Privacy Policy

1. Information We Collect

1.1 Information You Provide

When you register an account or use our services, you may provide:

• Account Registration: Company name, contact person name, email address, phone number, WeChat/WhatsApp ID, country/region, city, address
• Supplier-Specific: Product categories, certifications (e.g., ISO 9001, CE, FCC, RoHS), monthly production capacity, minimum order quantities
• Dealer-Specific: Sales channels (e.g., Amazon, eBay, independent website), target markets
• Product Information: Product names, descriptions, images, videos, specifications, pricing, HS codes, customs information, logistics details that you submit through the Platform
• Store Customer: Full name, email, phone, company name, country
• Communications: Messages, inquiries, and support requests you send through the contact form or other communication channels
• Authentication: Passwords (stored as hashed values, never in plain text)

1.2 Information Collected Automatically

When you access the Platform, we may automatically collect:

• Device information (browser type, operating system, device identifiers)
• Log data (IP address, access times, pages viewed, referring URLs)
• Cookies and similar technologies (session tokens, preference settings)
• Usage analytics (click patterns, navigation paths, feature interactions)

1.3 Information from Third Parties

We may receive information about you from our CRM system, business partners, or other third-party services that integrate with the Platform, including verification of your company status and business credentials.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Account Management: Creating and managing your account, authenticating your identity, and processing login sessions
• Platform Operations: Operating and maintaining the Platform, including product submission, review, and listing processes
• Business Matching: Connecting suppliers with dealers, facilitating product inquiries, quotations, and orders
• Communication: Sending notifications about your account activity, product review status, order updates, and platform announcements
• Review & Verification: Verifying supplier credentials, product compliance, and business legitimacy through our CRM review process
• Store Services: Operating white-label store fronts for dealers, processing end-customer orders and fulfillment
• Improvement & Analytics: Analyzing usage patterns to improve our services, develop new features, and enhance user experience
• Security & Compliance: Detecting and preventing fraud, unauthorized access, and other illegal activities; complying with applicable laws and regulations
• Legal Obligations: Fulfilling legal requirements, responding to lawful requests from public authorities

3. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Between Platform Users: Supplier product information (name, description, images, pricing, specifications) is shared with authorized dealers for business matching purposes. Dealer company names and contact information may be shared with suppliers for order processing.
• White-Label Stores: Product information from suppliers is displayed on dealer-operated white-label storefronts accessible to end customers.
• CRM Integration: Supplier and product data is synchronized with our CRM system (VR-CRM) for review, management, and operational purposes.
• Service Providers: We share information with trusted third-party service providers who assist us in operating the Platform (e.g., hosting providers, database services, email delivery services), subject to confidentiality obligations.
• Legal Requirements: When required by law, regulation, legal process, or governmental request.
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity.
• Consent: With your explicit consent for any other purpose.

4. Data Storage and Security

• Data Storage: Your information is stored on secure servers. We use Supabase (hosted on AWS) as our primary database provider. Data may be processed and stored in Hong Kong, mainland China, and other jurisdictions where our service providers operate.
• Encryption: Passwords are hashed using industry-standard algorithms and never stored in plain text. Data transmission is encrypted using TLS/SSL protocols.
• Access Controls: We implement role-based access controls and authentication mechanisms to limit access to personal information to authorized personnel only.
• Data Retention: We retain your personal information for as long as your account is active or as needed to provide services. Account and transaction records are retained for a minimum of 5 years for regulatory and dispute resolution purposes. You may request account deletion, subject to legal retention requirements.

While we implement robust security measures, no system is completely secure. We cannot guarantee absolute security of your data.

5. International Data Transfers

As a global platform, your information may be transferred to and processed in countries other than your own, including Hong Kong, mainland China, and countries where our service providers are located. We ensure appropriate safeguards are in place for such transfers, including:

• Standard contractual clauses with data processors
• Compliance with applicable data protection laws
• Ensuring recipients maintain adequate security measures

6. Cookies and Tracking Technologies

We use cookies and similar technologies for:

• Essential Cookies: Session authentication, security verification, and load balancing (these cannot be disabled)
• Functional Cookies: Remembering your preferences, language settings, and login state
• Analytics Cookies: Understanding how users interact with the Platform to improve our services

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete personal information
• Deletion: Request deletion of your personal information, subject to legal retention requirements
• Data Portability: Request transfer of your data in a structured, machine-readable format
• Objection: Object to the processing of your personal information for certain purposes
• Withdrawal of Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us at info@virygroup.com. We will respond to your request within 30 days.

8. Children's Privacy

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child, we will take steps to delete such information.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform and updating the "Last updated" date. Your continued use of the Platform after any changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: