Privacy Policy

1. Introduction

VQFlow Systems ("Company", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the VQFlow platform ("Service"). Please read this policy carefully.

2. Information We Collect

We collect the following types of information:

2.1 Personal Information

When you register for an account or use the Service, we may collect:

• Full name, email address, and phone number
• Job title and organizational affiliation
• Identity or business verification documents (for KYC/KYB compliance)
• Profile information and user preferences
• Payout and payment-related information for reviewer compensation

2.2 Usage Data

We automatically collect information about how you interact with the Service, including:

• Pages visited, features used, and actions taken within the platform
• Annotation and review activity, including timestamps and task completion data
• Device information, browser type, and IP address
• Log data and error reports

2.3 Uploaded Data

Datasets, media files, and related content you upload for annotation purposes are stored securely. We do not use your uploaded data for any purpose other than providing the Service to you.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Authenticate users and manage account access
• Assign and track annotation tasks and quality assessments
• Process reviewer compensation and payout records
• Generate analytics and performance reports
• Communicate with you about your account, updates, and support requests
• Comply with legal obligations, including KYC/KYB and regulatory requirements
• Detect, prevent, and address fraud, security issues, or technical problems

4. Data Sharing and Disclosure

We do not sell your personal information. We may share information in the following circumstances:

• Within Your Organization: Authorized users within your organization (e.g., QA Managers, Administrators) may access relevant data as needed to manage workflows and quality assurance.
• Service Providers: We may share data with trusted third-party providers who assist us in operating the Service (e.g., cloud hosting, payment processing), subject to strict confidentiality agreements.
• Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the transaction.

5. Data Security

We implement industry-standard security measures to protect your data, including:

• AES-256 encryption for data at rest
• TLS 1.3 encryption for data in transit
• Role-based access controls ensuring users only access data relevant to their permissions
• Regular security audits and vulnerability assessments
• Secure cloud infrastructure with SOC 2 Type II compliance

While we strive to protect your information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. We may also retain certain information as required by law, to resolve disputes, enforce our agreements, or for legitimate business purposes.

Uploaded datasets and annotations are retained according to the data retention policies configured by your organization's administrator. You may request deletion of your data by contacting us.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information
• Object to or restrict the processing of your data
• Request portability of your data in a structured, machine-readable format
• Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us at privacy@vqflow.io.

8. Cookies and Tracking

The Service uses session storage and essential cookies to maintain your authentication state and platform preferences. We do not use third-party advertising cookies or tracking pixels.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws, including GDPR-compliant transfer mechanisms where applicable.

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the platform or via email. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at privacy@vqflow.io.