Privacy Policy

VRTL Score — Version 1.1

Last updated / Effective Date: February 3, 2026

This Privacy Policy explains how VRTL Score (“VRTL,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you access or use our website, application, and related services (collectively, the “Service”). By using the Service, you agree to the practices described in this Privacy Policy. This Policy is incorporated into and subject to our Terms of Service.

Definitions

“Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household.

“User Data” means any data you submit to the Service, including brand/domain inputs and generated reports.

1. Information We Collect

We collect the following categories of information:

a. Account Information

  • Name
  • Email address
  • Organization or agency name
  • Billing information (processed securely by our third-party payment processor; we do not store full card details)

b. User Data and Client Data

  • Domains, brands, competitors, prompts, configurations, and related inputs you submit
  • Reports, scores, analyses, and metadata generated through the Service

c. Usage and Technical Information

  • IP address
  • Browser type, device information, and operating system
  • Log data (pages viewed, actions taken, timestamps)
  • Cookies and similar technologies for authentication, session management, and analytics

2. How We Use Information

We use the collected information to:

  • Provide, operate, maintain, and improve the Service (including generating reports and analyses)
  • Authenticate users, manage accounts, and provide support
  • Communicate with you (e.g., service updates, security notices, responses to inquiries)
  • Ensure security, detect/prevent fraud or abuse, and enforce our Terms of Service
  • Comply with legal obligations
  • For legitimate business interests (e.g., product enhancement via aggregated data)

Our primary lawful bases for processing (where applicable, e.g., under GDPR) are contractual necessity (to deliver the Service) and legitimate interests (e.g., security, improvements).

3. AI Model Interactions and Third-Party Processing

To provide analyses and reports, we send necessary prompts, inputs, or content (e.g., brand/domain queries) to third-party AI providers (such as OpenAI, Anthropic, Google, or similar).

Key points:

  • We do not control these third-party AI systems or their outputs.
  • We do not use your Personal Information or User Data to train or fine-tune our own AI models.
  • We do not authorize or instruct third-party providers to use your data for training their models beyond what's necessary to process your specific request (subject to their policies).
  • Third-party providers process data solely to generate responses for us and are bound by their own privacy policies/terms. We select reputable providers with strong data protection commitments.

4. Aggregated and Anonymized Data

We may aggregate, de-identify, or anonymize data for analytics, product improvement, benchmarking, or research. Such data cannot reasonably identify you or your clients and is not subject to this Policy.

5. Data Sharing and Disclosure

We do not sell Personal Information (as defined under CCPA/CPRA).

We may share information with:

  • Service providers/subprocessors (e.g., hosting, databases, analytics, payment processors, AI providers) who are contractually obligated to protect it and use it only for our purposes
  • To comply with legal obligations, respond to lawful requests, protect rights/safety, or enforce our Terms
  • In connection with a merger, acquisition, bankruptcy, or asset sale (with notice where required)

6. Data Retention

We retain Personal Information and User Data only as long as necessary to provide the Service, fulfill obligations, resolve disputes, or meet legal/compliance requirements. Upon account deletion or request, we will delete or anonymize data subject to backups, legal holds, or aggregated use.

7. Your Rights and Choices

Depending on your location (e.g., California under CCPA/CPRA, EU/EEA under GDPR), you may have rights including:

  • Access to your Personal Information
  • Correction of inaccuracies
  • Deletion of your data (subject to exceptions)
  • Opt-out of sale/sharing of Personal Information (if applicable; we do not sell)
  • Limit use of sensitive Personal Information (if collected)
  • Object to or restrict certain processing
  • Withdraw consent (where consent is the basis)
  • Non-discrimination for exercising rights

To exercise rights, email contact@vrtlscore.com with details. We respond within required timelines (e.g., 45 days under CCPA, 1 month under GDPR). Verification may be required. Authorized agents may submit on your behalf with proof.

CCPA/CPRA Notice for California Residents

We collect the categories of Personal Information listed in Section 1. We use them for business/commercial purposes described in Section 2. We disclose to service providers as noted. No sale/sharing occurs. You have the rights above; submit requests to contact@vrtlscore.com.

8. Cookies and Tracking Technologies

We use cookies and similar technologies for essential functions (authentication, sessions) and analytics. You can manage preferences via browser settings, though disabling may limit functionality.

9. Security

We implement commercially reasonable administrative, technical, and organizational measures to protect information from unauthorized access, loss, or misuse. However, no method is 100% secure, and we cannot guarantee absolute security.

10. International Users and Data Transfers

The Service is hosted in the United States. If you access from outside the US (e.g., EU/EEA), your information may be transferred to and processed in the US or other jurisdictions. We use appropriate safeguards (e.g., Standard Contractual Clauses where required) for international transfers.

11. Children’s Privacy

The Service is not directed to individuals under 18 (or 16/13 in some jurisdictions). We do not knowingly collect Personal Information from children. If we learn we have, we will delete it.

12. Changes to This Privacy Policy

We may update this Policy. Changes will be posted here with the updated date. We will notify registered users via email or in-app notice for material changes. Continued use after the effective date constitutes acceptance.

13. Contact Us

For questions, rights requests, or concerns:
VRTL Score
contact@vrtlscore.com