Privacy Policy

01 Overview and Scope

VCare Services ("VCare", "we", "us", or "our") is dedicated to protecting the confidentiality, integrity, and privacy of personal data and enterprise intelligence entrustment. This Privacy Policy describes how we collect, store, process, transfer, and safeguard information when you access our websites, enterprise software, APIs, customer portals, and autonomous AI defense platforms (collectively, the "Services").

When acting as a service provider or data processor for enterprise business clients, our processing of transaction payload data is governed by the enterprise Master Services Agreement (MSA) and Data Processing Addendum (DPA) executed with that organization.

02 Information We Collect

We collect information directly from you, automatically through your interaction with our platforms, and via authorized enterprise API integrations:

• Account and Contact Information: Name, professional work email, corporate affiliation, job title, phone number, and authentication credentials when creating an account or requesting investor documentation.
• Enterprise Integration Telemetry: Metadata concerning API requests, payload throughput, error rates, system timestamps, and autonomous agent operational status.
• Fraud Detection Signals: Hashed identifiers, transaction velocity vectors, device fingerprints, IP addresses, browser user-agents, and behavioral risk scores generated during proactive security evaluation.
• Communication Records: Customer support correspondence, investor deck requests, sales inquiries, and feedback submitted through our contact forms.

03 AI Model Training & Data Sovereignty Guarantee

Autonomous AI architectures require rigorous boundaries. We adhere to the highest standard of machine learning ethics:

• No Public Foundation Model Training: Your confidential corporate records, transaction streams, and customer databases are strictly quarantined and never incorporated into generalized training corpuses.
• Private Tenant Optimization: Any adaptive weights or reinforcement learning optimizations deployed for your tenant remain cryptographically bound to your organization alone.
• Cryptographic Isolation: Tenant environments operate with separate encryption key hierarchies, preventing unintended data exposure between client spaces.

04 Purposes of Processing

We process your information exclusively for the following specified, legitimate enterprise purposes:

• Delivering autonomous AI workflow execution, invoice auditing, and ERP synchronization.
• Detecting, preventing, and neutralizing fraudulent transactions, synthetic identity theft, and automated cyberattacks in real time.
• Maintaining the stability, scalability, and cryptographic security of our infrastructure.
• Communicating critical administrative notices, service updates, security alerts, and fulfilling investor document requests.
• Satisfying legal obligations, statutory compliance, audit requirements, and court orders.

05 Legal Bases for Processing (GDPR & CCPA/CPRA)

If you are a resident of the European Economic Area (EEA), the United Kingdom, or Switzerland, our legal bases under Article 6 of the General Data Protection Regulation (GDPR) include:

• Performance of a Contract: Providing our autonomous platforms and fulfilling contractual obligations under our agreements.
• Legitimate Interests: Operating real-time fraud mitigation, securing networks, and preventing systemic financial damage.
• Compliance with Legal Obligations: Preserving transaction logs required by anti-money laundering (AML) and financial regulations.
• Consent: Where explicitly collected, such as when subscribing to investor circulars or specialized technical whitepapers.

06 Security & Encryption Standards

VCare maintains defense-grade technical and organizational safeguards designed to prevent unauthorized access, loss, alteration, or disclosure:

• Encryption in Transit: All data transmitted to or from VCare Services is encrypted using Transport Layer Security (TLS 1.3) with perfect forward secrecy.
• Encryption at Rest: Storage volumes, databases, and backup repositories are secured using hardware-accelerated AES-256 encryption.
• Access Control: Strict Zero-Trust Architecture, multi-factor hardware authentication, least-privilege role-based access control (RBAC), and continuous audit logging.
• Continuous Penetration Testing: Independent third-party vulnerability assessments and continuous automated attack surface monitoring.

07 Third-Party Disclosures & Sub-Processors

We do not sell, rent, or trade your personal or enterprise data to third parties. We may share data only with:

• Authorized Sub-processors: SOC 2 and ISO 27001-certified cloud infrastructure providers bound by stringent Data Protection Addenda.
• Enterprise Integration Partners: Systems that you explicitly instruct us to connect to, such as your existing ERP or payment gateway.
• Regulatory & Legal Authorities: When compelled by valid legal process, subpoena, or to prevent catastrophic financial crime.

08 International Data Transfers

VCare operates globally. Where data originating in the EEA or UK is transferred to jurisdictions that have not received an adequacy decision, we utilize European Commission Standard Contractual Clauses (SCCs) alongside supplementary technical measures including end-to-end payload encryption. Sovereign regional data residency hosting options are available for eligible enterprise deployments.

09 Data Subject Rights

Depending on your geographic jurisdiction (including GDPR, UK GDPR, and California CCPA/CPRA), you may exercise the following rights regarding your personal information:

• Right of Access: Request a copy of the personal information we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal records, subject to regulatory retention laws.
• Right to Restrict or Object to Processing: Limit how we process your information.
• Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format.
• Non-Discrimination: We will never discriminate against you for exercising any of your statutory privacy rights.

10 Retention & Secure Erasure

We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy, service active enterprise contracts, and satisfy statutory tax, accounting, or security audit requirements. When information is no longer required, it is permanently erased using cryptographic shredding protocols or irreversibly anonymized.

11 Cookies & Telemetry

Our public marketing site utilizes essential cookies strictly necessary for navigation, security authentication, and load balancing. We do not employ intrusive third-party behavioral ad trackers or cross-site surveillance networks. You can manage cookie preferences through your individual browser settings.

12 Contact Our Data Protection Officer (DPO)

If you have questions, concerns, or requests regarding this Privacy Policy or our security practices, please contact our Data Protection Office: