Vals Designer Privacy Policy

What we collect

• Your account: your name, your email address and the organizations you belong to.
• Your Google profile, if you sign in with Google: your name, email address and profile picture.
• What you create: writeups, results files and images, each version you submit for review, and your comments and replies. We record who submitted each version and who wrote each comment, and when.
• Review decisions: when a reviewer from Vals AI approves a page or asks for changes, we record the decision, the reviewer’s comments and the time.
• Usage: we count page views with an analytics service that doesn’t use cookies. Our hosting provider also records technical details of each request, such as your IP address and browser, to run and secure the service.

Signing in with Google

You can sign in to Vals Designer with your Google account. When you do, Google shares your name, email address and profile picture with us. We use them only to create your account, sign you in, and show your name to the people you work with in Vals Designer. We don’t sell this information or use it for advertising. We share it only with the service providers described below.

How we use your information

• To sign you in and keep each organization’s pages separate.
• To show your organization who started, edited, submitted or commented on a page.
• To let Vals AI review submitted pages and publish approved ones on vals.ai.
• To fix problems, prevent abuse and keep Vals Designer secure.
• To understand which parts of Vals Designer are used, so we can improve it.

We don’t sell your information or use it for advertising.

Who can see it

• Your organization. Members of your organization can see and edit your organization’s pages, and see who submitted them and who commented.
• Vals AI. In Vals Designer, Vals AI staff see pages submitted for review and their comments, not drafts. Only reviewers from Vals AI can approve a page or ask for changes.
• Everyone, once a page is approved. Approving a page publishes its writeup, results file and images on vals.ai, where anyone can read them. Comments and review notes are never published.
• Service providers. A sign-in provider, which also emails your sign-in codes; cloud hosting providers in the United States; and Google, if you choose to sign in with Google. They use your information only to provide their service to us.
• When the law requires it. We may disclose information to comply with the law, or to protect the rights, property or safety of Vals AI, our users or others.

Cookies

Vals Designer sets two cookies: one keeps you signed in, and one remembers which organization you’re working in. Your browser also stores sign-in information so you stay signed in between visits. Page views are counted without cookies, and we don’t use advertising cookies.

Where and how long we keep it

Your information is stored in the United States. We keep your account and your organization’s pages for as long as your organization uses Vals Designer, and approved pages for as long as they’re on vals.ai. We keep every version you submit, so it’s always clear what a reviewer approved.

You can remove images from a draft yourself. To delete a page, your account or everything we hold about you, email our data protection officer.

Security of your information

• Vals Designer is served only over HTTPS, so what you send is encrypted on the way to us. What we store is encrypted and kept in private storage that can’t be reached from the internet.
• Access controls in our storage, not only in the app, keep each organization’s pages separate.
• Vals Designer doesn’t use passwords. You sign in with a one-time code sent to your email, or with Google.
• Only Vals AI staff who need it can reach our production systems. Administrator access requires approval, and changes to production are approved before they go live.
• You can report a security issue through our vulnerability disclosure program .

No way of sending or storing information is completely secure, so we can’t guarantee absolute security. If a breach affects your personal information, we’ll notify you as required by law.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal information, to restrict or object to how we use it, and to complain to a data protection authority. To use any of these rights, email our data protection officer. We’ll respond within a reasonable time, at no cost to you.

International transfers

Vals AI is based in the United States, and we process your information there. For people in the European Economic Area and the United Kingdom, we rely on standard data protection clauses for these transfers.

Children

Vals Designer is for professionals and isn’t meant for children. We don’t knowingly collect information from children.

Changes to this policy

When we change how Vals Designer handles personal information, we’ll update this page and its effective date.

Contact

Questions, requests and complaints go to our data protection officer: