Privacy policy

Thank you for trusting VREAL LABS PTY LTD (ACN 676 130 751). This privacy policy sets out how we handle your personal data.

V-REAL Labs was designed to verify authenticity of media. For this reason, protecting the integrity and privacy of user content is fundamental to our platform.

Media captured using the V-REAL platform is digitally signed on the user's device and stored solely for the purpose of verification.

V-REAL Labs does not sell, analyze, monetize, or commercially exploit user media.

Personal Information: In this policy, "Personal Information" means all information or data that identifies or could be used to identify a person, or that is associated with such information or data.

This Privacy Policy is available at https://www.vreallabs.com/privacy and may also be accessed from within our products.


1. What Information Do We Collect?

1.1 Information you provide to us

We collect information that you provide directly to us when you use our website, mobile applications, and services. This may include when you:

  • Host or create a web conferencing session using V-REAL verification services

  • Register for an account or authenticate using OpenID Connect (OIDC)

  • Subscribe to our newsletters

  • Contact us for support, feedback, or complaints

  • Interact with us via social media

  • Use our mobile application to capture and digitally sign media

Information collected may include:

  • Your name

  • Email address

  • Account username

  • Technical support communications

  • Host and participant information associated with a conferencing session

Where you use the V-REAL mobile application or web conferencing verification service, we may also process:

  • Audio recordings

  • Video recordings

  • Media files (images, audio, or video) that you intentionally capture using the V-REAL application

  • Cryptographic signatures associated with captured media

  • Metadata necessary to verify authenticity of media

This information is collected solely to provide the V-REAL authenticity verification service.


1.2 Automatically collected information

When you access our website or services, we automatically collect certain technical information such as:

  • IP address

  • Browser type and version

  • Device type

  • Operating system

  • Time and date of access

  • Geographic region (approximate)

  • Website interaction information

We may also use cookies and similar technologies when you visit our website. Cookies are small data files stored on your device that help us understand how visitors interact with our website.

These technologies allow us to:

  • measure website performance

  • understand how users navigate our website

  • improve usability and reliability

  • remember user preferences where applicable

The information collected through cookies typically includes technical data such as browser type, device information, pages visited, time spent on pages, and referring websites. This information is used only for website analytics, performance monitoring, and improving the functionality of our services.

You can control or disable cookies through your browser settings, although doing so may affect the functionality of some parts of the website.

This data is used in aggregated and de-identified form for:

  • Service performance monitoring

  • Security monitoring

  • Product improvement

  • Website analytics

This type of data is commonly exposed by web browsers when accessing any website.


1.3 Information from third-party services

Where you authenticate using third-party identity providers (such as Google, Microsoft, or Apple via OpenID Connect), we may receive limited account information necessary to authenticate you, such as:

  • Your name

  • Your email address

  • A unique identifier from the identity provider

This information is used only to enable authentication and access to our services.


1.4 Sensitive Personal Information

V-REAL Labs does not intentionally collect highly sensitive Personal Information such as health or financial data unless it is directly related to the functionality of our product. Where we do collect sensitive Personal Information, we will obtain your express consent before collecting, storing, or transmitting it, and we will clearly explain why it is needed.

2. How Do We Use Your Information?

We use personal information to:

  • Provide our authenticity verification services

  • Enable secure login and authentication

  • Provide technical support

  • Maintain and improve product performance

  • Develop new features and services

  • Monitor service reliability and security

  • Conduct internal analytics using de-identified aggregated data

  • Send marketing communications where you have consented to receive them (see Section 6)

Media content policy

Media content captured using the V-REAL platform (including images, audio, and video) is processed solely for the purpose of digital signing, verification, and storage for the user who captured the content.

V-REAL Labs does not:

  • Sell user media

  • Monetize user media

  • Analyze user media for marketing or advertising

  • Train artificial intelligence models using user media

  • Share user media with third parties for commercial purposes

Media content remains under the control of the user who captured it, subject only to the technical processing required to provide the service.


3. Your Consent and Controls

Where our product accesses, collects, or transmits your Personal Information to an outside service or third party, we will:

(a)  describe to you how the information will be accessed, used, or shared, including the types of parties to whom it may be disclosed;

(b)  obtain your express opt-in consent through the product's user interface before the activity takes place; and

(c)   provide you with a mechanism in the product's user interface through which you can later rescind your permission and opt out.


4. When Do We Disclose Information?

We may disclose personal information only in limited circumstances, including:

  • To service providers who assist us in operating our platform (for example payment processors or infrastructure providers)

  • Where required by law

  • Where required by law enforcement authorities

  • To prevent serious threats to life, safety, or security

  • To investigate fraud, security incidents, or criminal activity

V-REAL Labs does not sell personal information to third parties.

If personal information is disclosed in response to legal obligations or security incidents, we will keep a written record of such disclosures where required by law.


5. Third-Party Services

Our services may integrate with third-party platforms including:

  • Google

  • Apple

  • Microsoft

  • Zoom

These services may process your personal information according to their own privacy policies.

You should review the privacy policies of those services before using them.

V-REAL Labs is not responsible for how third-party platforms collect or use your information.


6. Zoom Conferencing Verification Service

V-REAL provides a verification service that operates in conjunction with the Zoom conferencing platform.

V-REAL offers an optional media authenticity verification service that may be used alongside the Zoom video conferencing platform.

When the V-REAL web conferencing verification application is used by a host participant, the application processes media originating from the host participant’s device in order to apply a cryptographic digital signature and verify the authenticity of the media stream.

This may include processing:

  • Video originating from the host participant

  • Audio originating from the host participant

  • Cryptographic signatures applied to the media

  • Host participant username

  • Host participant email address

  • Host participant IP address

  • Duration of the media stream

  • Viewer participant usernames

  • Viewer participant email addresses

This information is processed solely to provide the V-REAL authenticity verification service and to allow participants to view the result of media verification.

Zoom operates as an independent service provider and processes personal information according to its own privacy policies and terms of service.

Zoom’s privacy statement is available here: https://www.zoom.com/en/trust/privacy/privacy-statement/

Hosts using V-REAL services are responsible for ensuring that participants are informed when audio or video recording or verification services are active and for obtaining any necessary participant consent.


7. Marketing

We may use your contact information (such as name and email address) to send:

  • Product updates

  • Security notifications

  • Service announcements

  • Newsletters

  • Product launches

Marketing communications are sent in accordance with the Australian Spam Act 2003.

You may opt-out at any time using the unsubscribe link in our communications.

We do not sell or provide personal information to third parties for their marketing purposes.


8. Opting Out

You may opt out of communications or services by:

9. Storage, Security, and Data Retention

V-REAL Labs takes reasonable steps to protect personal information from:

  • Unauthorized access

  • Misuse

  • Loss

  • Disclosure

  • Alteration

Security measures include:

  • Cryptographic signing technology

  • Secure transmission protocols

  • Controlled access to backend infrastructure

Personal information is stored on servers located within Australia.

We retain personal information only for as long as necessary to provide the service or meet legal obligations.

Where we collect, store, or transmit Personal Information, we use modern cryptography methods to secure that data, including encryption in transit and at rest. Data is transmitted using TLS1.2 or higher and data at rest is secured using AES.


10. Access, Correction, and Deletion

You may request access to personal information we hold about you.

You may also request correction or deletion of that information.

Requests may be submitted by: support@vreallabs.com or via the contact form at https://www.vreallabs.com/contact-us/

Deletion requests may take up to 28 days to process.


11. Exercising Your Rights

If you have concerns or complaints about how your personal information is handled, please contact us.

If we cannot resolve your complaint, you may contact the Office of the Australian Information Commissioner (OAIC).

https://www.oaic.gov.au/


12. Children’s Privacy

Our products and services are not directed at children under the age of 13. We do not knowingly collect Personal Information from children under 13.

If we become aware that we have collected Personal Information from a child under 13 without appropriate parental consent, we will take steps to delete that information promptly.

13. Changes to This Policy

We may update this Privacy Policy periodically, including as we add new features and functionality to our products.

The most recent version will always be available at: https://www.vreallabs.com/privacy