Privacy Policy — VivaDialog

Last updated: 18 October 2026

VivaDialog ("we", "us") is operated by Alchasoft Digital (Indonesian individual business, NIB 1610260084929, Surabaya, Indonesia). This policy explains what data we collect, why, and your rights.

1. Data we collect

Account data: name, email, password hash, workspace settings, team members.

Connected social accounts: when you connect Facebook Pages, Instagram, or Threads via Meta OAuth, we receive and store access tokens and account identifiers needed to read and reply to your messages. Tokens are stored encrypted and never exposed to the frontend.

Message content: comments, direct messages, and conversation history from your connected accounts, plus replies you (or your automations/AI) send. This is the core of the service — we cannot provide an inbox without it.

AI processing data: message text sent to our AI provider to generate replies, plus token counts and cost metering per request.

Usage data: quota consumption, feature usage, log data (IP address, timestamps, error diagnostics).

Beta application data: when you apply for the closed beta on vivadialog.com, we store your name, email, the social accounts you list, your daily comment and DM volume, your current tool, your country, and a one-way hash of your IP address, only to review applications and contact you about the beta.

Payment data: processed by Paddle (our Merchant of Record). We do not see or store your card numbers — Paddle handles charging, tax, and receipts.

Cookies and browser storage: one affiliate attribution cookie (vd_vid, kept up to 400 days and renewed on each affiliate link click, last click wins), used only to credit referrals. Your dashboard login token is kept in your browser's local storage, not in a cookie.

2. How we use data

• Operate the service: inbox, automation rules, scheduled posts, AI replies, analytics.
• Enforce quotas and prevent abuse.
• Process payments and affiliate commissions (via Paddle and our affiliate ledger).
• Communicate about your account (security, billing, product changes).
• Improve reliability (aggregated, non-identifying diagnostics).

We do not sell your data. We do not use your message content to train AI models.

3. Sub-processors

We share data only as needed to operate the service:

If you use BYOK, message text goes to your chosen AI provider instead, under that provider's terms.

4. AI specifics

• Customer messages are sent to the AI provider with a system prompt we control; the AI receives no tools and its output is filtered before sending.
• We log token usage and cost per request for metering and quota enforcement.
• AI providers process content to provide the service; see their policies for retention details. We route production traffic to paid models, not free training-tier endpoints.

5. Data retention

• Workspace data (conversations, schedules, metrics, AI logs) is kept while your account is active.
• After trial expiry without subscription, or after you delete your workspace: data is kept 30 days, then permanently deleted.
• Backups roll off within the same window.
• Affiliate ledger records may be kept longer where required for tax/fraud records.

6. Security

Tokens and keys are encrypted at rest (AES-256-GCM); secrets never appear in logs, URLs, or frontend responses. Access is workspace-scoped. No system is perfectly secure — report issues to support@vivadialog.com.

7. Your rights

You may request access, correction, export, or deletion of your personal data at support@vivadialog.com. Deleting your workspace triggers the 30-day deletion above.

8. International transfers

Our infrastructure currently runs in the United States (with EU expansion planned). If you are outside the US, your data is transferred there to operate the service.

9. Children

VivaDialog is not intended for children under 18.

10. Changes

We will announce material changes in-app or by email at least 14 days before they take effect.

11. Contact

Alchasoft Digital — privacy questions: support@vivadialog.com.