Privacy Policy

In short

RevenueOS is a product of Vivid, operated by El Vivid Ltd in Tema, Ghana.
When a business connects its Facebook Page, Instagram account or WhatsApp Business number, we receive the messages and leads sent to that business.
We use that data only to provide RevenueOS to that business. We don't sell it, and we don't use it for advertising.
Anyone can ask us to see, correct or delete their data. See our data deletion instructions.

01Who we are

RevenueOS is a product of Vivid. Vivid is operated by El Vivid Ltd ("Vivid", "we", "us"), a company registered in Ghana, at GT-006-0228 Tema, P.O. Box TNT 127, Tema, Ghana.

We handle personal data in line with Ghana's Data Protection Act, 2012 (Act 843). This policy applies to the RevenueOS web app, the RevenueOS mobile app and this website. Our main Vivid website, vividconcepts.site, has its own privacy policy.

02Who this policy covers

RevenueOS is used by businesses to manage the people who contact them. So this policy covers three groups of people:

Customers. Businesses that sign up for RevenueOS, and the people on their team who use it.
End users. People who message a business that uses RevenueOS, or fill in one of its ad lead forms, on Facebook, Instagram or WhatsApp.
Website visitors. People who visit this website.

03Our role: controller and processor

Our role depends on whose data it is.

For customer account data (for example, the name and email of a person who logs in to RevenueOS), El Vivid Ltd is the data controller. We decide how that data is used, as described in this policy.
For end-user data (the messages and leads a business receives through RevenueOS), the customer business is the data controller. El Vivid Ltd acts as a data processor. We process that data on the business's behalf, on its instructions, and only to provide RevenueOS to it.

If you messaged a business that uses RevenueOS, that business is responsible for how it uses your information. You can contact that business directly, or contact us and we will help (see Your rights).

04Data we receive through Meta

When a customer connects its Facebook Page, Instagram business account or WhatsApp Business number to RevenueOS, Meta sends us data about the conversations and leads that come to that business. We only receive data for the accounts the customer chooses to connect.

Type of data	What it includes	Where it comes from
Message content	The text of messages sent to and from the business, and any files (such as photos, voice notes or documents) included in them, with the date and time.	Facebook Messenger, Instagram Direct, WhatsApp
Sender IDs	The ID Meta assigns to the person messaging the business on that Page or account (for example, a page-scoped or Instagram-scoped ID).	Facebook Messenger, Instagram Direct
Profile names	The public name or username shown on the person's Facebook, Instagram or WhatsApp profile.	Facebook, Instagram, WhatsApp
Phone numbers	The WhatsApp number of the person messaging the business, and any phone number given in a lead form.	WhatsApp, Meta lead forms
Lead-form answers	Whatever the business's ad form asks for, such as name, email, phone number, location or answers to custom questions.	Meta lead forms (Facebook and Instagram ads)
Ad and campaign attribution	Which ad, ad set, campaign, form or Page a lead came from, and the date it arrived. Where available, ad performance figures for the business's own ad accounts.	Meta lead forms, ads data
Account and connection details	The IDs and names of the customer's connected Pages, Instagram accounts, WhatsApp Business accounts, phone numbers and ad accounts, and the access tokens Meta issues so RevenueOS can work.	Facebook Login and the Meta APIs

Meta permissions RevenueOS requests

Meta only shares this data when a customer grants RevenueOS specific permissions. These are the permissions we request and what each one is used for:

Permission	What RevenueOS uses it for
`pages_show_list`	Shows the list of Facebook Pages you manage, so you can choose which ones to connect.
`pages_messaging`	Receives messages sent to your connected Page on Messenger, and lets your team reply from RevenueOS.
`ads_read`	Reads your ad accounts, campaigns and ad results, so each lead can be linked to the campaign that produced it.
`ads_management`	Reads the lead forms and lead details in the ad accounts you connect, so each lead can be matched to the campaign, ad and form it came from.
`whatsapp_business_messaging`	Receives messages sent to your WhatsApp Business number, and lets your team reply from RevenueOS.
`whatsapp_business_management`	Reads your WhatsApp Business account details, such as your phone numbers and message templates, so they can be set up in RevenueOS.
Instagram messaging permissions	Receives Direct messages sent to your connected Instagram business account, and lets your team reply from RevenueOS.

If we ask for a new permission, or use one for a new purpose, we will update this policy first.

05Other data we collect

From customers and their teams

Account data: name, email address, phone number, business name, role, and login details for each team member.
Facebook Login data: when you connect with Facebook, we receive your Facebook user ID and name, and your email address if you choose to share it.
Work you do in RevenueOS: pipeline stages, tasks, notes, assignments and replies your team adds to leads.
Billing data: details we need to invoice you and record payments.
Support data: what you tell us when you contact us for help.

From the mobile app

The RevenueOS mobile app is in early access. When you use it, we collect the same account and lead data as the web app, plus basic technical data such as your device type, operating system version and app version, so we can keep the app working and fix problems. If you turn on notifications, we also store a push-notification token for your device, which we use only to send you RevenueOS alerts, such as a new message or an assigned task. We delete it if you ask us to, and when your account is deleted.

From website visitors

This website does not use cookies, analytics or advertising trackers, and it loads no third-party scripts. Like any website, our hosting provider records basic technical data such as IP addresses, browser type and the pages requested, which is used to keep the site running and secure. If you email or call us, we receive the details you share.

06How we use data

We use personal data only to:

provide RevenueOS to our customers: show their messages and leads in one inbox, let their team reply, track which campaign each lead came from, and manage their sales pipeline and tasks;
create and manage customer accounts, and give team members access;
keep RevenueOS secure, prevent misuse, and fix problems;
provide support and respond to requests, including deletion requests;
invoice customers and keep business records;
meet our legal obligations.

We do not use end-user data for our own purposes. We process it only to provide RevenueOS to the business that received it, and as that business instructs.

07Legal basis

Under Act 843, we process personal data only where the law allows it. Depending on the situation, we rely on:

our contract with the customer, to provide RevenueOS;
the customer's instructions, for end-user data we process on its behalf. Each customer is responsible for having a lawful basis to use RevenueOS with its own customers' data;
legitimate interests, such as keeping RevenueOS secure and improving it, where those interests are not outweighed by your rights;
legal obligations, such as keeping tax and accounting records;
consent, where we ask for it. You can withdraw consent at any time.

08How we treat data from Meta

We follow Meta's Platform Terms and Developer Policies for all data we receive through Meta's platforms. In particular:

We use it only to provide RevenueOS to the business that connected the account.
We do not sell it, rent it or give it to data brokers.
We do not use it to build advertising profiles, or to target or retarget ads.
We do not combine it with data from other businesses that use RevenueOS.
We delete it when it is no longer needed, when a customer disconnects and asks us to, or when Meta or the law requires it.

We share personal data only as follows:

With the customer business. End-user data is shown to the business that received it, and to the team members that business gives access to.
With service providers that help us run RevenueOS, such as cloud hosting and database providers, email delivery, and payment services. They may only use the data to provide their service to us, and must keep it secure.
With Meta, when your team sends a reply from RevenueOS. The reply goes through Meta's platform to the person you're messaging.
When the law requires it, for example in response to a valid court order, or to protect the rights and safety of people or of our service.
If our business changes hands, for example in a merger or sale. Anyone who takes over must protect the data as this policy describes.

We never sell personal data.

10International transfers

Some of our service providers, and Meta itself, may store or process data outside Ghana. When that happens, we take steps to make sure the data stays protected in line with Act 843, for example by using providers with strong security and contractual commitments.

11How long we keep data

End-user data (messages, leads and attribution data) is kept while the customer's RevenueOS account is active, or until the customer deletes it or asks us to.
When a customer closes their account or disconnects and asks us to delete their data, we delete their account data and the end-user data held for them within 30 days, unless the law requires us to keep it longer.
Backups are overwritten on a rolling basis, so deleted data may stay in backups for a short time before it is removed for good.
Billing and business records are kept for as long as Ghanaian tax and accounting law requires.
Access tokens from Meta stop working as soon as access is removed in Facebook, and we delete them when an account is disconnected.

When we no longer need data, we delete it or make it anonymous.

12Security

We take reasonable technical and organisational steps to protect personal data from loss, misuse, and unauthorised access, change or disclosure. These include sending data over encrypted connections (HTTPS), limiting access to the people who need it to run and support RevenueOS, and keeping Meta access tokens out of reach of other users. No system is perfectly secure, so if a breach affects your data, we will tell the people affected and the authorities as the law requires.

13Your rights

Under Act 843, you can ask to:

see the personal data we hold about you;
correct data that is wrong or incomplete;
have your data deleted;
object to how your data is used, or ask us to stop using it for marketing.

If you are a customer, contact us and we will handle your request.

If you messaged a business that uses RevenueOS, that business controls your data. You can ask the business directly. You can also contact us directly. We will delete your data from RevenueOS and let the business know.

To make a request, email customercare@vividconcepts.site. We will acknowledge your request within 5 business days, and complete it within 30 days of confirming your identity. We may ask for information to confirm it's really you. If you're not satisfied with our response, you can complain to Ghana's Data Protection Commission.

14Deleting your data

You can ask us to delete your data at any time. Deletion requests are handled by our team, not automatically. Our data deletion page explains what to send us, how we confirm your identity, how long it takes, and how to remove RevenueOS's access from your Facebook, Instagram or WhatsApp account.

15Children

RevenueOS is a business tool. It is not meant for anyone under 18, and we do not knowingly collect children's data for our own purposes. If you believe a child's data has been shared with us, contact us and we will help remove it.

16Changes to this policy

We may update this policy, for example when we add a feature or request a new Meta permission. When we do, we will post the new version on this page and change the "last updated" date. If a change is significant, we will tell customers before it takes effect.

17Contact us

For questions about this policy or your data, contact:

El Vivid Ltd (Vivid)
GT-006-0228 Tema, P.O. Box TNT 127, Tema, Ghana
Email: customercare@vividconcepts.site
Phone: +233 20 675 6607