Privacy Policy
IVAVevisus / The Outbounders — including the Meta app “IVAVEV” (App ID 1992211345508983). Last updated: September 29, 2026.
1. Who we are
| Data controller | AHAA ALFA TOUR SRL, CUI RO42816994, G-ral Alexandru Cernat, Galați, 800204, Romania |
| Brands and services | IVAVevisus (Meta Business ID 373852769144475) and The Outbounders (theoutbounders.org) — hotel booking, AI sales assistant and CRM automation platform |
| Meta app | IVAVEV, App ID 1992211345508983 |
| Contact | [email protected], +40 741 074 620 |
2. What this policy covers
This policy explains how we collect, use, share and protect personal data when you visit our websites, submit a form, message our businesses, buy a subscription, or when a business connects its Facebook Page, Instagram account, WhatsApp number or ad account to our platform through the IVAVEV app.
3. Data we collect
- Data you give us: name, email, phone number, website address, company name and answers you submit in our forms, lead ads or chats.
- Lead Ads data from Meta: when you submit a Lead Ad form published by our Pages, Meta shares the answers with us (lead retrieval). We use them only to contact you about the request you made.
- Messages: messages you send to our Pages or connected accounts on Messenger, Instagram or WhatsApp, and our replies, so we can answer you and keep conversation history.
- Page and ad account data: for businesses that connect their assets: Page and account identifiers and names, ad campaign structure and performance statistics, needed to run and report on their advertising and automations.
- Technical data: IP address, device and browser data, cookies and the Meta Pixel on our websites (page views, form starts, checkout events) to measure advertising.
- Payment data: payments are processed by Stripe; we never receive or store full card numbers.
4. How we use data
- To answer your request, contact you and deliver the service you asked for (bookings, demos, subscriptions, support).
- To operate AI assistants that reply to customer messages on behalf of the business that owns the Page or account.
- To create, manage and measure advertising campaigns for our own businesses and for clients who authorised us.
- To prevent fraud, secure our systems and meet legal and accounting obligations.
We do not sell personal data and do not use Meta Platform Data for purposes other than those above. We do not transfer Meta Platform Data to data brokers or use it to build profiles unrelated to the service.
5. Who we share data with
- Meta Platforms (Facebook, Instagram, WhatsApp) — to send and receive messages and run advertising.
- Our CRM platform provider and hosting providers, which store data on our behalf.
- Google (Gemini) — to generate AI replies and business analysis from the content we process.
- Stripe (payments) and Resend (service emails).
- Authorities, only when required by law.
6. Legal bases (GDPR)
Performance of a contract or steps at your request; your consent (cookies, Pixel, marketing); our legitimate interests (security, fraud prevention, service improvement); legal obligations (accounting).
7. Retention
Lead and conversation data: up to 24 months after the last interaction, or until you ask us to delete it. Client workspace data: while the subscription is active and 30 days after it ends. Payment records: as long as tax law requires.
8. Your rights and data deletion
You can request access, correction, deletion, restriction, portability, or object to processing, and withdraw consent at any time. To delete your data, including data received from Meta, follow the data deletion instructions or email [email protected]. You may also complain to your data protection authority (in Romania: ANSPDCP).
9. Security
We use HTTPS encryption, access control on a need-to-know basis, and keep access tokens on our servers only.
10. Changes
We may update this policy. The date at the top shows the latest version.