1. Introduction
Vectech Limited ("Company", "we", "our", "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website vectech.co or use any of our services, including NiceHire.AI, Scheweppes, FinCal, AI-Powered SaaS HRMS, and GEO Optimizer (collectively, the "Service").
Please read this Privacy Policy carefully. By accessing or using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.
"Personal data" refers to any information that can be used, alone or in combination with other information, to identify you directly or indirectly, including but not limited to your name, email address, phone number, job title, company name, and usage data.
2. Contact Information
- Data Controller: Vectech Limited
- Email: info@vectech.co
- Headquarters: Millennium City 5, 418 Kwun Tong Road, Kwun Tong, Kowloon, Hong Kong
- Innovation Office: InnoCenter, Shenzhen Bay, Guangdong, 518000, China
3. Types of Data Collected
We may collect the following categories of personal data:
3.1 Personal Data Provided by You
- Identifiers: Name, job title, company name, email address, phone number, mailing address.
- Professional/Employment Data: Resume/CV, work history, education background, skills, certifications.
- Account Credentials: Username, password, authentication data.
- Communication Data: Messages sent through contact forms, support tickets, or email correspondence.
- Payment Data: Billing information processed through third-party payment processors (we do not store full credit card numbers).
3.2 Data Collected Automatically
- Usage Data: Pages visited, time spent on pages, click-through rates, referral sources.
- Device Information: Browser type, operating system, device identifiers, IP address.
- Log Data: Server logs, error reports, access timestamps.
- Cookie Data: Session tokens, preference settings, analytics identifiers.
3.3 Data from Third-Party Sources
- Social Media: Profile information from LinkedIn, Facebook, or other social platforms when you interact with our services through those channels.
- Background Check Providers: Employment verification, educational background, and professional references (where applicable and with your consent).
- AI Training Data: Anonymized interaction data used to improve our machine learning models.
You may choose not to provide certain data; however, some Service features may not be available without it. The provision of personal data marked as mandatory is required for the Service to function.
4. Mode and Place of Processing
Processing Methods. We use commercially reasonable administrative, technical, and physical safeguards to protect your personal data. Your data is processed on servers located in Hong Kong, mainland China, Singapore, the United States, and other jurisdictions where we operate. We ensure that your data is processed in accordance with applicable data protection laws.
Retention Period. Unless a longer retention period is required or permitted by law, we shall retain your personal data for as long as your account is active on our Service or as needed to provide you the Service. When your personal data is no longer needed, we will delete or anonymize it in a secure manner.
Data Transfers. Your data may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from the laws of your country. We ensure that appropriate safeguards are in place, including Standard Contractual Clauses adopted by the European Commission or equivalent mechanisms.
5. Analytics
We use analytics services to understand how visitors interact with our Website and improve our Service. The following third-party analytics tools may collect anonymous usage data:
- Google Analytics — Collects page views, session duration, and traffic sources. Opt-out
- Google Tag Manager — Manages tags and scripts on our Website. Privacy
- Hotjar — Provides heatmaps and session recordings to improve user experience. Opt-out
We do not link analytics data to personally identifiable information. You may opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
6. NiceHire.AI Platform
NiceHire.AI is our AI-powered recruitment platform. When you use this Service, we may process the following data:
- Candidate Data: Resume/CV information, work history, education, skills, cover letters, and application materials submitted by you or on your behalf.
- Interview Data: Responses to interview questions, assessment scores, and evaluation feedback generated by our AI screening tools.
- Communication Data: Email addresses, scheduling preferences, and correspondence between employers and candidates.
- Employer Data: Company information, job postings, hiring requirements, and organizational structure.
Purpose: To facilitate automated candidate screening, intelligent matching, pipeline management, and AI-powered interview scheduling.
Legal Basis: Performance of a contract (for employers who subscribe to the Service) and your consent (for candidates whose data is processed).
Your Rights: Candidates have the right to access, correct, or request deletion of their personal data by contacting info@vectech.co.
7. Scheweppes AI Interviewer
Scheweppes is our AI avatar interviewer that conducts automated video interviews. When you use this Service, we may process the following data:
- Biometric Data: Facial recognition data, voice patterns, and video recordings captured during AI avatar interviews. This is processed in accordance with applicable biometric data protection laws.
- Interview Responses: Your answers to interview questions, facial expressions, tone of voice analysis, and response timing.
- Assessment Results: AI-generated scoring, competency evaluations, and recommendation reports.
Purpose: To conduct automated, AI-powered video interviews and generate assessment reports for hiring decisions.
Safeguards: Biometric data is encrypted at rest and in transit. We do not sell or share biometric data with third parties for their own purposes. You may request deletion of your biometric data at any time.
Legal Basis: Your explicit consent to the collection and processing of biometric and interview data.
8. FinCal Platform
FinCal is our finance and calendar management platform. When you use this Service, we may process the following data:
- Financial Data: Income, expenses, budget allocations, investment portfolios, and transaction history.
- Account Information: Bank account details, payment card information (processed by third-party processors), and tax identification numbers.
- Calendar Data: Scheduled events, reminders, meeting notes, and recurring appointments.
- AI-Generated Insights: Financial forecasts, spending pattern analysis, and budget optimization recommendations.
Purpose: To provide AI-powered financial analytics, automated budget management, and intelligent calendar scheduling.
Safeguards: Financial data is encrypted using AES-256 encryption. We comply with PCI DSS requirements for payment card data handling.
9. HRMS Platform
Our AI-Powered SaaS HRMS is a human resource management system. When you use this Service, we may process the following data:
- Employee Records: Personal information, employment history, performance reviews, training records, and disciplinary actions.
- Payroll Data: Salary information, tax withholding details, benefits enrollment, and bank account information for direct deposits.
- Leave Management: Vacation requests, sick leave records, and attendance logs.
- AI Analytics: Workforce trend predictions, turnover risk assessments, and talent management recommendations.
Purpose: To automate HR workflows, manage employee lifecycle data, and provide AI-driven workforce analytics.
Data Subjects: This data may relate to your employees, contractors, or job applicants who are managed through our HRMS platform.
10. GEO Optimizer
GEO Optimizer is our Generative Engine Optimization platform. When you use this Service, we may process the following data:
- Website Content: URLs, page content, metadata, structured data, and schema markup from websites you register.
- SEO Data: Keyword rankings, backlink profiles, domain authority metrics, and competitor analysis data.
- AI Engine Citations: Tracking of how your content appears in AI-generated responses from ChatGPT, Claude, Perplexity, and other platforms.
- Usage Analytics: Dashboard interactions, report downloads, and feature usage patterns.
Purpose: To optimize your content for visibility in AI search engines and provide real-time citation tracking and optimization recommendations.
Data Ownership: You retain all rights to your website content. We process this data solely for the purpose of providing GEO services and do not claim ownership of your content.
11. Contact Forms
When you submit information through our contact forms, demo request forms, or newsletter subscriptions, we collect:
- Name and Email Address: To respond to your inquiry or send requested information.
- Company and Job Title: To better understand your business needs.
- Message Content: Your questions, comments, or specific requirements.
Purpose: To respond to your inquiries, provide requested information, and send marketing communications (with your consent).
Legal Basis: Your consent and/or our legitimate interest in responding to business inquiries.
Retention: Contact form data is retained for up to 24 months after your last interaction, unless you request earlier deletion.
12. Legal Basis of Processing
Depending on your location and how you use our Service, we process your personal data based on one or more of the following legal grounds:
- Consent: You have given your consent for us to process your personal data for specific purposes. You may withdraw your consent at any time by contacting us.
- Contract: Processing is necessary for the performance of a contract between you and us, or to take steps at your request prior to entering into a contract.
- Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject (e.g., tax laws, anti-money laundering regulations).
- Legitimate Interests: Processing is necessary for the purposes of the legitimate interests pursued by us or a third party, provided your fundamental rights and freedoms do not override those interests (e.g., network security, fraud prevention, website improvement).
13. Your Rights Under GDPR
If you are located in the European Economic Area (EEA), Switzerland, or the United Kingdom, you have the following rights regarding your personal data:
- Right of Access: You have the right to request a copy of your personal data that we hold, free of charge (subject to certain exceptions).
- Right to Rectification: You have the right to request that we correct inaccurate or incomplete personal data.
- Right to Erasure: You have the right to request that we delete your personal data under certain circumstances (e.g., when the data is no longer necessary for the purposes it was collected).
- Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data under certain circumstances.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.
- Right to Object: You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Where we process data based on your consent, you have the right to withdraw it at any time without affecting the lawfulness of processing before withdrawal.
- Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority in your jurisdiction.
To exercise any of these rights, please contact us at info@vectech.co. We will respond to your request within 30 days.
14. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):
- Right to Know: You have the right to request that we disclose what personal information we collect, use, disclose, and sell. The categories of personal information we have collected in the past 12 months include: Identifiers, Commercial information, Internet or other network activity, and Geolocation data.
- Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions (e.g., completing transactions, security, legal compliance).
- Right to Opt-Out of Sale/Sharing: We do not sell your personal information. However, certain analytics and advertising technologies may be considered "sharing" under California law. You may opt out of targeted advertising by contacting us.
- Right to Correct: You have the right to request correction of inaccurate personal information.
- Right to Limit Use and Disclosure of Sensitive Personal Information: You have the right to request that we limit the use and disclosure of your sensitive personal information.
To exercise these rights, please contact us at info@vectech.co or call +852 XXXX XXXX. We will not discriminate against you for exercising your CCPA rights.
15. Data Sharing and Disclosure
We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your personal data in the following circumstances:
- Service Providers: With trusted third-party vendors who perform services on our behalf, including cloud hosting, payment processing, analytics, email delivery, and customer support. These vendors are contractually obligated to protect your data.
- Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred as part of that transaction.
- Legal Requirements: When required by law, regulation, legal process, or governmental request.
- Protection of Rights: To protect the rights, property, or safety of Vectech Limited, our users, or the public.
- With Your Consent: We may share your data with third parties when you give us explicit consent to do so.
16. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to collect and track information about your activity on our Website. These technologies include:
- Essential Cookies: Required for the Website to function properly (e.g., session cookies, authentication tokens).
- Analytics Cookies: Help us understand how visitors interact with our Website (e.g., Google Analytics cookies).
- Preference Cookies: Remember your settings and preferences (e.g., language selection).
- Marketing Cookies: Used to deliver relevant advertisements and track their effectiveness.
You can control cookies through your browser settings or by visiting our Cookie Policy page. Disabling certain cookies may affect the functionality of our Website.
For more information about how to manage cookies, visit allaboutcookies.org.
17. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption: Data is encrypted in transit using TLS 1.2+ and at rest using AES-256 encryption.
- Access Controls: Role-based access controls ensure only authorized personnel can access your data.
- Regular Audits: We conduct regular security audits and penetration testing.
- Incident Response: In the event of a data breach, we will notify affected users and relevant authorities within 72 hours as required by applicable law.
While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
18. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include:
- The amount, nature, and sensitivity of your personal data.
- The potential risk of harm from unauthorized use or disclosure.
- The purposes for which we process your data.
- Applicable legal requirements and statutory limitation periods.
When your personal data is no longer needed, we will securely delete or anonymize it in accordance with our data disposal procedures.
19. Third-Party Services
Our Service may contain links to third-party websites, services, or applications. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal data.
Third-party services we may use include:
- Cloud Hosting: Amazon Web Services (AWS), Google Cloud Platform.
- Payment Processing: Stripe, PayPal.
- Email Delivery: SendGrid, Mailchimp.
- Analytics: Google Analytics, Hotjar.
- Customer Support: Intercom, Zendesk.
20. Children's Privacy
Our Service is not intended for children under the age of 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without verified parental consent, we will take steps to delete that information as quickly as possible.
If you are a parent or guardian and believe your child has provided personal data to us, please contact us at info@vectech.co.
21. International Data Transfers
Your data may be transferred to, processed, and stored in countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country.
When we transfer your personal data across borders, we ensure that appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) adopted by the European Commission.
- Binding Corporate Rules (BCRs).
- Adequacy decisions by the European Commission.
By using our Service, you consent to the transfer of your data to these jurisdictions.
22. Changes to This Policy
We reserve the right to update or modify this Privacy Policy at any time. If we make material changes, we will notify you by posting a prominent notice on our Website or sending you an email at least 30 days before the changes take effect. We encourage you to review this Privacy Policy periodically for the latest information.
The "Last updated" date at the top of this policy indicates when it was most recently revised.
23. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Email: info@vectech.co
- Headquarters: Millennium City 5, 418 Kwun Tong Road, Kwun Tong, Kowloon, Hong Kong
- Innovation Office: InnoCenter, Shenzhen Bay, Guangdong, 518000, China
- Company: Vectech Limited