Vivin app lda. ("VIVIN", "we", "us" or "our"), with registered office at Avenida Francisco Sá Carneiro 92, 7000‑757 Évora, Portugal, corporate taxpayer number 518093140, is the controller of the personal data processed through the VIVIN Rental Property Management platform at www.vivin.app (the "Platform").

We are committed to protecting your privacy and handling your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Portuguese data protection legislation.

1. Data We Collect

1.1 Account and Identification Data

When you register or use the Platform, we may collect: full name, email address, phone number, company name, billing address, and professional role.

1.2 Platform Usage Data

We collect data generated through your use of the Platform, including property information, booking records, tenant data, payment transaction details, contract documents, and communication logs.

1.3 Technical Data

We automatically collect: IP address, browser type and version, operating system, device identifiers, access timestamps, pages visited, and referring URLs.

1.4 Communication Data

Records of correspondence when you contact us, including support tickets, emails, and chat messages.

2. How We Use Your Data

We process your personal data for the following purposes:

Service delivery: to provide, maintain, and improve the Platform's functionality;
Account management: to create and manage your account, authenticate access, and process payments;
Communication: to send service-related notifications, respond to inquiries, and provide technical support;
Analytics: to analyze usage patterns, diagnose technical issues, and improve user experience;
Legal compliance: to comply with applicable legal obligations, including tax and accounting requirements;
Security: to detect, prevent, and respond to fraud, unauthorized access, or other illegal activities.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds under the GDPR:

Performance of a contract (Art. 6(1)(b)): processing necessary to provide the Platform services;
Legitimate interests (Art. 6(1)(f)): analytics, security, and service improvement;
Legal obligation (Art. 6(1)(c)): compliance with tax, accounting, and regulatory requirements;
Consent (Art. 6(1)(a)): where applicable, for marketing communications and non-essential cookies.

4. Data Sharing

We do not sell your personal data. We may share data with:

Service providers: cloud hosting (AWS), payment processors (Stripe), email delivery (SendGrid), analytics tools, and other providers essential to operating the Platform, under data processing agreements;
Integration partners: third-party rental platforms (e.g., HousingAnywhere, Spotahome, Uniplaces, Airbnb, Booking.com) when you enable integrations;
Legal authorities: when required by law, regulation, or legal proceedings.

5. International Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or equivalent mechanisms recognized under applicable law.

6. Data Retention

We retain personal data for as long as necessary to fulfill the purposes described in this policy, or as required by law. Specifically:

Account data: retained for the duration of your subscription plus 12 months after account closure;
Transaction and billing data: retained for 10 years as required by Portuguese tax legislation;
Technical logs: retained for up to 12 months;
Communication records: retained for 24 months after the last interaction.

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

Access: request a copy of the personal data we hold about you;
Rectification: request correction of inaccurate or incomplete data;
Erasure: request deletion of your data where there is no compelling reason for continued processing;
Restriction: request restriction of processing in certain circumstances;
Portability: receive your data in a structured, machine-readable format;
Objection: object to processing based on legitimate interests;
Withdraw consent: where processing is based on consent, withdraw it at any time.

To exercise these rights, contact us at privacy@vivin.app. We will respond within 30 days.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit and at rest, access controls, regular security audits, and incident response procedures.

9. Children's Privacy

The Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Platform. Continued use of the Platform after changes take effect constitutes acceptance of the revised policy.

11. Contact

For any questions or concerns regarding this Privacy Policy or the processing of your personal data:

Vivin app lda.
Avenida Francisco Sá Carneiro 92
7000‑757 Évora, Portugal
Email: privacy@vivin.app

You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD) at www.cnpd.pt.