Privacy policy

This site is operated by DCI Brands LLC, a Wyoming limited liability company. For the information described here we are the controller. Write to constantine@vavusai.com. Our representative in the European Union under GDPR Article 27 is Dragoș Ignat, Str. General Șova nr. 21, Letea Veche, jud. Bacău, 607270, Romania. You may contact the representative on any matter relating to the processing of your personal data, in addition to or instead of contacting us. We are not required to appoint a data protection officer and have not appointed one.

Inquiries. What you type into the quote form: name, email address, company, role, the system and platforms you are interested in, delivery mode, integrations, whether data must be migrated, timeline, and any notes. We use it to prepare and send your quote, to follow up, and to run the engagement if you proceed. Basis: steps taken at your request before entering a contract, and our legitimate interest in responding to business inquiries.

Email. Correspondence you send us, and our replies. Basis: the same, and our legitimate interest in keeping a record of what was agreed.

Server logs. IP address, page requested, browser type, and time, recorded by our hosting infrastructure for security and reliability. We do not use them to profile visitors. Basis: our legitimate interest in keeping the site available and secure.

Vavus measures how its websites are used, to improve them. What runs before you choose depends on where you are. In most EU and EEA countries, and wherever your location is unknown, our website servers count page loads from the request your browser already sends (page, referring website, browser and operating system family, device type, language and country), with no cookie, script or identifier. In France, Spain, the Netherlands, Italy, the United Kingdom, Canada, Turkey, China, South Korea, Argentina, the United Arab Emirates and Saudi Arabia (and India from 13 May 2027), an anonymous Vavus script also counts visits, time on page, scrolling, page speed and named actions after a visible notice; it stores nothing on your device. Everywhere else, Vavus measures visits, pages, clicks, campaign tags and the advertising network a visit came from with its own first-party cookie, after a notice. If you accept, Vavus measures the same detail in every country, including where you click on a page, and Google Analytics runs. Our team may receive a private notification when a measured visit starts. Short links on our websites (addresses that start with /go/) count each click before sending you on, the same anonymous way: the referring website, browser and operating system family, device type and country, with the daily key described below and no cookie, script or identifier. Reject, Global Privacy Control and Do Not Track stop that count too. Anonymous statistics use a key that our server calculates from the website, your IP address and your browser type together with a random value that changes every day. The random value is deleted once the day's totals are calculated, so the key cannot be recreated or linked to another day. The key is never stored in your browser, your IP address is not stored, and only totals are kept: visitors, visits, bounce rate, time on site and breakdowns by page, source and device. Country is estimated from the request IP at the time of the request. Location is an estimate, and does not determine every privacy right you may have.

Almost everything comes from you. Where you name a colleague or a third party in the form or in an email, we hold that person's details because you supplied them, we use them only to run the same inquiry, and we apply this policy to them. If you are that person, write to us and we will tell you what we hold.

We do not sell personal information, we do not share it for advertising or cross-context behavioral advertising, and we do not disclose it for anyone else's independent purposes. We use service providers who process it only on our written instructions: cloud hosting (United States), transactional email delivery, and a database provider. A named list is available on request. We may also disclose information where the law requires it, to enforce our agreements, to protect our rights, safety, or property, and to a buyer in connection with a sale of the business, under confidentiality.

Google Analytics receives measurements only after your analytics opt-in. Google processes them under its own privacy and data-processing terms and may process information outside your country. Advertising features and Google Signals are disabled for this website integration. Vavus measurement is first-party and self-hosted; we do not sell visitor information, share it for targeted advertising or send advertising click identifiers back to advertising networks.

We are in the United States and store this information there. If you are in the European Economic Area, the United Kingdom, or Switzerland, your information is transferred to us in the United States. That transfer relies on the European Commission's standard contractual clauses, together with the UK International Data Transfer Addendum and the Swiss amendments where they apply, and on supplementary measures we assess as appropriate. Ask us and we will send you a copy of the safeguards. Engagements that must keep data in a specific region are scoped that way in the written quote.

Inquiries that do not become an engagement: deleted 24 months after the last contact. Records of an engagement: for the life of the contract and for seven years afterward, or longer where tax, accounting, or limitation rules require. Server logs: 90 days. Backups are overwritten on their ordinary cycle.

Vavus keeps individual website sessions, events, click positions and related visitor-notification records on its server for 30 days, anonymous visit records for at most two days, and totals (hourly page counts and daily visitor, visit, bounce and duration totals) for 13 months. Notifications already delivered to your phone follow its notification settings. Browser identifiers expire after at most 90 days and privacy choices after 180 days. Google Analytics processes consented measurements separately under its privacy and data-processing terms, including network information it receives directly. Its event and user retention follows the relevant property settings; aggregate Google reports and existing report history may be retained longer. These Vavus retention periods do not describe Google report retention.

We protect this information with encryption in transit, access limited to named people who need it, logged administrative access, and secure deletion. No method of transmission or storage is completely secure, and we do not promise that ours is.

Depending on where you live, you may ask us to confirm and give you access to what we hold, correct it, delete it, give you a portable copy, restrict or object to processing, and withdraw consent where consent is the basis. You also have the right not to be discriminated against for exercising any of them.

Write to constantine@vavusai.com. We will verify your identity against what we already hold before we act, and you may use an authorized agent with written proof of authority. We answer within the time the applicable law allows, one month under the GDPR and 45 days under US state laws, and we will tell you if we need the extension those laws permit.

If we refuse a request, you may appeal by replying to our decision with the word "appeal". We will review it and give you a written answer, with reasons, within 45 days. You may also complain to your data protection authority or to your state attorney general.

Website visitor measurements include country, public page activity, browser and operating system family, device type, language, screen size, referral source and campaign tags and, where described above, random browser and session identifiers and click positions. We use these for internal measurement, service improvement and private visit alerts. We do not sell visitor information or share it for targeted advertising. Global Privacy Control and Do Not Track turn website measurement off. The rights and contacts above apply to website measurements as well as inquiries.

When we build, host, or maintain a system, the personal data inside it is yours. You are the controller and we are your processor or service provider, governed by the signed data processing agreement, not by this policy. If you are a user of one of those systems, contact the organization that runs it; if you contact us, we will pass your request to them.

This site is for business buyers. We do not knowingly collect information from anyone under 18. If you believe a child has sent us information, write to us and we will delete it.

If this policy changes, the effective date and version above change with it. Where a change materially affects an open inquiry or engagement, we tell you by email.