Consent Policy & Wording

Consent is only valid in Krivollo if it is:

• Informed — the person is told who is collecting the information, what for, and how to opt out;
• Voluntary — not a pre-ticked box, not bundled as a condition of something unrelated, and not obtained under pressure;
• Specific and current — for the particular channel and purpose (consent to email is not consent to SMS), and refreshed if the purpose changes;
• Given by someone with capacity — an adult able to understand it; and
• Recorded — with how, when and the wording used, so it can be proved later.

Withdrawing consent must be as easy as giving it, and must be honoured promptly.

When a customer uses Krivollo to collect information about people or to contact them, the customer is responsible for having a lawful basis and any consent required. Under our Terms of Service, customers must:

• Give a collection notice. Tell people, at or before collection, who the customer is, why the information is collected, who it may go to (including overseas), and how to access it or complain (Australian Privacy Principle 5).
• Check purchased or supplied leads. Before contacting a lead from a supplier, be satisfied the person consented to being contacted by the customer (or a described class of business) for this purpose. Record the supplier’s consent wording against the lead.
• Email and SMS: consent, identify, unsubscribe. Commercial electronic messages need express or properly inferred consent, must identify the sender, and must contain a functional unsubscribe that is honoured within 5 business days (Spam Act 2003).
• Telemarketing calls. Wash numbers against the Do Not Call Register unless the person has consented, and keep to the permitted calling hours — generally 9am–8pm weekdays and 9am–5pm Saturdays, with no calls on Sundays or national public holidays — and the other rules in the telemarketing industry standard.
• Recording. Tell people at the start of a call or meeting that it will be recorded (and transcribed or analysed by AI, if it will be), and obtain consent where the law of any party’s location requires it. Laws differ between states and countries; where in doubt, get express consent from everyone and stop recording if anyone objects.
• AI. Do not let people believe they are dealing with a human when they are dealing with an AI, and disclose AI-generated voice or video.
• Sensitive information. Collect health, financial-hardship or other sensitive information only when necessary and with express consent.
• Sharing with partners. Get consent before passing a person’s details to a referral partner or another business, unless they would reasonably expect it and the law allows it.
• Honour opt-outs. Add anyone who asks not to be contacted to the workspace’s do-not-contact list straight away.

• Consent records on each lead — method, time and the exact wording — plus a per-person consent time for second parties.
• Do-not-contact and suppression lists checked before calls, SMS and email, including phone-only entries.
• Unsubscribe links on automated emails that add the address to the do-not-email list in one click.
• Calling-hours and Do Not Call Register washing rules, with the option to enforce them or only warn.
• Recording disclosure scripts with two modes: notice (read the disclosure and record the answer) or gate (do not record or transcribe unless the person agrees). Customers operating where all-party consent is required should use gate.
• A visible recording indicator in video meetings.
• Human approval for AI-drafted messages by default, and compliance scanning that holds messages containing risky claims.

These tools support compliance; configuring and using them correctly is the customer’s responsibility.

Replace the bracketed text. Keep the wording close to the original — every element is there for a reason — and save the final version in Krivollo so it is recorded against each consent.

Anyone can withdraw consent by telling the business that contacted them — by replying STOP, using an unsubscribe link, or saying so on a call. Customers must record the withdrawal in Krivollo immediately. If you cannot reach the business, email privacy@krivollo.com and we will pass your request on.

We may suspend messaging, calling or recording features, or a workspace, where we reasonably believe they are being used without the required consent — for example on credible complaints of spam or covert recording — and we will co-operate with regulators investigating misuse.