Privacy Policy

Vrools ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our website, mobile applications, and related services (collectively, the "Services"). By using the Services, you consent to the data practices described in this policy.

Information You Provide. We collect information you voluntarily provide, including:

• Account registration details (name, email address, username, password)
• Profile information (biography, profile photo, location, skills, social links)
• Payment and billing information (processed by our third-party payment providers)
• Listing and product information you publish on the Platform
• Messages, reviews, ratings, and other communications
• Support requests and correspondence
• Verification documents when required

Information Collected Automatically. When you use the Services, we automatically collect:

• Device information (device type, operating system, browser type and version)
• Log data (IP address, access times, pages viewed, referring URLs)
• Usage data (features used, interactions, search queries, browsing behavior)
• Location data (approximate location derived from IP address)
• Cookie and tracking technology data (see our Cookie Policy)

Information from Third Parties. We may receive information from third-party authentication providers when you choose to register or log in using a third-party account, payment processors regarding transaction status, and publicly available sources.

We use the information we collect to:

• Provide, operate, maintain, and improve the Services
• Process transactions and send related notifications
• Create and manage your account
• Facilitate communication between buyers and sellers
• Personalize your experience and deliver relevant content
• Send administrative messages, updates, and security alerts
• Respond to your comments, questions, and support requests
• Monitor and analyze usage trends and preferences
• Detect, prevent, and address fraud, abuse, and security issues
• Comply with legal obligations and enforce our Terms of Service
• Protect the rights, property, and safety of Vrools and our users

If you are located in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases:

• Contract Performance: Processing necessary to fulfill our contractual obligations to you, including account management and transaction processing
• Legitimate Interests: Processing necessary for our legitimate business interests, such as fraud prevention, security, service improvement, and marketing, where these interests are not overridden by your rights
• Consent: Processing based on your freely given consent, which you may withdraw at any time
• Legal Obligation: Processing necessary to comply with applicable laws and regulations

We do not sell your personal information. We may share your information in the following circumstances:

• Between Users: Transaction-related information is shared between buyers and sellers as necessary to complete transactions
• Service Providers: We share data with third-party vendors who perform services on our behalf, including payment processing, data hosting, email delivery, analytics, and customer support. These providers are contractually obligated to protect your information
• Legal Requirements: We may disclose your information if required by law, regulation, legal process, or governmental request
• Protection of Rights: We may disclose information to protect the rights, property, or safety of Vrools, our users, or the public
• Business Transfers: In connection with a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred as part of that transaction
• With Your Consent: We may share your information for any other purpose disclosed to you with your consent

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that differ from the laws of your country. When we transfer personal data internationally, we take appropriate safeguards to ensure your information remains protected, including standard contractual clauses, data processing agreements, and compliance with applicable transfer mechanisms.

We retain your personal information for as long as your account is active or as needed to provide you the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. When we no longer have a legitimate business need to process your information, we will either delete or anonymize it.

Certain information, such as transaction records, may be retained for longer periods as required by applicable tax, legal, or regulatory requirements.

We implement industry-standard technical and organizational security measures to protect your information, including encryption in transit and at rest, access controls, regular security assessments, and secure data storage. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

In the event of a data breach that affects your personal information, we will notify you and the relevant authorities as required by applicable law.

Depending on your location, you may have the following rights regarding your personal data:

For All Users:

• Access your personal data and receive a copy
• Correct inaccurate or incomplete information
• Delete your account and personal data
• Object to or restrict certain processing activities
• Withdraw consent where processing is based on consent

Additional Rights for EEA/UK Residents (GDPR):

• Data portability (receive your data in a structured, machine-readable format)
• Right to lodge a complaint with a supervisory authority
• Right not to be subject to automated decision-making, including profiling

Additional Rights for California Residents (CCPA/CPRA):

• Right to know what personal information is collected, used, and disclosed
• Right to delete personal information
• Right to opt out of the sale or sharing of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise any of these rights, please contact us through your account settings or via our Contact page. We will respond to your request within the timeframe required by applicable law.

The Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a child under 18, we will take steps to delete such information promptly.

We respect Do Not Track ("DNT") signals and the Global Privacy Control ("GPC") signal. When we detect a valid DNT or GPC signal, we limit non-essential data collection and tracking activities in accordance with applicable law.

The Services may contain links to third-party websites or services that are not owned or controlled by Vrools. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on the Platform and updating the "Last updated" date. Your continued use of the Services after any changes constitutes acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us through our Contact page or email us at [email protected].