Privacy policy

Who operates this website

AUDORIVO is operated by VSZAPOWER Limited (微贊控股（香港）有限公司), Hong Kong. For privacy questions, access or correction requests, or to request deletion of your information, contact our team on WhatsApp: +852 6071 6913. Please mention AUDORIVO so we can identify the relevant service.

Information we collect and why

• Newsletter: your email address, optional name, signup source, consent time and notice version, confirmation time, subscription status and email delivery status. We use these to confirm your request, manage subscriptions and send the updates you requested.
• Support: information you choose to send through WhatsApp, including your contact details and message content. We use it to answer your question and follow up on your request. Please do not send payment card details or unnecessary identity documents.
• Site operation and security: our hosting and security providers process network and browser information to deliver pages, prevent abuse and diagnose errors. Our application uses short-lived hashed IP/time buckets for rate limiting; these are not stored as raw IP addresses in our analytics database.
• Traffic measurement: page paths, referring domains, campaign labels, approximate country, device category and clicks on WhatsApp, add-to-cart and checkout buttons. We use these to understand which pages and sources are useful. We do not store full referring URLs, search queries or URL fragments in the first-party analytics database.

Email confirmation and unsubscribe

We send a confirmation request through Resend. You become a confirmed subscriber only after you confirm through the email. Confirmation links expire after 24 hours. You can withdraw your subscription using the unsubscribe link in our emails or by contacting us. We keep an unsubscribe record to avoid sending future updates; another signup does not automatically reactivate an unsubscribed address.

Browser storage and measurement choices

The cart uses local storage to remember selected products until you remove them or clear browser data. First-party traffic measurement uses a random visit identifier in session storage; a new visit begins after 30 minutes of inactivity. It does not identify a person across devices. Our traffic script does not collect events when your browser sends Do Not Track or Global Privacy Control. You can also block scripts or clear site data in your browser, although some features may stop working. Administrator sign-in uses a secure, HttpOnly session cookie with an eight-hour lifetime; shoppers do not need an administrator account.

Cloudflare also provides website performance measurement, hosting and security services. Its performance beacon can report page and browser timing information independently of our first-party traffic script. See Cloudflare’s privacy policy for its processing practices. We do not use advertising pixels or personalized advertising on this site.

Service providers and external links

We use Cloudflare for hosting, storage, delivery, performance measurement and Turnstile anti-abuse checks, and Resend to deliver subscription emails. These providers receive information needed to supply their services. Their infrastructure may process information outside Hong Kong or your country. Access to stored subscription information is restricted to authorized administrators.

WhatsApp is an external messaging service. Opening its link takes you to that service; its own privacy terms apply to the messages and account information you share there. See WhatsApp’s privacy policy and Resend’s privacy policy. We do not sell personal information.

Checkout status

Real orders and live payments are not currently open. The public checkout is a demonstration and does not charge a payment card. Do not enter real payment details in test flows. If live checkout becomes available, we will update this notice to identify the payment processing, order and delivery information collected before accepting real orders.

Retention

First-party analytics events are kept for a rolling 90-day period; expired records are removed when subsequent traffic is processed. Subscription and consent records are kept while needed to manage your request. Suppression records are retained to respect unsubscribe choices. Confirmation links stop working after 24 hours, but related consent and sending records may remain. Support correspondence is retained while needed to handle the enquiry and any related issues. You may ask us to review or delete information we no longer need. Some information may need to be retained for security, dispute resolution or legal obligations. Provider logs and backups follow the applicable provider arrangements.

Your requests and rights

You can ask what personal information we hold about you, request correction or deletion, withdraw newsletter consent, or raise a privacy concern using the contact above. We may ask for proportionate information to verify a request and protect another person’s records. Depending on your location, additional rights may apply, including restriction, objection, portability and a complaint to the relevant privacy authority. We assess requests under the law applicable to your circumstances.

Children and policy updates

This site is intended for a general adult audience. We do not knowingly request subscriptions from children. If you believe a child has provided personal information, please contact us. We update this page when our practices change and show the latest effective date above.