How we collect, use, and protect your information
Your privacy is important to us. This Privacy Policy explains how Vyklow Analytics Pty Ltd ABN 22 688 212 795 ("Vyklow", "we", "us", "our") collects, uses, discloses, and protects your personal information when you use our website at www.vyklow.com and our products and services ("Products").
By using our Products, you consent to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our Products.
When you register for an account, contact us, or use our Products, you may provide us with: name and contact details (email, phone number), company name and role, billing information, account credentials, and any other information you choose to provide.
When you use our Products, we automatically collect: device information (browser type, operating system, device type), IP address, usage data (features accessed, timestamps), and error logs and diagnostic data.
Vireo Sentinel is our AI governance platform. When deployed in your organisation, Vireo Sentinel collects:
To protect user privacy, Vireo Sentinel explicitly does not collect:
We use the information we collect to: provide, maintain, and improve our Products; process transactions and send related information; respond to your enquiries and provide customer support; send you technical notices, updates, and security alerts; monitor and analyse usage patterns and trends; detect, prevent, and address technical issues and security threats; comply with legal obligations; and enforce our Terms of Service and other policies.
We process your personal information on the following legal bases:
Contract: Processing necessary to provide our Products to you under our Terms of Service.
Legitimate interests: Processing necessary for our legitimate business interests, such as improving our Products, marketing, and fraud prevention, where these interests are not overridden by your rights.
Consent: Where you have given us consent, such as for marketing communications. You may withdraw consent at any time.
Legal obligation: Processing necessary to comply with applicable laws and regulations.
We may share your personal information with:
Service providers: Third parties who perform services on our behalf, bound by confidentiality obligations.
Business transfers: In connection with a merger, acquisition, or sale of assets.
Legal requirements: When required by law, court order, or government request, or to protect our rights and safety.
With your consent: In other circumstances with your explicit consent.
We use the following third-party services to operate our Products:
| Provider | Purpose | Privacy Policy |
|---|---|---|
| Google Cloud | Hosting & infrastructure | cloud.google.com/terms/cloud-privacy-notice |
| Paddle | Payment processing | paddle.com/legal/privacy |
| Mailjet | Email delivery | mailjet.com/legal/privacy-policy |
| Userback | Bug reporting | userback.io/privacy |
We retain your personal information for as long as necessary to provide our Products and fulfil the purposes described in this policy. Specific retention periods are determined by your subscription plan and settings.
Account data: Retained for the duration of your account plus 30 days after termination.
Monitoring data (Vireo Sentinel): Retained according to your subscription plan settings. You may configure retention periods within the product.
Billing records: Retained for 7 years as required by Australian tax law.
After the applicable retention period, data is securely deleted or anonymised.
Your personal information may be transferred to and processed in countries outside Australia, including the United States and European Union, where our service providers operate.
When we transfer personal information internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, adequacy decisions, and contractual protections with service providers.
Depending on your location, you may have the following rights regarding your personal information:
Access: Request a copy of the personal information we hold about you.
Correction: Request correction of inaccurate or incomplete information.
Deletion: Request deletion of your personal information, subject to legal retention requirements.
Portability: Request a copy of your data in a machine-readable format.
Restriction: Request restriction of processing in certain circumstances.
Objection: Object to processing based on legitimate interests or for direct marketing.
Withdraw consent: Withdraw consent where processing is based on consent.
To exercise these rights, contact us at privacy@vyklow.com. We will respond within 30 days.
We implement appropriate technical and organisational measures to protect your personal information, including encryption of data in transit (TLS 1.2+) and at rest, access controls and authentication, regular security assessments, employee confidentiality obligations, and incident response procedures.
No method of transmission or storage is 100% secure. If you become aware of a security vulnerability, please contact us immediately at support@vyklow.com.
Our Products are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
For enterprise customers who require a Data Processing Agreement (DPA) to meet their compliance obligations under GDPR or other data protection laws, we provide a DPA on request. Please contact privacy@vyklow.com to request a DPA, or view our standard DPA at www.vyklow.com/dpa.
We comply with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth). If you believe we have breached the APPs, you may lodge a complaint with us or the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
If you are located in the European Economic Area or United Kingdom, you have additional rights under GDPR and UK GDPR. You have the right to lodge a complaint with your local supervisory authority. For the UK, this is the Information Commissioner's Office (ICO) at www.ico.org.uk.
Vyklow Analytics Pty Ltd acts as a data controller for personal information collected through our website and account management. When providing Products to enterprise customers, we typically act as a data processor on behalf of the customer (data controller).
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights. You have the right to know what personal information we collect, the right to delete your personal information, the right to opt-out of the sale of personal information (we do not sell personal information), and the right to non-discrimination for exercising your privacy rights.
Our website uses essential cookies required for the website to function. We do not use third-party tracking or advertising cookies. You can control cookies through your browser settings.
We may update this Privacy Policy from time to time. We will notify you of material changes by email or prominent notice on our website. Your continued use of our Products after changes take effect constitutes acceptance of the updated policy.
For questions about this Privacy Policy or to exercise your rights:
Vyklow Analytics Pty Ltd
ABN: 22 688 212 795
Privacy enquiries: privacy@vyklow.com
General support: support@vyklow.com
Website: www.vyklow.com
Document version: 1.0