Privacy Policy

1. Scope of This Policy

This Policy applies to information we collect through the Site, when you book a call or contact us, and in the course of providing the Services. It does not apply to information collected by third-party services you choose to use (which are governed by their own policies), or to data we process solely on your behalf as your service provider in connection with a project, which is handled under our agreement with you.

2. Information We Collect

Information you provide

• Contact & booking details — such as your name, email address, phone number, company, and the time you schedule, when you book a call (through our scheduling provider, Cal.com), email us, or fill out a form.
• Project information — details about your idea, requirements, content, files, accounts, and any materials you share with us to scope or build your project.
• Site check requests — when you run the free site check with your email, we receive the email address and the website address you submitted. The report itself (scores and findings for that public website, with no email in it) is stored on our hosting provider’s file storage and can be opened by anyone who has its link. Your email and website address are sent to our team inbox so we can follow up, and to you with your report link. We also keep a scrambled (hashed) version of your email and network address, used only to limit how often one person can run checks.
• Communications — the contents of messages, feedback, and correspondence you send us.
• Payment information — when you pay for Services, payment is processed by our third-party payment processor. We do not store full card numbers; we may receive limited transaction details (such as confirmation, amount, and the last four digits).

Information collected automatically

• Usage & device data — such as IP address, browser type, device and operating system, referring/exit pages, pages viewed, and timestamps, collected through server logs and privacy-conscious analytics (we use Vercel Analytics).
• Cookies & similar technologies — as described in Section 5.

Information from third parties

We may receive information from service providers that help us operate the Site and Services (for example, our scheduling, hosting, analytics, and payment providers), consistent with their policies.

3. How We Use Information

We use information to:

• provide, operate, and maintain the Site and Services;
• schedule and conduct calls, respond to inquiries, and communicate with you;
• scope, build, deliver, and support your project;
• process payments and maintain records, including for accounting and tax purposes;
• understand and improve the Site and Services through analytics;
• protect the security and integrity of the Site, prevent fraud and abuse, and enforce our Terms;
• comply with legal obligations and establish, exercise, or defend legal claims; and
• with your consent where required, send updates or marketing (you can opt out at any time).

4. Legal Bases for Processing

Where applicable law (such as the EU/UK GDPR) requires a legal basis, we rely on one or more of the following: performance of a contract with you (or to take steps at your request before entering one); your consent (which you may withdraw at any time); our legitimate interests in operating, securing, and improving our business in a manner not overridden by your rights; and compliance with legal obligations.

5. Cookies & Tracking Technologies

We and our providers use cookies and similar technologies to operate the Site, remember preferences, measure traffic, and understand how the Site is used. We use Vercel Analytics, which is designed to be privacy-conscious, and our booking section embeds Cal.com, which may set its own cookies. Most browsers let you refuse or delete cookies through their settings; doing so may affect how parts of the Site function. Where required by law, we will seek your consent for non-essential cookies. We do not currently respond to browser "Do Not Track" signals; we treat recognized opt-out preference signals (such as Global Privacy Control) as a valid request to opt out of sale/sharing where applicable.

6. How We Share Information

We do not sell your personal information. We share information only as described here:

• Service providers / subprocessors — companies that perform services for us, such as hosting and deployment (Vercel), scheduling (Cal.com), analytics, payment processing, and email/communications. They may access information only to perform services on our behalf and are bound by confidentiality and data-protection obligations.
• Legal & safety — when we believe disclosure is reasonably necessary to comply with law, regulation, legal process, or governmental request; to enforce our Terms; or to protect the rights, property, or safety of Delvir, our users, or others.
• Business transfers — in connection with a merger, acquisition, financing, reorganization, or sale of assets, in which case information may be transferred as part of that transaction, subject to this Policy.
• With your direction or consent — when you ask us to share information or otherwise consent.

7. We Do Not Sell Your Data

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under applicable U.S. state privacy laws. If this ever changes, we will update this Policy and provide any opt-out required by law.

8. Third-Party Links & Services

The Site and the products we build may link to or rely on third-party websites and services that we do not control. This Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party service you use.

9. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy — including to provide the Services, maintain business and financial records, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements — and then delete or de-identify it. Retention periods vary based on the type of information and the purpose for which it is processed.

Site checks. Reports and the hashed counters behind the usage limit are deleted automatically after 90 days. The copy of your email and website address in our team inbox is deleted within 90 days as well. You can ask us to delete it sooner at team@delvir.co.

10. Data Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information against loss, misuse, and unauthorized access, disclosure, alteration, and destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials and any access you share with us confidential, and for the security of systems and accounts within your control.

11. Your Rights & Choices

Subject to applicable law, you may have the right to access, correct, update, or delete your personal information, to obtain a copy or port it, to object to or restrict certain processing, and to withdraw consent. You can also opt out of marketing emails at any time using the unsubscribe link or by contacting us. To exercise any right, email us at team@delvir.co. We will respond as required by applicable law and may need to verify your identity before acting on a request. We will not discriminate against you for exercising your privacy rights.

12. U.S. State & International Rights

California & other U.S. states. If you are a resident of California or another U.S. state with a comprehensive privacy law, you may have rights to know/access, delete, correct, and opt out of the "sale" or "sharing" of personal information, and to be free from discrimination for exercising those rights. As stated above, we do not sell or share personal information for cross-context behavioral advertising. You may exercise your rights by contacting us at team@delvir.co, and you may use an authorized agent where permitted by law.

EEA / UK. If you are in the European Economic Area or the United Kingdom, you have the rights described in Section 11 under the GDPR, and you have the right to lodge a complaint with your local supervisory authority. Our legal bases are described in Section 4.

13. Children's Privacy

The Site and Services are intended for adults and are not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us at team@delvir.co and we will take reasonable steps to delete it.

14. International Data Transfers

We are based in the United States, and our service providers may process information in the United States and other countries. If you access the Site or Services from outside the United States, you understand that your information may be transferred to, stored, and processed in the United States and elsewhere, where data-protection laws may differ from those in your jurisdiction. Where required, we implement appropriate safeguards for such transfers.

14a. TikTok Integration (Delvir Draft Uploader)

Delvir Draft Uploader is an internal tool we use to schedule and publish videos to TikTok accounts that Delvir itself owns and operates. It is not offered to outside creators, and no third-party end user ever authenticates through it.

What we request from TikTok. When a Delvir team member connects one of our own accounts, TikTok's consent screen grants this tool the connected account's basic profile information (nickname, username, and avatar) and the ability to upload and publish video on that account's behalf. We request only the access needed to operate the scheduler — nothing beyond basic profile identification and posting.

Retention. We store the encrypted access credentials needed to keep an account connected, along with the caption and scheduling metadata for videos in the queue. We keep this only for as long as the account stays connected to the tool.

Deletion. Disconnecting an account removes its stored credentials. Any team member can also request deletion of an account's connection data at any time by emailing team@delvir.co; we process such requests promptly.

15. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above and post the updated Policy on the Site. Material changes will be effective upon posting (or as otherwise stated). Your continued use of the Site or Services after the effective date constitutes acceptance of the updated Policy.

16. Contact Us

If you have questions, requests, or concerns about this Policy or our privacy practices, contact us at:

Delvir Limited Liability Co.
30 N Gould St, Ste R, Sheridan, WY 82801
Email: team@delvir.co
Web: delvir.co