Privacy Policy

Last updated: 14 July 2026

This Privacy Policy explains how IVO Media Ltd ("IVO", "we", "us" or "our") collects, uses and protects personal data when you use the IVO creative platform and related websites and services (the "Service"). IVO Media Ltd is the data controller for the personal data described in this policy. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Personal data we collect

Information you provide

• Account data — your name, email address, the organisation you belong to, your role and your password (stored in encrypted form).
• Content — the creative assets, designs and other materials you upload to or create within the Service.
• Support and communications — information you provide when you contact us for support or otherwise correspond with us.

Information we collect automatically

• Usage data — actions you take in the Service, feature usage and diagnostic logs.
• Device and connection data — IP address, browser type, device information and sign-in timestamps.
• Cookies and similar technologies — used to keep you signed in, remember preferences and understand how the Service is used.

Information from third parties

• Identity providers — if you sign in using Google or Microsoft, we receive basic profile information (such as your name, email address and a unique identifier) to authenticate you and link your account.

2. How we use personal data

• to provide, operate, maintain and secure the Service;
• to authenticate you and manage your account and access;
• to respond to your enquiries and provide customer support;
• to monitor, analyse and improve the Service and develop new features;
• to detect, prevent and address fraud, abuse and security incidents; and
• to comply with our legal obligations and enforce our terms.

3. Legal bases for processing

We rely on the following legal bases under the UK GDPR:

• Performance of a contract — to provide the Service to you and your organisation.
• Legitimate interests — to secure, maintain and improve the Service, provided your interests and rights do not override those interests.
• Consent — where we ask for it, for example for certain non-essential cookies; you may withdraw consent at any time.
• Legal obligation — where processing is necessary to comply with the law.

4. Cookies

We use strictly necessary cookies to operate the Service (for example, to keep you signed in) and may use analytics cookies to understand usage. You can control cookies through your browser settings; disabling strictly necessary cookies may prevent parts of the Service from working.

5. How we share personal data

We do not sell your personal data. We share it only:

• with service providers who process data on our behalf (sub-processors), such as cloud hosting, infrastructure, analytics and identity providers, under contracts that require them to protect it;
• within your organisation, where accounts and content are shared for collaboration;
• where required by law, regulation or valid legal process; and
• in connection with a merger, acquisition or reorganisation, subject to appropriate safeguards.

6. International transfers

Where personal data is transferred outside the UK, we put in place appropriate safeguards — such as UK adequacy regulations or the International Data Transfer Agreement / Standard Contractual Clauses — to ensure it receives an equivalent level of protection.

7. Data retention

We retain personal data for as long as your account is active or as needed to provide the Service, and thereafter only as necessary to comply with our legal obligations, resolve disputes and enforce our agreements. When data is no longer required, we delete or anonymise it.

8. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse, including encryption of credentials in transit and at rest and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Your rights

Subject to applicable law, you have the right to access, rectify or erase your personal data, to restrict or object to certain processing, to data portability, and to withdraw consent where processing is based on consent. To exercise these rights, contact us at support@ivo.io. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk, although we would appreciate the chance to address your concerns first.

10. Children

The Service is intended for business use and is not directed at children under the age of 16. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy here and revise the "Last updated" date above; where changes are material we will take reasonable steps to notify you.

12. Contact us

For any privacy questions or requests, please contact us: