PRIVACY POLICY
This notice covers the ShopVavus website, inquiry forms, and customer support. It does not replace the privacy notice for a separate Vavus AI account or the data terms of a custom device deployment.
ShopVavus is operated by DCI Brands LLC, a Wyoming limited liability company, 312 W 2nd Street, Casper, WY 82601, United States, which is the controller of the information described here. Contact support@shopvavus.com.
Last updated: October 24, 2026. Our representative in the European Union under GDPR Article 27 is Dragoș Ignat, Str. General Șova nr. 21, Letea Veche, jud. Bacău, 607270, Romania. You may contact the representative on any matter relating to the processing of your personal data, in addition to or instead of contacting us.
We receive your name, email, message, inquiry type, and any organization, country, device quantity, languages, deployment preference, or topic you provide. Forms deliver this information to our inbox so we can answer, plan your project, or help with your device. We also receive information you send directly by email.
We store your email, order reference, and SIM number in our support systems and notify our team by email and private admin alerts to process the activation request and reply. We use the necessary SIM details when arranging activation with the connectivity service.
Our hosting services process request information such as IP address, browser information, requested pages, and security events to deliver and protect the site. Form handlers use IP addresses and submission times to limit repeated requests.
ShopVavus stores your privacy choice. A necessary preference cookie (sv_privacy on ShopVavus or vb_privacy on Vavus Space), or vavus_cookie_consent in local storage on Vavus AI, remembers your choice for 180 days. If you reject, a necessary vavus_no_stats cookie records that objection for 180 days so our servers stop counting your page loads too. Where first-party measurement runs before a choice, or after you accept, vavus_site_visitor remembers a random browser identifier for up to 90 days, and vavus_website_session in session storage groups activity until 30 minutes of inactivity or the tab closes. Only after you accept, Google Analytics uses _ga and _ga_* cookies, configured for up to 90 days, and Vavus AI may save referral attribution in vavus_first_touch for up to 90 days. Concierge chat uses a visitor identifier when it sends a request.
See the Cookie NoticeRequired fields let us handle the request; without them we may be unable to respond or activate a SIM. Optional fields are not required to send an inquiry. This site has no checkout and does not collect payment-card details.
Where European or UK data protection law applies, we use the following bases for processing.
Steps you request before a contract, or performing a contract with you, support project inquiries and existing-device services. For business contacts acting for an organization and general questions, our legitimate interest is responding to requests and managing customer relationships.
Our legitimate interest is keeping the website reliable and preventing abuse. We also process information when needed to comply with applicable legal duties or establish, exercise, or defend legal claims.
Our authorized team and service providers receive information needed for their work: hosting and security, email delivery, and SIM connectivity support. Form email is delivered through Resend or Vavus-operated mail servers. Vavus infrastructure uses Google Cloud hosting. We may disclose information where required by law or to protect rights and safety.
We do not sell personal information or share it for targeted advertising. Sending a support request does not subscribe you to marketing.
DCI Brands LLC operates in the United States. Vavus infrastructure also operates in the European Union (Frankfurt), and service providers may process information in other countries. Data protection laws in those countries may differ from those where you live. Transfers out of the European Economic Area, the United Kingdom or Switzerland rely on the European Commission’s Standard Contractual Clauses (Decision 2021/914), with the UK International Data Transfer Addendum and the Swiss adaptations where they apply. Contact support@shopvavus.com for information about the processing locations and transfer safeguards applicable to your information.
We retain records for as long as needed to answer the request, manage an ongoing project or support relationship, and meet applicable legal obligations or resolve a dispute. The type of request, its status, and any continuing obligation determine the period.
Security records are retained according to the time needed to investigate and prevent abuse. Retention can also be affected by an applicable legal obligation or an active dispute; contact us about a particular record.
Website forms are separate from a custom device installation. A project’s agreement describes that installation’s own processing and retention.
Depending on the law that applies, you may ask to access, correct, delete, restrict, or receive a portable copy of your personal information, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. We do not penalize you for exercising an applicable privacy right.
Email support@shopvavus.com with enough information to identify your inquiry or support request. We may need to verify your identity or an authorized agent’s authority. We respond within the period required by the applicable law. If we decline, we explain why and you can ask us to review the decision.
You may complain to your local data protection authority. In the EEA this includes the authority where you live, work, or believe a breach occurred; in the UK it is the Information Commissioner’s Office. Applicable US state laws may also provide complaint or appeal rights.
ShopVavus is a business-device and customer-support website, not a service directed to children. If you believe a child has provided personal information, contact us so we can review it and take appropriate action.
Other websites, including linked videos and marketplaces, have their own privacy practices. We update this notice when our practices change and show the revision date above. Material changes are brought to your attention through the site or another appropriate channel.
Vavus measures how its websites are used, to improve them. What runs before you choose depends on where you are. In most EU and EEA countries, and wherever your location is unknown, our website servers count page loads from the request your browser already sends (page, referring website, browser and operating system family, device type, language and country), with no cookie, script or identifier. In France, Spain, the Netherlands, Italy, the United Kingdom, Canada, Turkey, China, South Korea, Argentina, the United Arab Emirates and Saudi Arabia (and India from 13 May 2027), an anonymous Vavus script also counts visits, time on page, scrolling, page speed and named actions after a visible notice; it stores nothing on your device. Everywhere else, Vavus measures visits, pages, clicks, campaign tags and the advertising network a visit came from with its own first-party cookie, after a notice. If you accept, Vavus measures the same detail in every country, including where you click on a page, and Google Analytics runs. Our team may receive a private notification when a measured visit starts. Short links on our websites (addresses that start with /go/) count each click before sending you on, the same anonymous way: the referring website, browser and operating system family, device type and country, with the daily key described below and no cookie, script or identifier. Reject, Global Privacy Control and Do Not Track stop that count too.
Accepting optional analytics is not a condition of browsing or sending an inquiry. Reject is available alongside Accept, and Cookie settings in the footer changes your choice at any time. Rejecting stops all Vavus website measurement for your browser, including anonymous statistics and server page counts, and clears the website analytics identifiers in your browser. Global Privacy Control and Do Not Track have the same effect. Withdrawal does not erase previously lawful records immediately; they remain subject to retention and applicable deletion rights. Anonymous totals cannot be separated into your individual activity.
Anonymous statistics use a key that our server calculates from the website, your IP address and your browser type together with a random value that changes every day. The random value is deleted once the day's totals are calculated, so the key cannot be recreated or linked to another day. The key is never stored in your browser, your IP address is not stored, and only totals are kept: visitors, visits, bounce rate, time on site and breakdowns by page, source and device. Country is estimated from the request IP at the time of the request. Location is an estimate, and does not determine every privacy right you may have.
Vavus keeps individual website sessions, events, click positions and related visitor-notification records on its server for 30 days, anonymous visit records for at most two days, and totals (hourly page counts and daily visitor, visit, bounce and duration totals) for 13 months. Notifications already delivered to your phone follow its notification settings. Browser identifiers expire after at most 90 days and privacy choices after 180 days. Google Analytics processes consented measurements separately under its privacy and data-processing terms, including network information it receives directly. Its event and user retention follows the relevant property settings; aggregate Google reports and existing report history may be retained longer. These Vavus retention periods do not describe Google report retention.
Detailed website analytics, Google Analytics, click positions and, in the EU, the EEA and the other countries listed above, any browser identifier rely on consent. Server page counts in the EU and EEA, and anonymous statistics in France, Spain, the Netherlands and Italy, rely on our legitimate interest in understanding and improving our websites, within the national audience-measurement exemptions where they apply; you can object at any time with Reject. UK anonymous statistics rely on the statistical-purposes exception, with notice and an opt-out at no cost. Elsewhere, first-party measurement relies on notice with an opt-out, or on legitimate interest where that is the local basis. Necessary preference storage remembers a choice you request. Security and abuse prevention are separate from optional analytics.
Google Analytics receives measurements only after your analytics opt-in. Google processes them under its own privacy and data-processing terms and may process information outside your country. Advertising features and Google Signals are disabled for this website integration. Vavus measurement is first-party and self-hosted; we do not sell visitor information, share it for targeted advertising or send advertising click identifiers back to advertising networks.