Privacy Policy
Current as of August 9, 2026. We may update these terms as our services evolve — material changes will be announced through the platform.
VVOX Enterprises ("VVOX", "we", "us") is committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Greek and European law. This policy explains what data we collect, why, and what rights you have.
1. Data Controller
The controller of your personal data is VASILEIOS MISARGOPOULOS, founder of VVOX, acting as a natural person until the company is incorporated. Contact: support@vvoxenterprises.com. After incorporation, this section will be updated with the legal entity's details (company name, registered office, VAT number, companies-register number).
2. What Data We Collect
We collect account information (name, email, hashed password), usage data (interactions with our platforms), and, where relevant to a specific product, profile data you choose to provide. We never collect more than is necessary for the service you use. For basic site analytics, we use Cloudflare Web Analytics, which is cookieless and does not collect personal data or use cross-site tracking. For professionals registering as partners, we additionally collect the business name and tax registration number (ΑΦΜ) — for sole proprietorships, the ΑΦΜ is personal data. We collect this to verify professional status and support the trader/consumer distinction (Greek Law 2251/1994 as amended by Law 4933/2022) and trader traceability (DSA Regulation, Article 30), with performance of a contract and legal obligation as the legal basis. It's retained for as long as the partner account remains active.
3. Legal Basis for Processing
We process personal data based on: performance of a contract (providing the service you signed up for), your consent (where explicitly requested), legitimate interest (security, fraud prevention), and legal obligation (tax, accounting).
4. How Noemia Processes Your Data
Noemia is an AI system and says so in every conversation. What is sent to the model is: the system instructions, the history of the current conversation, and whatever you type. No account details are sent — not even your email address. The model runs at Groq Inc. in the United States; the transfer is covered by Standard Contractual Clauses. If you are signed in, conversations are stored so you can pick them up on any device, and are deleted automatically after 90 days. Noemia makes no decisions about you and does not profile or score you in any way.
5. Data Sharing
We do not sell personal data. We may share data with processors strictly necessary to operate the service (hosting, file storage, email delivery, error tracking, and the provider of Noemia’s language model). There is no payment processor: no payment is processed through the platform, each bound by data processing agreements compliant with GDPR.
6. International Transfers
Where data is processed outside the European Economic Area, we ensure adequate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
7. Data Retention
We retain personal data for the following periods: • Listings and photos — for as long as they are published, and 12 months after they are withdrawn, sold or rented. • Conversations with Noemia — 90 days. • Waitlist — 24 months. If you unsubscribe, we keep your entry until then precisely so that we do not email you again. • Partner enquiries — 12 months. Messages sent through the contact form are not stored in a database; they arrive as email at support@vvoxenterprises.com. • Technical logs — 14 days. These include your IP address, which is personal data, kept for security and fault diagnosis. • Backups — 14 days, on a rolling basis. • Professional details (VAT number, company name) — for as long as the account exists, and thereafter for as long as tax law requires. • User account — for as long as you keep it. You can delete it yourself at any time. When you request deletion, your data is removed from live systems immediately. It remains for up to 14 days inside backups, until those are automatically recycled, and is not used for any purpose during that time.
8. Your Rights
Under GDPR, you have the right to access, rectify, erase, restrict, or port your data, and to object to processing based on legitimate interest. You can export or erase your account data instantly, at any time, from your account dashboard. For rectification, restriction, portability, or objection requests, email support@vvoxenterprises.com and we will respond within the statutory one-month timeframe. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (1-3 Kifisias Ave., 115 23 Athens, www.dpa.gr).
9. Security
We apply industry-standard security measures including storing passwords as irreversible hashes, access controls, and continuous monitoring to protect your data against unauthorized access.
10. Changes to This Policy
We may update this policy as our services evolve. Material changes will be communicated through the platform.