VectraLabs Privacy Policy (Global)

1. Scope

This Privacy Policy explains how VectraLabs LLC (“VectraLabs”, “we”, “us”) collects, uses, discloses, and safeguards Personal Data in connection with:

• The VectraLabs.ai website,
• The VectraLabs marketplace,
• AI Agents including VectraLex, and
• Related services and communications

(collectively, the “Services”).

This Policy covers users globally and aligns with major frameworks including GDPR/UK GDPR, CCPA/CPRA, PIPEDA, and the Australian Privacy Principles.

2. Data We Collect

2.1 Information You Provide

• Identification & Contact: name, email, firm/company name, job title, phone.
• Account Data: username, password, authentication info.
• Billing Data: payment card details (processed via PCI-compliant third-party processors), billing address, tax info.
• Communications: emails, chat, support tickets, feedback, surveys.

2.2 Automatically Collected Data

• Device & Log Data: IP address, browser type, operating system, device IDs.
• Usage Data: pages visited, features used, timestamps, session duration, referrer URLs.
• Email Interaction Data: open/click-through rates.

2.3 Customer Data

Content, prompts, documents, and information submitted to the Services for processing by Agents.

2.4 Third-Party Sources

We may receive business contact info or lead data from partners, events, or public sources.

3. How We Use Data

We use Personal Data to:

• Provide, operate, secure, and maintain the Services.
• Create and manage accounts and subscriptions.
• Generate Outputs from Customer inputs.
• Respond to inquiries and provide support.
• Improve and develop new features, including via aggregated/anonymized analytics.
• Send service notifications, security alerts, and optional marketing (with opt-out).
• Detect, prevent, or investigate fraud, abuse, or security incidents.
• Comply with legal, regulatory, and contractual obligations.

We do not sell Personal Data.

4. Legal Bases (EU/UK Users)

For individuals in the EEA or UK, we process Personal Data based on:

• Performance of a contract (providing the Services),
• Legitimate interests (improving Services, security, B2B communications),
• Compliance with legal obligations,
• Consent (where required, e.g., marketing or certain cookies).

5. Sharing of Information

We may share Personal Data with:

• Service Providers/Subprocessors: hosting, infrastructure, analytics, support, communications, and payment vendors.
• Business Partners: in co-marketing or integration contexts, where you choose such connections.
• Professional Advisors: lawyers, auditors, insurers as needed.
• Authorities: where required by law, regulation, or court order.
• Successors: in connection with merger, acquisition, or corporate restructuring, subject to appropriate protections.

We require subprocessors to protect Personal Data and only use it per our instructions.

6. International Transfers

VectraLabs is based in the United States. Data may be transferred to and processed in countries that may have different data protection laws.

For EEA/UK users, where required, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent transfer mechanisms.

7. Security

We implement commercially reasonable technical and organizational measures, including:

• Encryption in transit and at rest (where applicable),
• Access controls and authentication,
• Logging and monitoring.

No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

In the event of a data breach affecting Personal Data, we will notify affected parties and regulators as required by law.

8. Data Retention

We retain Personal Data:

• For as long as necessary to provide the Services;
• As required by law, regulation, or to resolve disputes;
• For a reasonable period for internal reporting and backups.

Customers may request deletion of certain data, subject to legal and contractual limits.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access your Personal Data,
• Correct inaccurate information,
• Request deletion (“right to be forgotten”),
• Restrict or object to processing,
• Request data portability,
• Opt out of marketing communications,
• Lodge a complaint with a supervisory authority.

Requests can be made to info@vectralabs.ai.

10. Cookies & Similar Technologies

We use cookies and similar technologies to:

• Maintain sessions,
• Remember preferences,
• Analyze usage.

Where required by law (e.g., EU/UK), we will obtain consent for non-essential cookies.

11. Children

The Services are intended for professional users aged 18 and over. We do not knowingly collect Personal Data from children.

12. Changes

We may update this Privacy Policy from time to time. Material changes will be posted on our website and, where appropriate, notified via email.