Privacy Policy
Who we are
VIVERSIA is a multi-tenant CRM and business automation platform operated through viversiacrm.com. Organizations and businesses use VIVERSIA as separate tenants to manage their own CRM records, communications, workflows and connected services.
For privacy questions or requests, contact alexandru@viversiacrm.com.
Information we collect and process
VIVERSIA may process account and workspace information for authorized users, together with operational records needed to provide the service.
Tenants may provide or create CRM data such as contact names, phone numbers, email addresses, communication details, notes, pipeline status, tasks, campaign information, preferences, business records and other information they choose to manage in VIVERSIA.
The tenant is responsible for the information it submits to the platform and for using that information in accordance with applicable law and its own obligations.
Google account information
When a user connects a Google account, VIVERSIA may receive the Google account identifiers and profile information needed to establish and display the connection, such as the account email address and, where returned by Google, basic identity information.
Google account access is requested only for enabled product features and only after the user completes Google's OAuth authorization flow.
Gmail integration
For Gmail sending, VIVERSIA requests the scope https://www.googleapis.com/auth/gmail.send. This permission is used only to send email on behalf of the Google account connected by the authorized user.
VIVERSIA does not use this Gmail integration to read the user's inbox, retrieve incoming Gmail messages or browse mailbox content.
Google Calendar integration
For Google Calendar features, VIVERSIA may request https://www.googleapis.com/auth/calendar.events to create, update, inspect and manage calendar events used by enabled scheduling workflows.
VIVERSIA may request https://www.googleapis.com/auth/calendar.calendars.readonly to read calendar metadata needed to identify and use the selected calendar, and https://www.googleapis.com/auth/calendar.events.freebusy to check availability without reading unrelated event content.
OAuth tokens and connected accounts
OAuth refresh tokens and other persistent connection secrets stored by VIVERSIA are encrypted before they are persisted. Access to connected-account credentials is restricted to server-side components that need them to perform the authorized integration.
Users can disconnect supported Google connections from the relevant VIVERSIA settings. A user can also revoke VIVERSIA's access from the security or third-party access settings of the connected Google Account.
Tenant isolation
VIVERSIA separates tenant-owned CRM data and tenant-owned provider connections by organization. A tenant's CRM records, connected-account credentials and integration context are not intentionally made available for use by another tenant.
Platform administrators and authorized support or operations personnel may access information only where necessary to operate, secure, troubleshoot or support the service, subject to access controls.
AI assistant connections and Viversia Atlas
When an authorized user connects Viversia Atlas to ChatGPT or another supported AI assistant, VIVERSIA authenticates that user and derives the organization and data scope from the user's current VIVERSIA membership and permissions.
For supported requests, VIVERSIA may return tenant-scoped CRM information to the connected assistant provider so the assistant can answer the user's request. The public Viversia Atlas plugin is designed for read-only CRM access and does not expose phone numbers, WhatsApp numbers, email addresses, raw customer messages, notes, provider credentials or infrastructure secrets through its public reporting tools.
The assistant connection can be revoked from VIVERSIA Settings. Revocation invalidates the VIVERSIA OAuth grant used by that connection.
How information is used
Information is used to provide CRM functionality, business automation, communication, scheduling, reporting, workflow execution, account administration, security, troubleshooting and other features requested or configured by the tenant.
VIVERSIA does not sell personal data.
Retention and deletion
Data is retained for as long as needed to provide the service, maintain security and operational records, meet tenant instructions, or satisfy applicable legal or contractual requirements. Different categories of data may have different retention periods.
Authorized tenant users may remove records through available product functions where supported. Privacy or deletion requests can also be sent to alexandru@viversiacrm.com. A request may require verification and may be subject to legal, security, backup or audit retention requirements.
Security
VIVERSIA uses technical and organizational safeguards intended to protect platform data, including authenticated access controls, server-side secret handling, encrypted storage for supported OAuth credentials and tenant-scoped data access controls.
No internet service can guarantee absolute security. Security measures are reviewed and adjusted as the platform and its integrations evolve.
Google user data sharing and disclosure
VIVERSIA does not sell Google user data. Google user data is not shared, transferred or disclosed to third parties except where necessary to provide or maintain a user-requested Google-connected feature, to protect the security and integrity of the service, to comply with applicable law, or where the user has provided additional consent.
Where a service provider processes Google user data on behalf of VIVERSIA for an enabled feature, access is limited to the data necessary to provide that service and is subject to contractual, technical and organizational safeguards. VIVERSIA does not permit service providers to use Google user data for advertising or for their own unrelated purposes.
AI and Google Workspace data
VIVERSIA does not use raw, aggregated, anonymized or derived Google Workspace API user data to create, train or improve generalized or foundational artificial intelligence or machine-learning models.
VIVERSIA does not transfer Google Workspace API user data to third-party AI or machine-learning providers for the purpose of training or improving generalized or foundational models. Any processing of Google Workspace data by an AI-enabled feature must remain limited to providing the user-requested functionality and must comply with the applicable Google API Services User Data Policy.
Google API Services User Data Policy and Limited Use
VIVERSIA's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
The use of raw or derived user data received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.
Third-party services
VIVERSIA may use infrastructure, database, communications, AI, authentication and other service providers to operate enabled features. Information is shared with those providers only to the extent needed for the relevant service or integration and subject to the restrictions described in this policy.
Google API data is processed only for the Google-connected features described in this policy and according to the permissions granted by the user.
Contact
Privacy questions, access requests, correction requests and deletion requests can be sent to alexandru@viversiacrm.com.