Privacy Policy

Who we are

VivList is a work management application owned and operated by SecTower LLC ("SecTower", "we", "us"), trading as VivList. SecTower LLC is the data controller for the personal data described here. This policy explains what personal data we collect when you visit our website or use the product, why we collect it, and the choices you have. Questions can be sent to privacy@vivlist.com.

Data we collect

• Account data — name, email address, and authentication details you provide when signing up or signing in.
• Content you create — projects, tasks, documents, comments, files, and other work data you or your team add to the product.
• Demo and contact requests — the name, work email, company, team size, and message you submit through our demo form.
• Usage and device data — pages viewed, approximate location derived from IP address, browser and device type, and referring URLs.
• Marketing attribution — campaign parameters (such as UTM tags) and the referring site recorded when you first arrive, so we can understand which channels bring people to VivList.

How we use it

• To provide, secure, and support the product and your account.
• To send transactional messages such as email verification, password resets, and task deadline reminders. Reminder emails include an unsubscribe link.
• To respond to demo requests and support enquiries.
• To understand product usage and improve features and performance.

We do not sell your personal data, and we do not use your work content to train third-party AI models for their own purposes.

Legal basis

We process account data and your content to perform our contract with you; usage, device, and attribution data on the basis of our legitimate interests in securing and improving the service; marketing messages on the basis of your consent where required; and some records to meet legal obligations such as tax and accounting.

AI features

Some optional features (for example writing assistance and insights) send the relevant content you select to a third-party AI provider to generate a response. That content is processed to return your result and is not used by us for any other purpose.

Who we share data with

• Service providers — cloud hosting and database providers, an email delivery provider, and AI providers for the features described above. They process data on our instructions and only as needed to provide their service.
• Merchant of Record — Paddle.com acts as reseller and Merchant of Record for all orders, and receives the data needed for checkout, subscription management, payments, tax compliance, invoicing, and refunds.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where we are required to disclose data by law.

Some of these providers are located outside the UK and EEA. Where data is transferred internationally we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

Security

We apply appropriate technical and organisational measures to protect personal data, including encryption in transit and at rest, row-level access controls in our database, and least-privilege access for staff.

Retention

We keep account and content data for as long as your account is active. If you delete your account, we delete or anonymise the associated data, except where we must keep records to meet a legal obligation.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to certain processing, or to withdraw consent. If you are in the EEA or UK, you also have the right to complain to your local data protection authority. If you are a California resident, you may request disclosure or deletion of your personal information and will not be discriminated against for doing so. To make a request, email privacy@vivlist.com.

Cookies and local storage

We use cookies and browser storage to keep you signed in, remember preferences, and record marketing attribution. You can clear them in your browser at any time, though signing in again will be required.

Children

VivList is not intended for anyone under 16, and we do not knowingly collect their data.

Changes

We will update this page when our practices change and revise the date above. Material changes will be communicated to account holders by email.