricing tier was selected, the website you arrived from, and any campaign parameters contained in the link you followed. If you request a business brief, we also record the store address you give us and the answers you type, so that we can produce the brief and — if you go on to apply or open an account — carry that work forward into it.
This measurement sets no cookies, uses no advertising or cross-site trackers, and builds no profile of you. A random session identifier is held in your browser's session storage and is discarded when you close the tab. We do not store your IP address — it is hashed momentarily to limit abuse, then discarded. No free-form text is recorded. Nothing on the marketing website identifies you until you choose to tell us who you are, by requesting a business brief, submitting an application, or creating an account.
If you do go on to apply or create an account, we associate that session identifier with your record so that we can understand how people first found us. You can prevent this collection entirely by blocking the script vyvo-beacon.js in your browser; the website functions normally without it.
We also use Cloudflare Web Analytics on the marketing website for aggregate traffic and performance measurement. It is cookieless and does not track visitors across websites.
On our business-brief page you may choose to answer by voice instead of typing. This is entirely optional, never on by default, and typing does everything voice does.
If you use it, your browser performs the transcription, not us, using the speech recognition built into it. In Chrome and Edge that means the audio is sent to Google's speech service by your browser and is handled under Google's terms, not ours. We never receive the audio itself — only the text your browser produces, which is treated exactly like text you had typed. We tell you this on the page at the moment you first switch the microphone on, and your browser will ask your permission before it listens.
We use information to:
We do not sell your personal information. We do not use the data we receive from your connected services (Shopify, Meta, Google, Stripe) to train AI models that benefit other customers or third parties. Your tenant data is isolated and used only to provide the Service to you.
We share information only as described below:
We do not share your data with advertising platforms or sell it to data brokers.
Data we receive from the Meta APIs is used solely to provide the analytics and automation features you have configured within VYVO OS. We do not use Meta data for advertising on other platforms, do not transfer Meta data to third parties except as necessary to provide the Service, and do not retain Meta data beyond what is required to provide your reports and run your authorized automations. You may revoke our access to your Meta account at any time via Facebook Settings → Business Integrations or by disconnecting the integration within VYVO OS.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google Analytics data exclusively to provide the analytics and reporting features within VYVO OS. We do not transfer this data to third parties except as necessary to provide the Service or comply with applicable law. You may revoke our access via your Google Account permissions at any time.
We access your Shopify store data on your authorization via the Shopify Admin API to provide product analytics, order tracking, inventory intelligence, and automated workflows. We follow Shopify's Partner Program and API Terms regarding data handling and protection.
We retain your information for as long as your account is active and as needed to provide the Service. After account closure, we retain account and configuration data for up to 90 days to allow account recovery, then delete or anonymize it, except where longer retention is required for legal, accounting, or regulatory purposes.
Data received from connected third-party services is retained according to operational necessity for the features you have enabled. You can request export or deletion of your data at any time by emailing privacy@vyvo-os.com.
We implement industry-standard security measures including encryption in transit (TLS 1.2+), encryption of sensitive credentials at rest, access controls based on the principle of least privilege, multi-tenant data isolation enforced at the application and database layers, and monitoring for unauthorized access. No method of transmission or storage is 100% secure; in the event of a security incident affecting your information, we will notify you and applicable authorities as required by law.
VYVO OS operates from the United Arab Emirates and uses service providers located in multiple jurisdictions including the United States and the European Economic Area. By using the Service, you consent to the transfer of your information to these jurisdictions. Where applicable, we rely on standard contractual clauses or other lawful transfer mechanisms.
The signed-in application uses cookies and similar technologies to:
You can control cookies through your browser settings. Disabling cookies will impair functionality of the Service.
The marketing website sets no cookies of its own and uses no advertising, retargeting, or cross-site tracking technologies. It requires no cookie consent banner because it places no cookies. How it is measured is described in Section 1.4, and the optional voice input in Section 1.5.
Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), you have rights to access, correct, delete, restrict processing of, and port your personal data, as well as to object to processing and to withdraw consent. To exercise these rights, contact privacy@vyvo-os.com.
Under the General Data Protection Regulation (GDPR), you have rights of access, rectification, erasure, restriction, data portability, objection, and the right to lodge a complaint with your supervisory authority. To exercise these rights, contact privacy@vyvo-os.com.
Under the California Consumer Privacy Act (CCPA/CPRA), California residents have rights to know what personal information we collect, request deletion, request correction, and opt out of sale or sharing of personal information. We do not sell or share personal information as defined by the CCPA. To exercise these rights, contact privacy@vyvo-os.com.
VYVO OS is intended for business use by adults (18 years or older). We do not knowingly collect personal information from children. If we learn we have collected information from a child, we will delete it.
We may update this Privacy Policy from time to time. Material changes will be communicated via email to account holders and posted at this URL with an updated "Last updated" date. Continued use of the Service after changes take effect constitutes acceptance.
For privacy questions, data subject requests, or concerns:
Mailing address:
VYVO Living General Trading L.L.C-FZ
IFZA Business Park, Dubai Digital Park
Dubai Silicon Oasis, PO Box 342001
Dubai, United Arab Emirates