Privacy Policy

1. Introduction

Welcome to Valori ("we," "our," or "us"). Valori LLC is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our employee recognition platform, mobile application, and website (collectively, the "Service").

By accessing or using our Service, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us, including:

• Account information: name, email address, company name, job title, and profile photo
• Photos and media: profile photos you upload, images attached to recognitions, and any media content you share through the Service
• Payment information: billing address and payment card details (processed securely through Stripe—we do not store full payment card numbers on Valori servers)
• Recognition content: recognitions you give and receive, messages, achievements, certificates, and VALOR portfolio data
• Communications: messages, feedback, and support requests you send to us

2.2 Automatically Collected Information

When you use our Service, we automatically collect:

• Device information: device type, operating system, unique device identifiers
• Log information: access times, pages viewed, IP address, and referring URL
• Usage data: features used, interactions with the platform, and performance metrics

2.3 Information from Third Parties

We may receive information about you from third-party services you connect to Valori, such as Slack, and from your employer if they administer your Valori account.

3. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and store information about your use of our Service. These technologies help us with:

• Session management: Keeping you logged in and maintaining your preferences
• Authentication: Verifying your identity and securing your account
• Analytics: Understanding how users interact with our Service to improve functionality
• Performance monitoring: Ensuring the Service operates efficiently

You can control cookie settings through your browser preferences. However, disabling certain cookies may limit your ability to use some features of the Service.

4. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process transactions and send related information
• Create and manage your account and VALOR portfolio
• Generate certificates and achievement records
• Enable recognition sharing to LinkedIn and other platforms
• Send you technical notices, updates, security alerts, and support messages
• Respond to your comments, questions, and customer service requests
• Analyze usage patterns to improve user experience
• Detect, investigate, and prevent fraudulent transactions and abuse
• Comply with legal obligations

5. Data Processing

Valori acts as a data processor for recognition and portfolio data created by users. We process personal data on behalf of the organization administering the workspace.

For organizations subject to GDPR, CCPA, or other data protection regulations, we provide appropriate data processing agreements and comply with applicable data subject rights requests.

6. Information Sharing and Disclosure

We may share your information in the following circumstances:

• With your organization: Your employer or organization administrator can view recognition activity, achievements, and analytics for their team
• With your consent: When you choose to share achievements on LinkedIn or other platforms
• Service providers: With vendors who perform services on our behalf (hosting, payment processing, analytics)
• Legal requirements: When required by law or to protect our rights and safety
• Business transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties.

7. Third-Party Services

We use the following third-party services to operate our platform:

• Supabase: We use Supabase for database hosting, user authentication, and file storage. Your account information, recognition data, profile photos, and VALOR portfolio content are stored securely on Supabase's infrastructure. Supabase complies with SOC 2 Type II standards and encrypts data at rest and in transit.
• Stripe: All payment transactions are processed securely through Stripe, a PCI-DSS compliant payment processor. We do not store full payment card numbers, CVV codes, or other sensitive payment information on Valori servers. Stripe handles all payment data in accordance with industry security standards.
• PostHog: We use PostHog for product analytics to understand how users interact with our Service. This helps us improve the user experience and identify issues. PostHog collects anonymized usage data, feature interactions, and performance metrics. You can opt out of analytics tracking in your account settings.
• Cloudflare Turnstile: We use Cloudflare Turnstile to protect sign-up and login from bots and abuse. Turnstile processes limited technical signals (such as your IP address and browser characteristics) to confirm that you are a human. It does not track you across websites or serve advertising.

Each of these services has their own privacy policies and data handling practices. We have data processing agreements in place with each provider to ensure your data is handled appropriately.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Regular security assessments and penetration testing
• Access controls and authentication mechanisms
• Secure data centers with SOC 2 compliance
• Employee training on data protection

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. Your VALOR portfolio and achievement records are designed to be portable and long-lasting, supporting your career development. You may request deletion of your account and associated data at any time, subject to legal retention requirements.

10. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal information and account
• Portability: Export your VALOR portfolio and achievement data
• Opt-out: Unsubscribe from marketing communications
• Withdraw consent: Where processing is based on consent

10.1 How to Delete Your Account

You have the right to delete your Valori account and all associated personal data at any time. To delete your account:

• In the mobile app: Go to Settings → Account → Delete Account. Follow the prompts to confirm deletion.
• On the web: Go to your Account Settings page and select "Delete Account" at the bottom of the page.
• By email: Send a request to privacy@valoriapp.io with the subject line "Account Deletion Request" and we will process your request within 30 days.

When you delete your account, we will permanently remove your personal information, profile data, and recognition history from our systems. Some information may be retained in anonymized form for analytics purposes, and certain data may be retained as required by law or for legitimate business purposes (such as fraud prevention).

11. Children's Privacy

Our Service is not intended for individuals under the age of 16, or the minimum age of digital consent in your jurisdiction. We do not knowingly collect personal information from children. If we learn we have collected personal information from a child under the applicable age, we will delete that information promptly.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses and compliance with applicable data protection laws.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the Service after any changes constitutes your acceptance of the new Privacy Policy.