Privacy Policy

Vancore Group, Cyprus. Privacy enquiries: privacy@govancore.com.

Where you use GoVancore as an employee or contractor of a customer organisation, that organisation is the controller of the business data in its workspace and we act as its processor.

Account data (name, work email, organisation, role), authentication data handled by our identity service, workspace content you enter (customers, suppliers, products, transactions), and technical data such as IP address, device/browser information and error diagnostics.

To provide and secure the service (contract), to prevent abuse and investigate incidents (legitimate interest), to meet accounting, tax and other statutory obligations (legal obligation), and — only where you opt in — to send product updates (consent).

We share data only with sub-processors that host, secure or operate the platform, and with integrations you explicitly connect (for example Shopify or a marketplace channel). We do not sell personal data.

Workspace data is retained while your organisation's subscription is active and for up to 90 days after termination, unless a longer statutory retention period applies. Security and audit logs are retained for up to 12 months.

Under the GDPR you may request access, rectification, erasure, restriction, portability, or object to processing. Contact privacy@govancore.com; we respond within one month. You may also lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus.

Data is encrypted in transit, isolated per organisation at the database level, and access is restricted by role. Automated agents have read-only access and require explicit human confirmation before any change is written.