Personal Information You Provide

Information that identifies you personally, which you provide directly to us:

Information Collected Automatically

When you access our services, we automatically collect certain information:

AI-Related Data Collection

Given the AI-powered nature of our services, we collect additional information specific to AI operations:

Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to collect information. For detailed information, please see our Cookie Policy.

Third-Party Data

Information we receive from third-party services:

• Authentication Providers: Profile information from Google or other OAuth providers
• Payment Processors: Transaction data from Stripe
• Analytics Services: Aggregated usage statistics from Google Analytics
• Web Data Services: Publicly available data extracted via Firecrawl for pricing analysis

Service Delivery and Operations

• Provide, operate, and maintain our AI-powered pricing intelligence platform
• Process and fulfill your requests for value models, pricing analysis, and reports
• Power our AI agents (Value Model Generator, Customer Data Integrator, Value Story Creator, and Pricing Analyst)
• Manage your account, authentication, and access permissions
• Process payments, manage subscriptions, and track credit usage
• Send service-related notifications, updates, and alerts
• Provide customer support and respond to inquiries

AI Model Operations

• Process your inputs through our AI systems to generate outputs
• Analyze patterns to improve AI accuracy, relevance, and usefulness
• Detect and correct potential errors, biases, or inaccuracies in AI outputs
• Develop safety measures and content filters for AI systems

Platform Improvement and Analytics

• Analyze usage patterns to improve features and user experience
• Monitor and analyze trends, performance, and service quality
• Develop new features, products, and AI capabilities
• Conduct research and testing to improve our algorithms
• Optimize platform performance, reliability, and security
• Benchmark pricing models and value metrics (using aggregated, anonymized data only)

Communications

• Send technical notices, updates, and security alerts
• Provide customer support and respond to your requests
• Send promotional materials and marketing communications (with consent)
• Conduct surveys and gather feedback
• Share product updates, new features, and best practices

Security and Compliance

• Detect, prevent, and address fraud, abuse, and security issues
• Enforce our Terms of Service and policies
• Comply with legal obligations and respond to legal requests
• Protect the rights, property, and safety of valueIQ and our users
• Monitor and log system access for security purposes
• Maintain audit trails for regulatory compliance

How We Use Data for AI Development

We are committed to transparency about how data may be used in connection with our AI services:

Aggregated and Anonymized Data

We may use aggregated, de-identified data derived from user interactions to:

• Improve the accuracy and performance of our AI models
• Develop new AI features and capabilities
• Conduct research on pricing strategies and value metrics
• Create industry benchmarks and best practices

Your Customer Data

• We do not use your identifiable Customer Data to train our foundational AI models without explicit consent
• Your specific business information, customer details, and proprietary data remain confidential
• AI outputs generated for you are based on your inputs and our pre-trained models

Opt-Out Rights

You may opt out of having your interaction data used for AI improvement purposes by contacting us at legal@valueiq.ai. Opting out will not affect your access to or use of our services.

Service Providers and Business Partners

We share information with trusted third-party service providers who perform services on our behalf:

These service providers are contractually obligated to: use your information only for the purposes we specify; protect your data with appropriate security measures; not share your data with unauthorized parties; delete data upon termination of services as required.

Legal Requirements and Protection

We may disclose your information if required by law or in good faith belief that such action is necessary to:

• Comply with legal obligations, court orders, or government requests
• Enforce our Terms of Service and other agreements
• Protect against legal liability
• Investigate fraud, security issues, or technical problems
• Protect the rights, property, or safety of valueIQ, our users, or the public

Business Transfers

If valueIQ is involved in a merger, acquisition, bankruptcy, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change via email and/or prominent notice on our platform, explain any choices you may have regarding your information, and ensure the acquiring entity honors this Privacy Policy or provides notice of changes.

With Your Consent

We may share your information for any other purpose with your explicit consent.

Aggregated or De-Identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you for research, marketing, analytics, benchmarking, or other purposes. This includes:

• Industry pricing benchmarks and trends
• Anonymized usage statistics
• Aggregated platform metrics

Data Storage

Your information is stored on secure servers provided by Supabase, which uses industry-standard cloud infrastructure (AWS). Data may be stored and processed in:

• United States (primary)
• Canada
• European Union (for EU users, where available)
• Other locations as necessary for service delivery

By using our services, you consent to the transfer of your information to these locations, subject to appropriate safeguards described in the International Data Transfers section.

Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations (tax, accounting, audit requirements)
• Resolve disputes and enforce our agreements
• Support business operations and analytics

Typical retention periods:

Upon account deletion, we will delete or anonymize your personal information within 90 days, except where retention is required by law or for legitimate business purposes as described above.

Security Measures

We implement comprehensive technical and organizational security measures to protect your information:

Data Breach Notification

In the event of a data breach that affects your personal information, we will:

• Notify affected users within 72 hours of becoming aware of the breach (or as required by applicable law)
• Notify relevant supervisory authorities as required
• Provide information about the nature of the breach, data affected, and recommended protective steps
• Document the breach and our response for compliance purposes

Access and Portability

• Right to Access: Request a copy of the personal information we hold about you, including data categories, processing purposes, and recipients
• Right to Portability: Request your data in a structured, commonly used, machine-readable format (JSON or CSV) for transfer to another service

Correction and Deletion

• Right to Correction: Request correction of inaccurate or incomplete personal information
• Right to Deletion: Request deletion of your personal information, subject to legal retention requirements and legitimate business needs

Processing Controls

• Right to Restrict Processing: Request limitation of how we process your data in certain circumstances
• Right to Object: Object to processing of your personal information for direct marketing or based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for processing based on consent, without affecting the lawfulness of prior processing

AI-Specific Rights

• Right to Human Review: Request human review of significant decisions made using automated processing
• Right to Explanation: Request meaningful information about the logic involved in automated decision-making
• Right to Opt Out of AI Training: Request that your interaction data not be used for AI model improvement

Complaint Rights

• Right to Lodge a Complaint: File a complaint with your local data protection authority about our data practices

How to Exercise Your Rights

To exercise any of these rights, you can:

• Email: legal@valueiq.ai
• Account Settings: Access your account settings to update or delete certain information
• Data Export: Use the data export feature in your account settings
• DPO Contact: Contact our Data Protection Officer at legal@valueiq.ai

Response Timeline: We will respond to your request within 30 days (or as required by applicable law). For complex requests, we may extend this period by an additional 60 days with notice. We may need to verify your identity before processing your request.

No Fee: We do not charge a fee for most requests. However, we may charge a reasonable fee for manifestly unfounded, repetitive, or excessive requests.

Marketing Communications

You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Updating your communication preferences in account settings
• Contacting us at legal@valueiq.ai

Note: Even if you opt out of marketing communications, we will still send you transactional and service-related messages essential to your use of the platform.

Transfer Safeguards

When we transfer personal data from the EU/EEA, UK, or other jurisdictions with data transfer restrictions, we implement appropriate safeguards, including:

• Standard Contractual Clauses (SCCs): EU Commission-approved contractual clauses with our service providers
• UK International Data Transfer Agreement (IDTA): For transfers from the UK
• Adequacy Decisions: Transfers to countries recognized as providing adequate protection
• Supplementary Measures: Technical and organizational measures to enhance protection where necessary

Data Localization

For certain enterprise customers, we may offer data localization options to store and process data within specific geographic regions. Contact legal@valueiq.ai for more information.

Notification of Changes

When we make material changes, we will notify you by:

• Posting a prominent notice on our platform
• Sending you an email notification (for significant changes)
• Requiring you to acknowledge the updated policy before continuing to use our services (for substantial changes)
• Updating the "Last Updated" date and version number at the top of this policy

Review and Acceptance

We encourage you to review this Privacy Policy periodically. Your continued use of our services after changes are posted constitutes your acceptance of the updated policy.