1. Scope and responsibility
This notice covers the VQOS website, accounts, project collaboration and communications. The operator determines the purposes of platform account and security processing; the provider identified in your order is responsible for its own project processing. When a provider processes personal data only on a client’s instructions, the parties must agree the required data-processing terms before that work begins. Questions about processing responsibilities and legally required information can be raised through the contact channel below. Applicable information duties remain binding; this notice does not waive them.
2. Data we handle
Account information includes your name, email, account role, language preference, password hash, verification records and session information. Project information can include briefs, uploaded files, messages, collaborators, quotations, approvals and delivery records. Payment administration uses amounts, currencies, payment methods and transaction references supplied for reconciliation. Website and security systems may record IP addresses, request information, timestamps and error logs. Contact messages include the details you choose to send.
Do not upload unnecessary sensitive information, full card details, passwords, financial account credentials or identity documents. If a project requires personal footage, voices or other sensitive material, discuss appropriate permission, access and processing arrangements first. Selected public creator profiles and approved marketplace listings may be visible to other users; private attachments and contact details should not be placed in public descriptions.
3. Purposes and legal bases
We use necessary data to respond to requests, manage accounts, communicate verification and password-reset information, arrange and deliver projects, reconcile payments and handle complaints. Where applicable, these activities rely on contract performance or steps requested before a contract. Security, abuse prevention and proportionate service administration may rely on legitimate interests balanced against individual rights. Required financial or legal records are retained to meet applicable obligations. Optional marketing, promotional use and any processing that requires consent rely on a separate choice; refusing those choices does not remove ordinary service access. We do not make solely automated decisions with legal or similarly significant effects on users.
4. People and providers with access
Access is limited to authorized operators, project participants and service providers as needed for the relevant purpose. Website hosting and storage currently use West.cn infrastructure in Hong Kong. Resend is used for account email delivery and configured contact-email handling; email providers process delivery, security and message data as needed. Production collaborators receive only project material they need and must protect it. Personal information is not sold or made available for unrelated third-party advertising.
If an external AI, translation or production service is proposed for private client material, its use and processing conditions must be agreed before that transfer. Public multilingual content may be translated for publication; that does not authorize automatic publication or unrestricted external processing of private files. We may disclose necessary information where law requires, to protect legitimate rights, or in a business transfer with appropriate notice and safeguards, not as an unrestricted license to disclose.
5. International processing
Website hosting is in Hong Kong and email or project providers may process information in other countries. These locations may provide different legal protections. Where applicable law requires a transfer mechanism, the responsible party must establish a valid mechanism and any necessary safeguards before restricted transfers occur; a generic acceptance of this notice is not a substitute. You may request details of applicable recipients, locations and safeguards for your project. VQOS does not claim a blanket GDPR certification or that a Hong Kong server alone satisfies international-transfer requirements.
6. Cookies and browser storage
The site uses authentication/session cookies to keep signed-in accounts working and a vqos_locale cookie to remember the chosen language for up to one year. The sign-in interface also stores a vqos-locale preference in local browser storage, which remains until changed or cleared. Authentication cookies follow the account session lifecycle. The current application does not include an advertising tracking or audience-retargeting integration. Necessary security, provider logs and language preferences are different from advertising tracking.
You can clear cookies and local storage in your browser; this may sign you out or reset your language. If non-essential analytics or advertising cookies are introduced, we will provide required information and consent controls before they operate. Browser extensions and independently visited third-party sites follow their own practices.
7. Retention and security
Account and project records are kept while needed to provide the service, resolve outstanding projects, meet applicable recordkeeping duties or establish and defend claims. Retention is assessed by data category, purpose, applicable legal periods and unresolved disputes; we do not promise an automated deletion interval that has not been implemented. On a verified deletion request, unnecessary active data should be deleted or anonymized, while any lawful exception and retention basis is explained. Restricted backups may retain earlier copies until their scheduled replacement and must not be reused to evade a deletion request.
We use measures such as HTTPS, password hashing, access controls and backups. These reduce risk but cannot guarantee perfect security. If a breach triggers a legal notification duty, affected individuals and authorities will be notified as required. Keep your password private and report suspected unauthorized access promptly.
8. Your choices and rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability, information about recipients and transfers, or object to processing based on legitimate interests. Consent can be withdrawn for future processing without invalidating earlier lawful processing. We may request proportionate verification to avoid disclosing someone else’s data; a government ID is not routinely required. A privacy request is not made conditional on giving up a refund or other claim.
Send a request through the contact channel below with enough information to identify your account and request. We aim to acknowledge within three business days and respond within one month, or the shorter applicable period; if a lawful extension is necessary we will explain why and when to expect a response. You may complain to the competent data-protection authority or seek other remedies. Account closure does not itself erase financial records that law requires us to keep.
9. Children and notice changes
The service is intended for adults aged 18 or older. Do not create a minor’s account or upload a child’s personal material without the permissions and protections required for the project and applicable law. Report an inappropriate collection so it can be investigated. Material changes to this notice will be dated and communicated as appropriate before new processing begins; consent will be sought again when legally required.
Contact VQOS
Website contact email: noreply@notify.vqos.cn
Include your project reference, if any, the issue and your requested resolution. Do not send passwords, full card details or unnecessary ID documents.
Contact VQOS →