Valerio is operated by ValerioApp, LLP, a limited liability partnership registered in England and Wales under number [REG_NUMBER], with its registered office at [REGISTERED_OFFICE]. When this policy refers to "Valerio", "we", "us" or "our", it means ValerioApp, LLP, acting as the data controller for the personal data described below under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Our contact details are listed at the bottom of this page.
Account and contact data. When you register for Valerio or request a demo, we collect your name, work email address, company name, job title, and team size. If you apply to become a partner, we also collect your phone number, LinkedIn profile URL, and location.
Usage data. We collect information about how you interact with Valerio — features used, pages visited, actions taken, and timestamps. This helps us improve the product.
Technical data. We automatically collect your IP address, browser type and version, device identifiers, and operating system when you access our services.
Customer data. As part of using Valerio as a CRM, you may import or enter data about your own contacts and clients. This data is processed by us on your behalf — you remain the data controller for it, and we act as a processor.
Google account data. If you choose to connect Google Calendar, we access your calendar events and your Google account's email address as described in section 6.
Communications. If you contact us by email or through any form on our site, we retain the content of that communication.
We use the data we collect to:
We do not use your data for automated decision-making or profiling that has legal or similarly significant effects on you.
Under the UK GDPR, we process your personal data on the following legal bases:
We do not sell your personal data. We share it only with trusted third parties who help us operate the service:
All third-party processors are subject to data processing agreements and are required to maintain appropriate security standards. We may also disclose data where required by law or to protect the rights, property, or safety of Valerio, our users, or the public.
If you choose to connect Google Calendar, Valerio asks Google for two permissions: to see and edit events on your calendars, and to see your Google account's email address.
How we use it.
What we store. We store the access and refresh tokens Google issues, so the connection keeps working, and the IDs of the events Valerio creates for you. Your other calendar events are read from Google when you open your calendar and are not saved by Valerio.
What we don't do. We don't sell Google user data, use it for advertising, or share it with anyone, except the providers that host Valerio for us or when the law requires it. We don't use Google user data to train AI models, and the events in your calendar are never sent to AI services.
Disconnecting. You can disconnect Google Calendar in Valerio's Settings at any time; we delete the stored tokens and your Google email straight away. You can also remove Valerio's access at myaccount.google.com/permissions. Deleting your Valerio account deletes all of this data.
Valerio's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We use cookies and similar technologies to operate and improve our services, in accordance with the Privacy and Electronic Communications Regulations 2003 (PECR). These fall into three categories:
You can manage your cookie preferences via the banner shown on your first visit, or by adjusting your browser settings. Note that disabling all cookies may affect some functionality.
Valerio is operated from the United Kingdom. Some of our service providers are based outside the UK, including in the European Economic Area and the United States. When we transfer personal data outside the UK, we rely on UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework, where the recipient is certified), the International Data Transfer Agreement (IDTA) or the UK Addendum to the European Commission's Standard Contractual Clauses, to ensure your data receives an equivalent level of protection.
We retain your personal data for as long as your account is active, or as needed to provide you with our services. If you close your account, we delete or anonymise your personal data within 90 days, except where we are required to retain it for legal or regulatory reasons.
Google Calendar tokens and your connected Google email are deleted immediately when you disconnect Google Calendar or delete your account (see section 6).
Customer data you have imported into Valerio as a CRM is returned or deleted in accordance with our data processing agreement.
Under UK data protection law, you have the following rights regarding your personal data:
To exercise any of these rights, contact us at contact@valerioapp.com. We will respond within one month of receiving your request; for complex or numerous requests, this period can be extended by up to two further months, and we will let you know if so.
If you are unhappy with how we handle your personal data, please contact us first at the same address: we will acknowledge your complaint within 30 days and respond without undue delay. You also have the right to complain to the UK data protection regulator, the Information Commission (ICO), at ico.org.uk.
We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. These include encrypted data transmission (TLS), access controls, and regular security reviews.
No method of transmission over the internet is completely secure. In the event of a personal data breach, we will notify the ICO within 72 hours where required by law, and we will inform you without undue delay if the breach is likely to result in a high risk to your rights and freedoms.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice in the Valerio application at least 14 days before the changes take effect.
Your continued use of Valerio after the effective date constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy or want to exercise your rights, please reach out: