Privacy Notice

1. Who we are

This Privacy Notice is issued by Valors Advertising Services FZE (trading as "ValorsBox"; "we", "us", "our"), the operator of the ValorsBox platform available at valorsbox.com. Valors Advertising Services FZE is the data controller responsible for the personal data described in this notice. If you have questions, contact us at privacy@valorsbox.com.

2. Personal data we collect

• Account data: name, email address, password (hashed), workspace name, role.
• Profile data: display name, avatar, language and theme preferences.
• Customer data you upload: contacts, phone numbers, message content, templates, segments, and any media you choose to send.
• Usage and telemetry: pages visited, features used, timestamps, error logs.
• Device and connection data: IP address, browser type, operating system, device identifiers.
• Support data: messages you send to our support team.

Payment card and billing details are collected directly by our payment provider, Paddle — we do not store card numbers.

3. Why we use your data and legal basis

• Provide the service (contract performance): create your account, run your workspace, deliver messages, and respond to support.
• Security and fraud prevention (legitimate interests): detect abuse, protect accounts, and maintain platform integrity.
• Service improvement and analytics (legitimate interests): understand feature usage and fix bugs.
• Billing and tax compliance (legal obligation): work with Paddle to issue invoices and meet tax requirements.
• Marketing communications (consent, where required): send product updates if you opted in. You can withdraw consent at any time.

4. How we share your data

We share personal data only with the following categories of recipients:

• Service providers / subprocessors: hosting and database (Lovable Cloud / Supabase), email delivery, error monitoring, and analytics tooling, all under contractual confidentiality and security obligations.
• Paddle.com Market Ltd ("Paddle"): our Merchant of Record. Paddle processes payments, manages subscriptions, calculates and remits sales tax/VAT, and issues invoices on our behalf. See Paddle's Privacy Policy.
• WhatsApp Business Cloud API (Meta): message content and recipient phone numbers you choose to send are transmitted via Meta's official API to deliver to WhatsApp users.
• Professional advisers: legal, accounting, and audit advisors where strictly necessary.
• Authorities: where required by law, court order, or to protect rights and safety.

5. International transfers

Your data may be processed outside your country of residence. Where data is transferred from the UK or EEA to a country without an adequacy decision, we rely on appropriate safeguards such as Standard Contractual Clauses.

6. Data retention

We keep account and customer data for as long as your account is active, and for a reasonable period afterwards to comply with legal, accounting, and dispute-resolution obligations (typically up to 7 years for billing records). When data is no longer needed, it is deleted or anonymised.

7. Your rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion ("right to be forgotten").
• Restrict or object to processing.
• Receive your data in a portable format.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with your local data protection supervisory authority.

We aim to respond to verified requests within one month. Contact privacy@valorsbox.com.

8. Security

We use appropriate technical and organisational measures, including encryption in transit (TLS), encryption at rest, role-based access controls, audit logging, and least-privilege access for our team. No system is 100% secure, but we work continuously to protect your data.

9. Cookies

We use strictly necessary cookies to keep you signed in and remember your preferences. We may use limited analytics cookies to understand product usage. You can manage cookies through your browser settings.

10. Changes to this notice

We may update this notice from time to time. Material changes will be communicated via email or in-app notice before they take effect.

11. Contact

Valors Advertising Services FZE (trading as ValorsBox) · privacy@valorsbox.com