Draft — under legal review. This page is published for transparency only and does not create binding obligations. Operative Privacy Policy wording will be published after founder approval and qualified legal review.
VGTC collects only the information necessary to provide our trade compliance services. This includes your account details (name, email), uploaded documents (trade data files), and classification results generated by our AI system.
Your data is used solely to provide HS code classification, sanctions screening, and compliance reporting. We do not sell, share, or monetize your trade data. Core infrastructure is hosted by Railway (backend) and Supabase (authentication and database); the subprocessors in section 4 carry out specific functions such as payments, email, AI processing, screening, and analytics.
Uploaded content may be stored with your account or compliance history, depending on the workflow. We use access controls intended to restrict customer data to authorized users, and our infrastructure providers support encryption in transit and at rest. For current retention details, contact [email protected].
We engage the following subprocessors to operate VGTC. Each processes customer data only as needed to provide the service and is subject to data-protection commitments appropriate to its role, including data processing agreements where in place.
Where enabled, we also use Google Analytics and Meta Pixel for website analytics. These load only after you accept analytics cookies via our consent banner, are not used to process your trade documents, and can be disabled at any time.
Relevant document content and extracted fields may be sent to third-party AI providers to generate requested results. Provider handling, retention, and model-improvement terms depend on the applicable service configuration and provider terms.
For current data-handling details or a formal Data Processing Agreement (DPA), contact [email protected].
You can permanently delete your account and associated data at any time from Settings → Delete Account. This irreversibly erases your account and linked compliance records from our systems. You may also request deletion by emailing[email protected]; we process verified requests within 30 days. Retention and deletion can vary by workflow and applicable legal requirements.
Analytics: We use Google Analytics and Meta Pixel only after you accept analytics cookies via our consent banner. You can withdraw consent at any time.
For privacy-related inquiries: [email protected]