This Privacy Policy explains how VurtuoLabs (“VurtuoLabs,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects personal information when you visit vurtuolabs.com and related pages, submit an inquiry, schedule a meeting, communicate with us, or otherwise interact with our public website (collectively, the “Site”).
This Policy applies to information for which VurtuoLabs determines the purposes and means of processing. It does not govern personal information we process solely on behalf of a client under a services agreement; that information is governed by the applicable client agreement, instructions, and data processing terms. It also does not apply to third-party websites, platforms, or services that we do not control.
1. Scope and roles
For privacy laws that distinguish between controllers and processors, VurtuoLabs generally acts as a controller for Site visitor, prospect, business-contact, and vendor information. When delivering implementation, integration, automation, data, or AI services for a client, VurtuoLabs may act as a processor or service provider and handles client data only as authorized by the relevant agreement and documented instructions.
2. Information we collect
Information you provide
Contact and identity information, such as name, business email address, telephone number, company, job title, and professional profile information.
Inquiry and project information, such as the systems involved, business requirements, use cases, timelines, budgets, constraints, attachments, and the contents of messages or meeting notes.
Scheduling and event information, such as requested meeting times, time zone, invitees, calendar metadata, and attendance information.
Commercial information, such as service interests, proposals requested, relationship history, and transaction or billing information if you become a client.
Feedback and communications, including survey responses, testimonials you authorize, support messages, policy requests, security reports, and other correspondence.
Information collected automatically
Device and network information, such as IP address, browser type, operating system, device type, language, approximate location derived from IP address, and diagnostic identifiers.
Usage information, such as pages viewed, referring and exit pages, dates and times, navigation paths, link interactions, form events, and general engagement with Site content.
Cookie and similar-technology information described in our Cookie Policy, including identifiers used for essential operation, fraud prevention, preferences, and aggregate measurement.
Information from other sources
Business contact information from referrals, public professional profiles, conference or event organizers, partners, and commercially available business directories.
Information from service providers that support hosting, analytics, scheduling, communications, customer relationship management, security, and related business operations.
Please do not submit government identification numbers, financial-account credentials, health information, precise geolocation, biometric identifiers, passwords, regulated client data, or other sensitive information through ordinary Site forms unless we expressly request it through an approved secure channel.
3. How we use personal information
Operate, maintain, secure, troubleshoot, and improve the Site and our business operations.
Respond to inquiries, schedule conversations, prepare proposals, evaluate project fit, and communicate about requested services.
Establish and manage client, prospect, vendor, and partner relationships, including contracting, invoicing, recordkeeping, and service administration.
Personalize content and understand which pages, topics, and outreach channels are useful, using aggregate or deidentified information where practical.
Protect VurtuoLabs, clients, users, and the public; detect misuse, fraud, security events, unauthorized access, or violations of our Terms.
Comply with law, enforce agreements, respond to lawful process, establish or defend legal claims, and maintain required business records.
Send service-related communications and, where permitted, limited business-development communications. You may opt out of promotional email at any time.
4. Legal bases for processing
Where a law requires a legal basis, we process personal information as necessary to take steps at your request or perform a contract; for our legitimate interests in operating, securing, improving, and developing our business; to comply with legal obligations; to protect vital or legal interests; or with consent where consent is required. You may withdraw consent at any time, without affecting processing already completed.
5. How we disclose information
Service providers and subprocessors that perform hosting, website delivery, analytics, scheduling, email, communications, cloud storage, CRM, security, professional, and administrative functions under appropriate contractual restrictions.
Professional advisers, including attorneys, accountants, insurers, auditors, and consultants, when reasonably necessary for their services or our legal interests.
Business counterparties in a financing, merger, acquisition, reorganization, sale of assets, diligence process, or similar transaction, subject to appropriate confidentiality protections.
Government authorities, courts, regulators, law enforcement, or other parties when required by law or when reasonably necessary to protect rights, safety, property, systems, or the integrity of our services.
Other parties at your direction or with your consent.
We do not knowingly sell personal information for monetary consideration. Based on our current Site practices, we do not process personal information for targeted advertising or profiling that produces legal or similarly significant effects. If those practices materially change, we will update this Policy and provide any notices and choices required by applicable law.
6. Cookies, analytics, and preference signals
The Site may use essential cookies and similar technologies and may use limited analytics or embedded-service technologies. Details, purposes, and controls appear in the Cookie Policy. Where legally required, nonessential technologies will be used only after the applicable choice is obtained. We will recognize legally valid browser-based opt-out preference signals when required and technically applicable to our processing.
7. Data retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to manage relationships, complete requested work, maintain accurate records, comply with tax and legal obligations, resolve disputes, enforce agreements, and address security or abuse. Retention periods vary by information type, relationship, sensitivity, legal requirements, and operational need. When information is no longer required, we take reasonable steps to delete, anonymize, or securely isolate it, subject to backups and lawful holds.
8. Security and incident response
We use administrative, technical, and organizational safeguards designed to protect the confidentiality, integrity, and availability of personal information. Measures may include access controls, least-privilege practices, authentication, encryption in transit, secure configuration, logging, vendor review, backups, and incident-response procedures appropriate to the nature of the information and our business. No internet transmission or storage system can be guaranteed completely secure.
If we determine that a security incident requires notice, we will provide notice to affected individuals and authorities in the manner and within the time required by applicable law. Texas law generally requires notice to affected individuals without unreasonable delay and, when applicable, no later than 60 days after determining that a qualifying breach occurred, subject to statutory exceptions and law-enforcement delay.
9. Your privacy rights
Depending on where you live and subject to exceptions, you may have rights to confirm whether we process your personal information; access or obtain a portable copy; correct inaccuracies; delete information; opt out of sale, targeted advertising, or certain profiling; withdraw consent; restrict or object to processing; and appeal a decision on a request. You will not be discriminated against for exercising a privacy right.
To submit a request, email info@vurtuolabs.com with the subject “Privacy Request” and describe the right you wish to exercise. Because VurtuoLabs operates online and maintains a direct relationship with Site visitors, this email method is the primary request channel. We may request information reasonably necessary to verify identity and authority. Authorized agents may submit requests where permitted, but we may require proof of authorization and direct verification with the individual.
If we deny a request, you may appeal by replying to the decision with the subject “Privacy Appeal” and explaining the basis for the appeal. We will respond within the period required by applicable law and, where required, provide information about contacting the relevant regulator or attorney general.
10. Texas residents
The Texas Data Privacy and Security Act may provide Texas consumers rights to access, correct, delete, and obtain a portable copy of personal data, and to opt out of targeted advertising, sale, or certain profiling. The Act also requires covered controllers to provide a clear privacy notice, limit collection to what is adequate, relevant, and reasonably necessary, use reasonable security practices, and provide a request appeal process. Some organizations, information types, and small businesses are exempt in whole or in part. VurtuoLabs honors applicable Texas rights regardless of whether a particular statutory exemption ultimately applies.
11. Other U.S. state disclosures
Residents of California, Colorado, Connecticut, Delaware, Iowa, Indiana, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Utah, Virginia, and other states may have additional rights under laws effective now or in the future. Applicability depends on statutory thresholds and exemptions. Where a law applies, we will honor covered requests, required opt-outs, and authorized-agent mechanisms.
For California residents, the categories of personal information described above may correspond to identifiers; customer-record information; commercial information; internet or network activity; approximate geolocation; professional or employment-related information; and inferences drawn from those categories. We collect and disclose these categories for the business purposes described above. We do not knowingly sell or share personal information as those terms are defined by the California Consumer Privacy Act based on our current Site practices, and we do not knowingly sell or share the personal information of consumers under 16.
12. International visitors
VurtuoLabs is based in the United States. If you access the Site from another country, information may be processed in the United States and other countries where our providers operate. Those locations may have different data-protection laws. Where required, we rely on recognized transfer mechanisms or another lawful basis and apply contractual and technical safeguards appropriate to the transfer.
13. Children’s privacy
The Site is intended for business audiences and is not directed to children under 13. We do not knowingly collect personal information from children under 13 through the Site. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action. We do not knowingly sell or use for targeted advertising the personal information of minors.
14. Automated systems and AI
We may use automation or AI-assisted tools to organize inquiries, draft internal notes, summarize communications, support security, or improve operations. We do not use Site-submitted personal information to make solely automated decisions that produce legal or similarly significant effects about Site visitors. Client projects involving AI are governed by the applicable client agreement, approved architecture, data instructions, and controls.
15. Third-party services
Links, calendars, forms, videos, social networks, repositories, and other embedded or connected services may be operated by third parties. Their privacy practices are governed by their own notices. We encourage you to review those notices before providing information. A link does not imply that VurtuoLabs controls or endorses a third party’s privacy practices.
16. Changes to this Policy
We may update this Policy to reflect changes in law, technology, vendors, services, or business practices. The effective date at the top shows the latest revision. If a change materially affects how we use personal information, we will provide additional notice when required. Continued use of the Site after an update does not waive rights that cannot legally be waived.
17. Contact us
VurtuoLabs · Dallas, Texas, United States · info@vurtuolabs.com. Use the subject “Privacy Request” for rights requests, “Privacy Appeal” for appeals, or “Privacy Question” for general inquiries.