Last Updated: December 20, 2024

VDF AI ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, process, and safeguard your data when you use our services.

1. Information We Collect

Personal Information

We may collect the following types of personal information:

  • Contact Information: Name, email address, phone number, company name, job title
  • Account Information: Username, password, profile information
  • Billing Information: Payment details, billing address, transaction history
  • Technical Information: IP address, browser type, device information, usage patterns
  • Communication Data: Messages, support tickets, feedback, survey responses

Automatically Collected Information

We automatically collect certain information when you use our services:

  • Log data (IP addresses, browser types, operating systems)
  • Usage analytics and performance metrics
  • Cookies and similar tracking technologies
  • Device identifiers and network information

2. How We Use Your Information

We use your personal information for the following purposes:

  • Service Delivery: Provide, maintain, and improve our AI solutions and services
  • Account Management: Create and manage your account, authenticate users, process payments
  • Communication: Send service updates, security alerts, support messages, and marketing communications
  • Analytics: Analyze usage patterns, improve service performance, and develop new features
  • Legal Compliance: Comply with legal obligations, resolve disputes, and enforce agreements
  • Security: Protect against fraud, unauthorized access, and other security threats

3. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on:

  • Contract Performance: Processing necessary to fulfill our service agreements
  • Legitimate Interests: Improving services, security, and business operations
  • Legal Compliance: Meeting regulatory and legal requirements
  • Consent: Where you have provided explicit consent for specific processing activities

4. Data Sharing and Disclosure

We may share your information in the following circumstances:

  • Service Providers: Trusted third-party vendors who assist in service delivery (hosting, payment processing, analytics)
  • Business Partners: Strategic partners for joint services or integrations, with your consent
  • Legal Requirements: When required by law, court order, or to protect our rights and safety
  • Business Transfers: In connection with mergers, acquisitions, or asset sales

We do not sell your personal information to third parties.

5. Data Security

We implement comprehensive security measures to protect your personal information:

  • Encryption: Data encrypted in transit and at rest using industry-standard protocols
  • Access Controls: Role-based access with multi-factor authentication
  • Infrastructure Security: Secure cloud infrastructure with regular security audits
  • Employee Training: Regular security awareness training for all personnel
  • Incident Response: Comprehensive procedures for security incident management

6. Your Rights and Choices

You have the following rights regarding your personal information:

  • Access: Request copies of your personal data
  • Rectification: Correct inaccurate or incomplete information
  • Erasure: Request deletion of your personal data
  • Portability: Receive your data in a structured format
  • Restriction: Limit how we process your data
  • Objection: Object to certain processing activities
  • Withdraw Consent: Revoke previously given consent
  • Lodge Complaints: File complaints with supervisory authorities

7. Data Retention

We retain your personal information only as long as necessary for:

  • Providing our services and fulfilling contractual obligations
  • Complying with legal and regulatory requirements
  • Resolving disputes and enforcing agreements
  • Legitimate business purposes such as fraud prevention

When data is no longer needed, we securely delete or anonymize it in accordance with our data retention policies.

8. International Data Transfers

VDF AI is based in Sweden (EU). When we transfer personal data outside the European Economic Area (EEA), we ensure adequate protection through:

  • European Commission adequacy decisions
  • Standard Contractual Clauses (SCCs)
  • Binding Corporate Rules (BCRs)
  • Other appropriate safeguards as required by applicable law

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

  • Essential Cookies: Required for basic website functionality
  • Performance Cookies: Help us understand how visitors use our website
  • Functional Cookies: Remember your preferences and settings
  • Marketing Cookies: Deliver relevant advertisements and measure campaign effectiveness

You can control cookie preferences through your browser settings or our cookie consent manager.

10. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify you of material changes by:

  • Posting the updated policy on our website
  • Sending email notifications to registered users
  • Providing in-app notifications where applicable

Your continued use of our services after changes become effective constitutes acceptance of the updated policy.

12. Contact Information

For questions about this Privacy Policy or to exercise your rights, please contact us:

VDF AI AB
Data Protection Officer
Email: info@vdf.ai
Phone: +46 70 563 81 85

Mailing Address:
VDF AI
Sörmlandsvägen
192 54 Sollentuna
Stockholm, Sweden

We will respond to your inquiries within 30 days as required by applicable law.