GDPR

This page is a plain-language summary of how VM Hunter meets the EU General Data Protection Regulation, the UK GDPR and the Swiss data protection law. The full details are in the Privacy Policy, and the terms that apply when we process personal data for customers are in the Data Processing Agreement. If this summary and those documents differ, they prevail.

The provider is PILOTLAB LLC, a Wyoming limited liability company, doing business as VM Hunter ("VM Hunter", "we", "us"), 1309 Coffeen Ave Ste 1200, Sheridan, WY 82801, United States.

• Contract: running accounts, returning detection results, the portal, billing and support.
• Legitimate interests: security, fraud and abuse prevention, service emails that keep integrations working.
• Legal obligation: tax and accounting records, lawful requests.
• Consent: website analytics and the newsletter, which you can withdraw at any time.
• Customer authorisation: model improvement with call data, as below.

Customers authorise VM Hunter to use call audio, transcripts and detection results to train and improve VM Hunter's detection models, unless they opt out. To opt out, the account holder emails support@vmhunter.com. The opt-out applies to call data received after it. Trained models contain no recordings and are not shared with other customers or third parties.

Our support and engineering staff, including team members in Pakistan, may access personal data remotely to run and support the Service. Customers can request the list of our sub-processors by emailing support@vmhunter.com.

PILOTLAB LLC is based in the United States. VM Hunter is hosted in the United States. Some of the service providers we use are located in the United States. Our support and engineering staff, including team members in Pakistan, may access personal data remotely to run and support the service. When personal data from the EEA, the UK or Switzerland is transferred to a country without an adequacy decision, we use the European Commission's Standard Contractual Clauses, with the UK Addendum and Swiss amendments where they apply. Where a US provider is certified under the EU-U.S. Data Privacy Framework, we may rely on that certification for transfers to that provider.

You can ask to access, correct, delete, restrict or port your personal data, object to processing based on legitimate interests or to direct marketing, and withdraw consent at any time. We make no decisions about you based solely on automated processing that produce legal or similarly significant effects. Email support@vmhunter.com and we will respond within one month.

You also have the right to complain to a supervisory authority: in the EEA, the data protection authority where you live, work or where the issue arose; in the UK, the Information Commissioner's Office (ICO).

If one of our customers called you, that company is the controller of the call data. Contact it to exercise your rights. If you contact us, we will pass your request to the customer where we can identify it and help it respond.

The Data Processing Agreement applies automatically to every customer that sends us personal data as a controller. It includes the Standard Contractual Clauses, the UK Addendum and the Swiss amendments. As controller, you decide whether portal recording storage is on, tell the people you call what the law requires, and send only the data detection needs.