Privacy Policy

1. Introduction

1. Introduction

Treiva (“we”, “us”, “our”) provides AI-powered sales assistant services for businesses. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information, and outlines your rights under applicable data protection laws, including the UK and EU GDPR.

By using our services, you agree to the collection and use of information in accordance with this policy.

2. Who We Are

Treiva Ltd (Company Number: 16119439) is a private limited company registered in England and Wales.

Registered Office: Co Chandler And Partners, Britannia Court, 5 Moor Street, Worcester, Worcestershire, England, WR1 3DB

Contact Email: team@treiva.com

3. What Data We Collect

We may collect and process the following types of data to provide and improve our services:

Lead Information

Name, phone number, email address, and other details you submit via our chat widget, web forms, or third-party lead sources.

Communication Data

Messages exchanged via WhatsApp, Messenger, SMS, or email when interacting with our AI agent or human team.

Usage Data

IP address, browser type, device information, and interaction logs when you visit our website or use our services.

Cookies & Tracking Data

Details about your interactions on our site, tracked via cookies and analytics services like Google Analytics and Mixpanel.

3.1 Information from Third-Party Services (e.g., Google)

You may choose to connect your third-party accounts to our service. For example, if you sign up or log in using your Google Account, or connect your Google Calendar, we will collect specific information only after you grant us permission through the provider’s standard consent screen.

Google Account Information: When you sign up or log in with Google, we access your name, primary email address, profile picture, and a unique Google Account ID to create and manage your Treiva account.

Google Calendar Information: To provide our meeting scheduling feature, we access your calendar to view free/busy information and to create or edit events on your behalf. This includes adding event details and generating Google Meet links. We do not access or store your entire calendar history or the details of unrelated events.

4. How We Use Your Data

We process your personal data for the following purposes:

  • To operate our AI sales assistant and deliver our services.
  • To qualify, score, and manage leads on behalf of our clients.
  • To book viewings, valuations, or appointments.
  • To respond to your enquiries via chat, WhatsApp, or other channels.
  • To improve and develop our systems and services.
  • To maintain the security of our platform and prevent fraud.
  • To comply with legal obligations.

5. Specific Disclosures for Google User Data

Notwithstanding any other section of this policy, our handling of data received from Google APIs is subject to the following specific terms:

  • Adherence to Google Policy: Treiva.com’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
  • Limited Use: Information accessed from your Google Account and Google Calendar is used exclusively to provide and improve prominent, user-facing features of our application, namely account authentication and meeting scheduling.
  • No Advertising: We do not use any information obtained from Google APIs to serve you advertisements, including personalized or retargeted ads.
  • No AI/ML Training: We do not use your Google user data to develop, improve, or train any generalized artificial intelligence or machine learning models.
  • Limited Human Access: Our personnel are not permitted to read your Google user data unless: (1) we have your explicit, affirmative consent for a specific purpose (e.g., resolving a support issue); (2) it is necessary for security purposes (e.g., investigating abuse); or (3) to comply with applicable laws.

6. Legal Basis for Processing

Under UK and EU GDPR, our lawful bases for processing your data include:

Consent

Where you provide information voluntarily (e.g., by submitting a form or connecting your Google account).

Legitimate Interests

To help our clients follow up on your enquiry, qualify leads, and improve our services.

Contractual Necessity

Where we process data to provide services agreed upon with our clients.

Legal Obligation

Where we must comply with the law or assist regulators.

7. Who We Share Data With

Your privacy is paramount. We do not sell your personal data.

We may share your information with:

  • Our Clients: The primary data controllers (e.g., businesses you engage with via our AI).
  • Service Providers: Third parties who help us operate our platform (including AWS, OpenAI, CRM integrations, and analytics providers).
  • Regulatory Authorities: If required by law or to respond to a valid legal process.

Any sharing or transfer of Google user data is strictly limited to the circumstances permitted by the Google API Services User Data Policy, such as for legal compliance or as part of a merger with your explicit prior consent.

8. Data Storage & Security

We take appropriate technical and organisational measures to protect your data. This includes encryption of data in transit and at rest, secure storage on AWS servers, and restricting access to authorized personnel only. We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or as long as you maintain an active account.

9. International Transfers

Your data may be transferred outside the UK and European Economic Area (EEA), for example, where our cloud providers or AI systems are hosted globally. Where this occurs, we ensure appropriate safeguards (such as standard contractual clauses) are in place to protect your data.

10. Your Rights and Control Over Your Data

Under data protection law, you have the right to:

  • • Access the personal data we hold about you.
  • • Request correction or updates to your data.
  • • Request deletion of your data (‘right to be forgotten’).
  • • Object to certain types of processing.
  • • Request data portability.
  • • Revoke access to connected third-party accounts (like Google) at any time through that provider’s security settings page or within your Treiva account settings.

To exercise any of these rights, please contact us at team@treiva.com. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) or your local data protection authority.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. If we make significant changes, especially regarding how we handle your data, we will notify you and may prompt you to consent to the updated policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact our Data Protection Lead at:

Email: team@treiva.com

Address: Treiva Ltd, Co Chandler And Partners, Britannia Court, 5 Moor Street, Worcester, Worcestershire, England, WR1 3DB