Privacy notice

Who processes the data

The data controller is KLOUNIKS LTD, Bul. Vitosha 25, 1000 Sofia, Bulgaria, VAT BG203224475, which operates the Vohippo brand.

For any request about your data, write to us through the form on the contact page: privacy requests are passed to the people who handle them.

What the website collects

The website collects data in three cases; only the third is for advertising, and only if you accept it.

• Contact form: your name, your e-mail address and, optionally, company and phone number, together with the topic and the text of your message.
• Server logs: every request leaves in the logs an IP address, date and time, the page requested and the browser type. That is how a web server normally works, and it serves security and troubleshooting.
• Marketing cookies, only if you accept them in the banner: the Meta Pixel and the Google Ads tag record the pages you visit and the ad you came from. If you then sign up to the portal, we report the sign-up and the first top-up to Meta and Google, with your e-mail address irreversibly encrypted (hashed), to learn which ads work.

Why we process it, and on what legal basis

• Form data is used only to answer you: the legal basis is taking steps at your request prior to entering into a contract (Art. 6(1)(b) of Regulation (EU) 2016/679).
• Server logs rest on our legitimate interest in keeping the service running and protected from abuse (Art. 6(1)(f)).
• Marketing cookies and the events sent to Meta and Google rest on your consent (Art. 6(1)(a)), which you can withdraw at any time from “Cookie preferences” at the bottom of every page.
• We do not use your data for automated decision-making.

How long we keep it

• Messages received through the form stay in our back-office mailbox for as long as needed to handle the request and any relationship that follows; if the request goes nowhere, no longer than 24 months.
• Server logs are kept for a limited period, in the order of a few weeks, and then rotated automatically.

Who it is shared with

We do not sell or hand over your data to anyone. It is processed on our behalf, as data processors, only by the technical suppliers we need to run the site and the mail:

• the provider hosting the website and the platform servers;
• the e-mail service through which we receive the form messages;
• only with your consent, Meta Platforms Ireland and Google Ireland, which receive the marketing-cookie and conversion-event data as independent controllers for the part concerning their services.

Third-party services on these pages

The site is deliberately plain: there are no analytics tools, social buttons, maps or embedded videos. The only third-party scripts are the Meta Pixel and the Google Ads tag, which start only after you accept them in the banner.

• The typefaces are hosted on our own servers: no request goes out to Google or any other external provider.
• The rates page contains a panel showing our price list: it is loaded from cloud.vohippo.com, our own platform, and sets no cookies.
• The WhatsApp button is a plain link: nothing is loaded or sent until you open it, and from that point WhatsApp's own notice applies.

The customer portal (cloud.vohippo.com)

When you open an account on the portal we process the data needed to provide the service:

• account data: name, e-mail address, mobile number (verified with a code), password stored only in hashed form, billing details including VAT number or tax code;
• identity documents and proof of address, only for numbers that the rules of their country require to be registered to the user;
• traffic data: calling and called number, date, duration, outcome and cost of each call, IP addresses of the devices connecting to the service;
• call recordings, only if you turn recording on; transcripts and summaries of the AI secretary, only if you use it in a call flow;
• payments: amount, date and outcome of top-ups. Card details are handled directly by the payment provider: we never see or store them.
• a technical session cookie, used only to keep you signed in to the portal.

Why we process portal data

• To provide the service you asked for: routing and charging calls, activating numbers, managing your balance and support (performance of a contract, Art. 6(1)(b)).
• To meet legal obligations: invoicing, keeping tax and traffic records, registering regulated numbers (Art. 6(1)(c)).
• To protect you and us from fraud and abuse: mobile and caller ID verification, blocking suspicious access, monitoring abnormal traffic (legitimate interest, Art. 6(1)(f)).

Suppliers involved in the portal

Some features rely on external suppliers, which process only the data that feature needs:

• DIDWW, to activate numbers and review the documents required by the rules;
• the payment providers you choose when topping up (for example Stripe or PayPal);
• OpenAI, for the AI secretary: it receives the audio and text of the conversation while the call is in progress;
• SMS providers, Meta (WhatsApp) and telephone carriers, to send verification codes and the messages you configure;
• Google, if you choose to sign in with your Google account, and the reCAPTCHA service that protects forms from automated access.

Transfers outside the European Union

The website, the portal and the mailboxes are hosted on servers located in the European Union. Some suppliers (OpenAI, Google, Meta, payment providers) may process data in the United States: in those cases the transfer relies on the EU-U.S. Data Privacy Framework or on the standard contractual clauses approved by the European Commission.

How long we keep portal data

• Account data for as long as the relationship lasts.
• Invoices, payments and the traffic data used for billing for the period required by tax law, up to 10 years.
• Recordings until you delete them or close your account.
• When you close your account we delete calls, recordings, documents and configuration; only the data the law requires us to keep remains, for the period the law sets.

Vohippo Ads Manager and data received from Google APIs

Vohippo Ads Manager is an internal tool, used only by our staff, that connects to our own Google Ads account through the Google Ads API to create and manage our advertising campaigns and read their results. It is not offered to anyone else and does not access the Google accounts of customers or third parties.

When a member of our staff authorises the tool with their Google account (OAuth 2.0, scope https://www.googleapis.com/auth/adwords), we receive:

• an access token that allows managing Vohippo's Google Ads accounts, stored encrypted on our servers in the European Union and accessible only to the service that uses it;
• data about our own campaigns: campaign structure, budgets, keywords, ads and aggregated statistics (impressions, clicks, costs, conversions). This data contains no personal data of the people who see the ads.

How we use Google data

We use this data only to manage our own advertising and prepare internal reports. We do not sell it, share it with third parties, use it to profile people or use it to train artificial intelligence models.

Vohippo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Reports are kept as long as they are needed to compare campaign performance, and in any case no longer than 36 months. Access can be revoked at any time from the Third-party access page of the Google account: we then delete the stored token.

The Vohippo app for Android and iOS

The app lets you make and answer calls from your phone system accounts. To do so it only handles: access to your account, stored encrypted in the phone’s keychain; the device code for notifications, used only to alert you of incoming calls and AI Secretary messages; the microphone, only while you are on a call, to transmit your voice. Audio travels encrypted and the app does not store it: recordings exist only if you turn them on in the portal.

The app does not read your contacts, messages, location or files and contains no advertising or tracking tools. When you sign out, or delete your account, the notification code is deleted.

Deleting your account

You can ask for your Vohippo account and all related data to be deleted, including from the app, in two ways: by opening a ticket from the portal (Support) or by writing to [email protected] from the email address you signed up with, with the subject “Account deletion”.

Within 30 days we delete calls, recordings, numbers, SIP accounts, documents, settings and the devices linked to the app. Only invoices, payments and traffic data that tax law requires us to keep remain, for up to 10 years. Remaining credit and active numbers are lost on deletion: if you want to keep a number, ask for porting first.

Your rights

At any time you can ask us to access your data, correct it, erase it, restrict its processing, receive it in a machine-readable format, and object to processing based on legitimate interest. We answer within one month.

If you believe the processing breaches the rules, you can turn to the supervisory authority of the country where you live; in Italy that is the Garante per la protezione dei dati personali (garanteprivacy.it).

Changes

If we change the way we process data we will update this page and the date at the top. Earlier versions are not kept online: if you need a copy of the one in force when you wrote to us, ask and we will send it.