Privacy policy

The data controller for DocuCollect is Benoit Ammermann. Contact: contact@vivflow.com.

Account and profile data: email address, display name when provided, role (company user, client, or admin), and company association for company users.

Service data: project forms, checklist items, comments, invitation and reminder emails, and audit records needed to operate the product securely.

Client submissions: files and text values that clients upload or enter to complete a checklist. These are processed on behalf of the inviting company as part of providing the service.

Technical data: session cookies required for authentication, and standard server logs (for example IP address and user agent) used for security and reliability.

Provide and secure the service (contract / legitimate interests): authentication, document collection workflows, tenant isolation, and abuse prevention.

Communicate about the service (contract / legitimate interests): magic-link invitations, sign-in links, and client reminder emails when a company requests them.

Respond to support requests (legitimate interests / contract): messages you send via in-app help or email.

Comply with legal obligations when applicable.

We use infrastructure and email providers to run DocuCollect. Application data and file storage are hosted in the European Union (Supabase, eu-central-1 region). Transactional email is sent through our email provider (Brevo) using authenticated domain sending when configured.

Processors act only on instructions needed to deliver the service and are bound by appropriate data-processing terms.

We retain account and service data while your account or company workspace is active and for a reasonable period afterward as needed for security, billing disputes, or legal requirements.

Companies control the client forms and submissions in their workspace. When a company deletes data or closes access where the product allows it, we process that request in the application.

Depending on your situation, you may have the right to access, rectify, erase, restrict, or object to certain processing, and the right to data portability. To exercise these rights, email contact@vivflow.com.

If you are a client invited by a company, some requests may need to be handled with that company, because they decide which documents to collect and how long to keep them for their professional purposes.

DocuCollect uses essential cookies and similar storage for signed-in sessions and locale preference. We do not use advertising cookies on the marketing site.