Vorber privacy notice.

Who Vorber is and how to contact us

• Vorber Technology Ltd, registered in England and Wales under company number 16395984, is the controller for information submitted through the public website and basic account information used to respond to enquiries and manage access.
• Registered office: Office 7, 35-37 Ludgate Hill, London, EC4M 7JN. Use the Contact page at https://vorber.com/contact or email [email protected], and mark the message as a privacy enquiry, to contact Vorber about personal information.
• This notice covers visitors to vorber.com, people who contact Vorber, people who request a trial or workspace, and users who connect Microsoft 365 to Vorber CRM.
• For information a customer places in its workspace, the customer normally decides why that information is used and Vorber handles it to provide the service under the customer's instructions.

Information Vorber may collect

• Website and enquiry forms may collect your name, email address, company name, role, team size, enquiry topic, message and selected product or package options.
• Workspace registration may collect company identity, workspace name, administrator email, selected package, seat count, storage choices, billing state and operational setup information.
• If you connect Microsoft 365, Vorber may receive profile and connection information such as your Microsoft account email address, display name, user identifier, tenant identifier, granted scopes, token status and connection status.
• Where Microsoft email or calendar features are enabled, Vorber may process relevant email, calendar and attachment information needed to show customer communication history, send user-requested messages, sync appointments and support CRM evidence workflows.
• Vorber does not ask you to send passwords, payment card details or sensitive account credentials through public website forms.

How Vorber uses information

• Vorber uses enquiry and registration information to respond to you, prepare workspace access, manage trials or subscriptions, provide support, improve the website journey and protect the service from abuse.
• Microsoft profile connection information is used to show that a Microsoft account is connected and to support user-requested Microsoft features where the workspace administrator has enabled them.
• Customer communication and calendar information is used to support CRM records, timelines, appointment planning, sales workflow evidence and user-controlled actions inside Vorber.
• Vorber does not sell personal information to advertisers.

Lawful bases

• Vorber relies on steps requested before a contract and performance of a contract when handling information needed to answer a trial request, create or administer a workspace, provide subscribed features or support a connected service you choose to use.
• Vorber relies on legitimate interests to answer business enquiries, support customers, secure and troubleshoot the service, prevent abuse, keep business records and improve the website and product where those interests are not overridden by people's rights.
• Vorber relies on legal obligations where information must be kept or used for tax, accounting, regulatory, fraud-prevention or lawful-request purposes.
• Vorber relies on consent for optional Google Ads and Microsoft Advertising measurement. Consent can be refused or withdrawn at any time through Cookie settings in the website footer.

Microsoft 365 integration

• Vorber uses delegated Microsoft access so Vorber acts on behalf of the signed-in user for the connected features that have been enabled and consented to.
• Vorber may request Microsoft permissions to read the signed-in user's basic profile, send mail as the signed-in user, read user mail for CRM-relevant customer history, and read/write the signed-in user's calendars for appointment sync.
• Vorber uses Microsoft access for CRM communication and appointment workflows. It is not designed to operate as an unattended email agent and does not send background sales emails without a user action.
• Users or Microsoft administrators may be asked to consent to Microsoft permissions before those features can be used.

Email, attachments and customer timelines

• Where email timeline features are enabled, Vorber may read mailbox messages to identify customer-related communication by known contact email address, known customer domain or configured allocation rules.
• CRM-sent emails are user-initiated and are intended to appear in the user's Microsoft Sent Items where Microsoft supports that behaviour.
• Email attachments such as order confirmations may be reviewed and manually imported into Vorber as CRM or pipeline evidence. Vorber should not silently progress commercial stages without an authorised user confirming the evidence.
• Vorber does not delete, move, archive or modify mailbox messages as part of the core CRM email timeline.

Calendar and Teams meeting links

• Where calendar sync is enabled, Vorber may create, read, update and cancel relevant Outlook calendar appointments for the connected user so Vorber appointments and Outlook appointments can stay aligned.
• Vorber may create an online meeting link, such as a Microsoft Teams meeting link, when a user chooses that option while creating or editing an appointment.
• Vorber does not read Teams chat, meeting transcripts or Teams message history for the core CRM calendar workflow.

What Vorber does not access for the core integration

• Vorber does not import Outlook contacts as the source of truth for CRM contacts. Vorber CRM records remain the customer data source of truth.
• Vorber does not request Microsoft file, OneDrive or SharePoint access for the core email and calendar integration.
• Vorber does not request directory-wide Microsoft access, Teams chat access, mailbox write/delete access or unattended tenant-wide application mailbox access for the core CRM integration.
• Shared mailbox sending or shared mailbox reading is not part of the core public integration unless later enabled through separate administrator controls and appropriate Microsoft permissions.

Cookies, analytics and security

• Vorber uses necessary website technologies for form protection, session behaviour, security, service reliability and cookie preference handling.
• If a visitor accepts optional measurement, Vorber loads Google Ads and Microsoft Advertising UET tags on the public marketing pages to understand which adverts bring visitors to the website and how those pages are used. The marketing-page tags are not loaded when non-essential measurement is rejected.
• Server logs and security records may include IP address, browser information, request path, timestamps and security events so Vorber can troubleshoot, protect the service and investigate abuse.

Providers and international transfers

• Core Vorber CRM databases and backups at rest are held in the UK on infrastructure controlled by Vorber. Each customer workspace uses its own isolated database boundary.
• Vorber uses service providers for connected email and calendar features, security and form protection, payment processing, mapping, enabled AI assistance and, only after consent, Google Ads and Microsoft Advertising measurement. Those providers receive only the information needed for their service.
• Microsoft, Google, Stripe, Cloudflare and other providers may process information outside the UK. Where this is a restricted transfer, Vorber requires an applicable UK adequacy regulation or appropriate safeguards such as the UK International Data Transfer Agreement or UK Addendum.
• Vorber does not sell personal information to advertisers. Information may also be disclosed where required by law or needed to establish, exercise or defend legal rights.

Retention

• Information is kept only for as long as it is needed for the purpose collected, service operation, legal/accounting records, security, audit, dispute handling or customer support.
• Users and administrators can disconnect Microsoft access using the controls provided by Vorber or Microsoft. Some retained records may remain where needed for audit, evidence, billing, legal or support reasons.
• Retention is reviewed using the type of record, the active customer or enquiry relationship, security and evidence needs, contractual commitments and applicable legal limitation or record-keeping periods.

Your rights and complaints

• Depending on the circumstances and lawful basis, you may have rights to access, correct, erase or restrict use of your information, receive portable information, and object to processing based on legitimate interests.
• You have an absolute right to object to direct marketing. Where processing relies on consent, you can withdraw that consent without affecting processing that was lawful before withdrawal.
• Use https://vorber.com/contact or email [email protected] to exercise a right or make a data-protection complaint. Vorber may need to confirm your identity and the relevant account before acting on a request.
• You may also complain to the Information Commissioner's Office. Current contact and complaint details are available at https://ico.org.uk/make-a-complaint.

AI and automated decisions

• Vorber's current AI assistance prepares material for a user to review. It does not send customer communication or take a legally significant decision solely by automated means.
• Vorber does not use public enquiry information to make solely automated decisions that produce legal or similarly significant effects.

Contact

• For privacy questions, use the Contact page at https://vorber.com/contact or email [email protected].