Privacy Policy

Vorniqe is used by businesses. The business that gives you your account decides what customer information is kept in it and who can see it, and we process that information on its behalf under our Data Processing Agreement. The rest of this section covers what the Vorniqe website and mobile app themselves collect.

• Your account — your name, work email address, your role, and the language you choose. We use them to sign you in and to show you the work assigned to you. The lawful basis is contract with your employer, and our legitimate interest in providing the service to its staff.
• Voice notes — if your business has turned voice notes on, you can record a spoken note of up to 60 seconds about a customer. The app uses your phone’s microphone only while you are recording. The audio is sent to Google Cloud in the European Union to be turned into text, and the text is passed to an AI model, also run by Google Cloud in the EU, which suggests how to file the note. We do not keep the recording: the audio is discarded once it has been transcribed. Nothing is saved until you have reviewed the text and confirmed it, and you can edit or discard it first. Voice notes are for your own words. They are not for recording calls or other people.
• Notifications — if you allow notifications, we store a token for your device so we can tell you when a customer is assigned to you or something needs your attention. Notifications are delivered through Google’s Firebase Cloud Messaging. You can turn them off at any time in your phone’s settings.
• Crash reports — when the app crashes or hits an error, it sends a report to Sentry, in the European Union, so we can fix it. A report holds technical details about the error, the app version and your device, and an internal account number. It does not include your name, email address or customer information.
• Fingerprint and face unlock — if you turn on biometric unlock, your phone checks your fingerprint or face. Vorniqe is only told whether the check passed and never receives the biometric data itself.
• On your phone — the app keeps a copy of your recent work on your phone so it opens quickly. It is removed when you sign out or another person signs in.

We do not sell this information, use it for advertising, or share it with anyone except the providers named here, who process it only on our instructions. Everything sent between the app and our servers is encrypted in transit.

Your business can delete your account. You can also ask us to delete it, or the personal data held about you, through our data requests page or by writing to [email protected]. Where the data belongs to your employer, we will pass your request to them and help them answer it.

Drentova Group Ltd is the controller of the personal data described in this policy. We are registered with the Information Commissioner’s Office under number ZC284922. Questions about this policy, or about how we handle personal data, go to [email protected].

Where you use one of our products as a customer of one of our customers — for example where an organisation uses our software to serve you — that organisation is the controller and we act as its processor. In that case, ask them first; we will help them respond.

We collect only what we need, and we collect it for the reasons below.

Information you give us

• Account details — your name, email address and, for paid plans, billing details. We need these to provide the service and to take payment.
• Correspondence — what you send us when you contact us, so we can respond and keep a record of the exchange.
• Content — whatever you put into the service. We process it to provide the service and for no other purpose.

Information we collect automatically

• Technical data — IP address, browser and device information, and request logs. We need these to operate the service, to keep it secure, and to diagnose faults.
• Usage data — which features are used and when. Where this is not necessary to run the service, we collect it only with your consent through analytics.

Information from others

• Payment status from our payment provider, so we know whether a subscription is active. We do not receive or store your full card details.

Under the UK GDPR we must have a lawful basis for each purpose. Ours are:

• Contract — to provide the service you have asked for, to manage your account and to take payment.
• Legitimate interests — to keep the service secure, to prevent abuse, to improve what we build, and to respond to enquiries. We have assessed in each case that this does not override your rights, and you may object at any time.
• Consent — for analytics and marketing cookies, and for marketing email. You may withdraw consent at any time, as easily as you gave it.
• Legal obligation — to keep accounting records and to respond to lawful requests.

We keep personal data only as long as we need it, and we delete or anonymise it after that.

• Account and content — for as long as your account is open, and for 30 days after you close it so an accidental closure can be undone.
• Correspondence — for two years from the last message, so we have context if you come back to us.
• Billing and accounting records — for six years, as UK tax law requires.
• Server and security logs — for 90 days.
• Cookie consent records — for as long as the consent cookie lasts, so we can show what you chose.

We do not sell personal data, and we do not share it for anyone else’s marketing. We use a small number of providers to run the service; each processes personal data only on our instructions, under written terms meeting Article 28 of the UK GDPR. They are listed in the subprocessor table below.

We may also disclose personal data where the law requires it, to establish or defend legal claims, or to a buyer if the business is sold — in which case we will tell you first.

If you apply to become a Drentova partner, or are one, we process the following, for the reasons given.

• Your application — your name, email address, phone number, city and country, your role and sales experience, the businesses you can reach, the products and services you are interested in, any profile link and notes you give us, and the record of your consent and of the Partner Agreement version you accepted. We use it to decide on your application and to contact you about it. The lawful basis is taking steps at your request before entering into a contract. When you apply, we email you a link to confirm your email address, and before we decide we call or message you on the phone number you gave us to confirm it is yours.
• Your partner account — your name, contact details and sign-in details, the clients attributed to you, the payments they make, the commission each earned, and our payouts to you, including the bank details you give us for payment. We use it to run the Partner Agreement and show you your dashboard. The lawful basis is contract, and legal obligation for accounting records.

The people at Drentova who review applications and run the programme can see this information, and our providers process it on our behalf as described above. We do not share it with other partners or with the businesses you introduce.

If you start an application but don’t finish confirming your contact details, we delete it 30 days after you started. We keep an application that is not approved for 12 months after our decision, so we can answer questions about it, and then delete it. We keep a partner account while you are a partner. Commission and payout records are accounting records, which we keep for six years.

When a partner introduces a business to us, we receive that business’s contact details from the partner. We use them only to talk to that business about our products and services, on the basis of our legitimate interests, and we tell the people concerned where we got their details when we first contact them.

We are based in the United Kingdom and process personal data here wherever we can. Some of the providers we rely on operate outside the UK.

Where personal data is transferred outside the UK, we rely on one of the safeguards permitted by Chapter V of the UK GDPR: UK adequacy regulations, the International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses. The safeguard applying to each provider is named in the subprocessor table, and we carry out a transfer risk assessment before relying on any of them.

You can ask us for a copy of the safeguards in place for a particular transfer by writing to [email protected].

We use a small number of cookies. Necessary ones are always on; analytics and marketing cookies are set only if you agree. Our Cookie Policy lists every one, and you can change your choice at any time using “Cookie preferences” in the footer of any page.

We do not make decisions producing legal or similarly significant effects about you by automated means alone. Where a product uses AI to assist a decision, our AI Policy explains what it does and how to ask for a person to review it.

Our services are not directed at children and we do not knowingly collect personal data from anyone under 13. If you believe a child has given us personal data, tell us at [email protected] and we will delete it.