Privacy Policy
Last updated: September 13, 2026
This is a template privacy policy and does not constitute legal advice. Vrailux should have this policy reviewed by a qualified attorney, particularly to confirm compliance with GDPR, CCPA/CPRA and any other applicable laws in the regions where its users are located.
1. Information We Collect
- Account information: name, email address, and password (stored as a secure one-way hash, never in plain text).
- Submission information: photographs, item descriptions, brand/category details you provide when requesting authentication.
- Communications: messages you send us through the contact form or email.
- Technical information: IP address, browser type, and basic usage data collected automatically for security and site-performance purposes.
- Payment information: if payment processing is enabled, payment card details are handled directly by our third-party payment processor and are not stored on Vrailux servers.
2. How We Use Information
- To create and manage your account.
- To provide authentication review services and issue certificates.
- To communicate with you about your requests, account, or support inquiries.
- To maintain the security and integrity of the Service, including fraud and abuse prevention.
- To improve our Service and understand how it is used.
3. How We Share Information
We do not sell your personal information. We may share information with:
- Vrailux Experts and staff, solely to perform authentication review.
- Service providers who help us operate the Service (e.g., hosting, email delivery, payment processing), under confidentiality obligations.
- Authorities, when required by law, subpoena, or to protect the rights, safety or property of Vrailux or others.
A certificate result and its associated certificate code are, by design, publicly viewable on our verification page so that anyone can confirm a certificate's authenticity — this public record does not include your name, email, photos, or contact information.
4. Data Retention
We retain account, submission and certificate records for as long as your account is active and as needed to fulfill the purposes described in this policy, resolve disputes, and comply with legal obligations. You may request deletion of your account as described in Section 6 below.
5. Security
We use industry-standard measures to protect your information, including encrypted password storage, restricted file execution in upload directories, and access controls limiting who can view submission data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
6. Your Rights & Choices
Depending on your location, you may have the right to access, correct, or request deletion of your personal information, or to object to certain processing. To exercise these rights, contact us at authenticate@vrailux.app. We will respond within a reasonable timeframe consistent with applicable law.
7. Cookies
We use essential cookies (such as session cookies) required for login and basic site functionality. We do not currently use third-party advertising or tracking cookies. If this changes, this policy will be updated accordingly.
8. Children's Privacy
The Service is not directed to individuals under 18, and we do not knowingly collect personal information from children.
9. International Users
If you access the Service from outside the country where our servers are located, your information may be transferred to, stored, and processed in a different jurisdiction, which may have different data protection laws than your own.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date above.
11. Contact Us
Questions about this Privacy Policy can be sent to authenticate@vrailux.app or via our Contact page.