This Privacy Policy explains how Qivioo (“Qivioo”, “we”, “us”, or “our”) collects, uses, shares, and protects personal data.
It applies when you visit Qivioo, create or use a merchant account, contact us, subscribe to our services, or interact with a store powered by Qivioo.
1. Who is responsible for your data
Qivioo acts as the data controller when we decide why and how personal data is used, including information relating to merchant accounts, subscriptions, platform security, website visitors, and support requests.
When a merchant uses Qivioo to collect and manage information about its store customers, the merchant generally acts as the controller and Qivioo acts as its processor or service provider. The merchant decides why customer data is collected and how it is used for orders, delivery, support, marketing, and other store operations.
If your question concerns an order or information submitted to a particular store, contact that merchant first. We will assist the merchant with valid privacy requests where required.
2. Personal data we collect
Account and identity information
We may collect your name, email address, telephone number, password credentials in protected form, account role, preferred language, and other information needed to create and secure your account.
Business and store information
We may collect a business name, store name, commercial information, address, domain, brand assets, product information, delivery settings, payment-method configuration, tax settings, and other information you add to the platform.
Subscription and transaction information
We may receive your selected plan, billing status, invoice information, transaction references, currency, tax information, and limited payment metadata from our subscription billing provider.
Card details are normally collected and processed directly by the relevant payment provider. Qivioo does not intend to store complete card numbers or card security codes.
Store customer and order information
When someone interacts with a Qivioo-powered store, we may process information on behalf of the merchant, including:
Name, telephone number, email address, and delivery address
Products viewed, cart contents, orders, returns, and fulfilment status
Delivery instructions and customer notes
Chosen payment method and payment status
Messages, support enquiries, reviews, and communication preferences
Technical information associated with the storefront session
Content and files
We process product images, logos, documents, store pages, marketing content, and other files uploaded or created through Qivioo.
Communications
We collect information you provide when contacting support, reporting a problem, completing a survey, or sending feedback. We may keep the message, contact details, attachments, and our response.
Device and usage information
We may automatically collect IP address, device and browser type, operating system, language, approximate location derived from an IP address, referring page, pages visited, timestamps, error records, security events, and similar diagnostic information.
Connected services
If you connect an external service, we may receive and exchange account identifiers, access tokens, configuration details, event data, and other information necessary to operate that integration.
3. How we collect personal data
We collect personal data:
Directly from you when you register, configure a store, subscribe, or contact us
From customers when they use a merchant’s storefront
Automatically through cookies, logs, and similar technologies
From payment, authentication, domain, messaging, analytics, fulfilment, and other providers
From merchants, authorised users, and integrations that submit information to Qivioo
4. How we use personal data
We use personal data to:
Create, authenticate, and administer accounts
Provide storefronts, checkout, order management, delivery, inventory, and related services
Process subscriptions, maintain billing records, and prevent billing errors
Send service notices, security alerts, and requested communications
Enable merchant-configured email and WhatsApp automation
Operate integrations and add-ons selected by a merchant
Provide support and resolve technical problems
Protect accounts, investigate abuse, and prevent fraud
Monitor reliability, diagnose errors, and improve Qivioo
Meet legal, accounting, regulatory, and enforcement obligations
Establish, exercise, or defend legal claims
Send marketing where you have consented or where otherwise permitted by law
5. Legal grounds for processing
Depending on the circumstances and applicable law, we process personal data:
With your express consent
To enter into or perform a contract with you
To comply with a legal obligation
To protect a person’s vital interests
For legitimate business interests where recognised by law and not overridden by your rights
To establish, exercise, or defend legal claims
Where consent is required, you may withdraw it. Withdrawal does not affect processing already carried out lawfully, but it may prevent us from providing a feature that depends on that information.
6. Store communications
A merchant may enable order confirmations, delivery updates, review requests, and abandoned-cart reminders through WhatsApp or email.
The merchant is responsible for ensuring that these communications are lawful, expected, and supported by any required consent. Recipients should be given a practical way to stop marketing communications.
Qivioo may send essential account, transaction, security, and service messages where necessary to provide the service or protect an account.
7. Artificial intelligence
Some optional Qivioo features use artificial intelligence service providers.
When a merchant uses content-generation features, the instructions and content submitted for generation may be sent to an AI provider so it can return the requested result. Users should avoid entering confidential, sensitive, or unnecessary personal data in generation prompts.
When AI Order Review is enabled, structured order signals may be sent to an AI provider to identify matters that deserve human review. The review is designed to exclude customer names, raw contact details, addresses, and customer notes from the AI assessment.
AI Order Review does not make the final decision about a customer or order. The merchant remains responsible for reviewing the result and deciding what action, if any, is appropriate.
8. Cookies and tracking
Qivioo uses cookies and similar technologies to keep users signed in, remember preferences, protect accounts, maintain shopping carts, measure performance, and understand how the service is used.
Some cookies are necessary for Qivioo to operate. Optional analytics or advertising technologies should be used according to the visitor’s consent choices and applicable law.
Merchants may enable services such as Google Analytics, Meta Pixel, or other marketing tools on their storefronts. Those tools may collect information under the merchant’s instructions and their providers’ privacy terms. The merchant is responsible for configuring consent and providing suitable notice.
You can control many cookies through your browser and any consent controls presented on the website. Blocking necessary cookies may prevent certain features from working.
9. When we share personal data
We do not sell personal data.
We may share personal data with:
Cloud hosting, infrastructure, database, storage, and security providers
Subscription billing and payment providers
Email, WhatsApp, notification, and customer-support providers
Analytics and performance-monitoring providers
AI providers used for optional AI features
Domain, fulfilment, review, cloud-storage, and other integration providers selected by a merchant
Professional advisers, auditors, insurers, and legal representatives
Government authorities, regulators, courts, or law-enforcement bodies where legally required
A buyer, investor, affiliate, or successor involved in a genuine corporate transaction
Service providers may process data only for the services they provide to us or as otherwise allowed by law. A third-party integration selected by a merchant may also process information under its own terms and privacy policy.
10. International transfers
Some service providers may process or store information in other countries.
Where personal data is transferred internationally, we assess the protection available in the destination and use contractual, organisational, or technical safeguards required by applicable law.
11. How long we keep personal data
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected.
Retention depends on the type of information and may include:
Account and store data for the life of the account and a reasonable period after closure
Order and customer data according to the merchant’s instructions and applicable retention duties
Billing, accounting, and transaction records for periods required by applicable law
Security and technical logs for periods needed to investigate incidents and protect the service
Support records for as long as needed to resolve issues and maintain an appropriate service history
Backups until they are replaced through the normal backup cycle
We may retain information longer when required by law, necessary for a dispute, or needed to prevent abuse. When information is no longer required, we delete it, anonymise it, or securely isolate it until deletion is possible.
12. Security
We use technical and organisational safeguards appropriate to the nature of the information and the risks involved. These may include access controls, authentication, encryption where appropriate, logging, backups, monitoring, restricted staff access, and software-maintenance practices.
No service can guarantee absolute security. You are responsible for using a strong password, protecting account credentials, limiting staff access, and promptly reporting suspected unauthorised activity.
13. Personal data breaches
We maintain processes for assessing and responding to security incidents.
Where a personal data breach creates the level of risk specified by applicable law, we will notify the relevant authority and affected individuals within the legally required period.
14. Your privacy rights
Subject to applicable law and relevant exceptions, you may have the right to:
Know whether and why your personal data is being processed
Request access to your personal data
Request correction or updating of inaccurate information
Request deletion, blocking, or restriction of certain processing
Withdraw consent
Object to certain processing or direct marketing
Request transfer or portability of eligible information
Ask for information about recipients or international transfers
Request review of a significant decision made solely through automated processing
File a complaint with the competent data-protection authority
To exercise a right, email hey (@) qivioo.com. Tell us what you are requesting and provide enough information for us to locate the relevant account or records.
We may verify your identity before responding. We will respond within the period required by applicable law and explain if an exception prevents us from completing part of a request.
If Qivioo holds information only on behalf of a merchant, we may direct your request to that merchant or assist the merchant in responding.
15. Marketing choices
You can unsubscribe from Qivioo marketing by using the link provided in the message or by contacting us.
Stopping marketing does not prevent necessary messages about your account, subscription, transactions, security, or material service changes.
16. Children
Qivioo merchant accounts are intended for people aged 18 or older.
Qivioo is not designed for merchants to collect children’s personal data unless they have a lawful reason, appropriate safeguards, and any required consent from a parent or guardian.
If you believe personal data relating to a child has been collected unlawfully, contact us promptly.
17. Third-party services
Qivioo may link to or integrate with services operated by other organisations. Their privacy practices are governed by their own policies. Review those policies before providing information or enabling an integration.
18. Changes to this policy
We may update this Privacy Policy when our services, providers, or legal obligations change.
We will publish the revised policy and update the date shown on the page. Where a change materially affects how we use personal data, we will provide additional notice or request consent when required.
19. Contact and complaints
Questions, privacy requests, and complaints can be sent to:
Qivioo Privacy Team
Muscat, Oman
Email: hey (@) qivioo.com
You may also submit a complaint to the competent data-protection authority where you live.