개인정보처리방침

Data Annotation Vendors (“we,” “us,” or “our”) operates dataannotationvendors.com and provides enterprise data annotation and machine learning training data services to business clients worldwide. This Privacy Policy explains how we collect, use, disclose, retain, and safeguard personal information when you visit our website, submit inquiries, engage our services, or otherwise interact with us. We are committed to transparency, lawful processing, and respect for your privacy rights under applicable regulations including the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA) as amended by the CPRA, and other international privacy frameworks.

1. Who we are and scope of this policy

Data Annotation Vendors is a B2B data annotation company serving machine learning teams, AI product organizations, research institutions, and enterprise technology buyers. This Privacy Policy applies to personal data processed through our public website at dataannotationvendors.com, contact and demo request forms, email communications, sales and onboarding workflows, client portals where applicable, and related marketing activities directed at prospective and existing business customers.

This policy does not govern annotation work performed on client-supplied datasets. Client data is processed under separate contractual agreements, data processing addenda, and project-specific security instructions. Where we act as a data processor on behalf of a client, the client’s privacy notice and our Data Processing Agreement define respective roles and obligations.

If you are a consumer seeking services unrelated to enterprise B2B annotation, or if you interact with a client product that used our labeling services, please refer to that client’s privacy policy for information about how your data may have been handled in their ML pipeline.

2. Information we collect

2.1 Information you provide directly

We collect personal information that you voluntarily submit when you request a quote, book a demo, subscribe to updates, apply for employment, or correspond with our team. This may include your name, job title, company name, business email address, telephone number, country or region, project description, estimated data volumes, preferred annotation modalities, and any additional details you choose to include in free-text message fields.

For enterprise clients entering a commercial relationship, we may also collect billing contact details, purchase order references, tax identifiers where legally required, authorized signatory information, and security questionnaire responses needed for vendor due diligence and contract execution.

2.2 Information collected automatically

When you browse dataannotationvendors.com, our servers and third-party service providers may automatically collect technical and usage data including IP address, browser type and version, operating system, device identifiers, referring and exit URLs, pages viewed, time spent on pages, scroll depth, click patterns, and approximate geographic location derived from IP address. We use this information to maintain site security, diagnose performance issues, understand aggregate audience behavior, and improve content relevance for B2B visitors.

2.3 Cookies and similar technologies

We use cookies, local storage, pixels, and similar technologies as described in our Cookie Policy. Essential cookies support core site functionality and security. Analytics cookies help us measure traffic and campaign effectiveness. Marketing cookies, where enabled, may support retargeting or audience measurement on professional networks. You can manage preferences through our cookie banner and browser settings.

3. How we use personal information

We process personal data for legitimate business purposes connected to our enterprise annotation services. Primary uses include responding to sales and support inquiries, scoping annotation projects, delivering contracted services, administering accounts, issuing invoices, and communicating project status to authorized client contacts.

• Providing, operating, and improving our website and digital presence.
• Qualifying inbound leads and routing requests to appropriate project managers.
• Negotiating, executing, and fulfilling master service agreements and statements of work.
• Delivering secure annotation workflows, QA reporting, and dataset exports.
• Sending service-related notices, security alerts, and contractual updates.
• Conducting analytics to understand visitor behavior and content performance.
• Complying with legal obligations, regulatory requests, and enforceable government orders.
• Protecting the rights, property, and safety of Data Annotation Vendors, our clients, and the public.

Where required by law, we rely on appropriate legal bases including contract performance, legitimate interests balanced against your rights, compliance with legal obligations, and consent for optional marketing or non-essential cookies. We do not use website visitor data to train proprietary machine learning models unless explicitly disclosed and agreed in a separate written arrangement.

4. Legal bases for processing (GDPR)

For individuals in the European Economic Area, United Kingdom, and Switzerland, we process personal data under one or more of the following legal bases: (a) performance of a contract or pre-contractual steps at your request; (b) legitimate interests such as B2B lead management, fraud prevention, network security, and product improvement, provided those interests are not overridden by your rights; (c) compliance with legal obligations; and (d) consent where required, for example optional marketing emails or non-essential analytics in jurisdictions where consent is mandated.

You may withdraw consent at any time where processing is consent-based, without affecting the lawfulness of processing before withdrawal. Where we rely on legitimate interests, you have the right to object to certain processing as described in Section 12.

5. How we share information

We do not sell personal information as defined under the CCPA/CPRA. We share data only as necessary to operate our business, deliver services, or comply with law. Categories of recipients may include cloud hosting and infrastructure providers, CRM and email delivery platforms, analytics vendors, payment processors, professional advisors, and subprocessors engaged under written agreements that impose confidentiality and data protection obligations consistent with this policy.

We may disclose information if required by subpoena, court order, or applicable law, or when we believe disclosure is necessary to investigate fraud, enforce our agreements, or protect against harm. In connection with a merger, acquisition, financing, or sale of assets, personal data may transfer subject to continued protection commitments.

6. International data transfers

Data Annotation Vendors serves clients globally. Personal information may be transferred to, stored in, or accessed from countries other than your country of residence, including the United States and jurisdictions where our service providers operate. When we transfer personal data from the EEA, UK, or Switzerland to countries not deemed adequate by relevant authorities, we implement appropriate safeguards such as Standard Contractual Clauses, supplementary technical and organizational measures, and transfer impact assessments where required.

Enterprise clients may specify data residency, restricted processing regions, or approved subprocessor lists in their agreements. We honor contractual transfer restrictions and document cross-border flows in our GDPR Compliance materials and Data Processing Addenda.

7. Data retention

We retain personal information only as long as necessary for the purposes described in this policy, unless a longer retention period is required or permitted by law. Inquiry and contact form records are typically retained for the duration of the sales cycle plus a reasonable period for follow-up and audit purposes, generally not exceeding thirty-six months unless a commercial relationship is established.

Client account, billing, and project correspondence records are retained for the life of the contract and thereafter according to statutory limitation periods, tax requirements, and dispute resolution needs. Server logs and security telemetry may be retained for shorter rolling windows aligned with incident response and compliance standards. When retention ends, we delete or anonymize data using commercially reasonable methods.

8. Security measures

We implement administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. Measures include access controls and role-based permissions, encryption in transit using TLS, encrypted storage for sensitive credentials, employee confidentiality obligations, security awareness training, vulnerability management, and incident response procedures.

No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of credentials issued for any client portal or shared workspace. Please notify us promptly at contact@dataannotationvendors.com if you suspect unauthorized access.

9. Analytics and marketing

We may use analytics tools such as Google Analytics or comparable platforms to understand aggregate website usage. These tools may set cookies and collect pseudonymous identifiers. We configure analytics to minimize unnecessary personal data collection and honor opt-out mechanisms where available, including Google Analytics opt-out browser add-ons and global privacy control signals where legally recognized.

With your consent or where permitted under applicable B2B marketing laws, we may send newsletters, product updates, or event invitations to business contacts. You may unsubscribe using the link in any marketing email or by contacting us directly. We maintain suppression lists to honor opt-out requests across future campaigns.

10. Contact forms and communications

Information submitted through contact forms, demo requests, or email is routed to authorized sales and operations personnel. Form submissions may be logged in our CRM for pipeline management and may trigger automated acknowledgment emails. Please do not submit sensitive personal data, protected health information, or client-confidential datasets through public website forms. Use secure channels established during onboarding for project data exchange.

11. California privacy rights (CCPA/CPRA)

California residents have specific rights regarding personal information collected by businesses. Subject to statutory exceptions, these may include the right to know categories and specific pieces of personal information collected, sources, business purposes, and categories of third parties with whom information is shared; the right to delete personal information; the right to correct inaccurate information; and the right to opt out of sale or sharing of personal information. As stated above, we do not sell personal information.

We will not discriminate against you for exercising privacy rights. Authorized agents may submit requests on your behalf with appropriate verification. To exercise CCPA/CPRA rights, email contact@dataannotationvendors.com with “California Privacy Request” in the subject line. We will verify identity and respond within timelines required by law.

12. Your rights under GDPR and UK GDPR

If you are located in the EEA or UK, you may have the following rights: access to your personal data; rectification of inaccurate data; erasure in certain circumstances; restriction of processing; data portability where applicable; objection to processing based on legitimate interests or for direct marketing; and withdrawal of consent. You also have the right to lodge a complaint with your local supervisory authority.

To submit a GDPR-related request, contact contact@dataannotationvendors.com. We respond within one month unless extension is permitted. For client dataset subjects whose data we process as a processor, please contact the relevant data controller (our client) in the first instance; we will assist controllers in fulfilling verified requests as required by our agreements.

13. Children’s privacy

Our website and services are directed at business professionals and are not intended for individuals under sixteen years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, contact us and we will take steps to delete it.

14. Third-party links

Our website may contain links to third-party sites, professional networks, documentation hosts, or client references. We are not responsible for the privacy practices of external sites. We encourage you to review their policies before providing personal information.

15. Changes to this Privacy Policy

We may update this Privacy Policy to reflect legal, technical, or business changes. The “Last updated” date on the published page indicates the latest revision. Material changes will be communicated through the website or direct notice where appropriate. Continued use of our website after updates constitutes acknowledgment of the revised policy, subject to applicable law.

16. Contact us

For privacy questions, data subject requests, or security concerns, contact Data Annotation Vendors at contact@dataannotationvendors.com. For enterprise data processing terms, ask your account representative about our Data Processing Addendum and subprocessors list.

17. Definitions

“Personal information” or “personal data” means information that identifies, relates to, or could reasonably be linked with an individual or household, as defined under applicable privacy laws. “Processing” means any operation performed on personal data including collection, storage, use, disclosure, and deletion. “Client data” means datasets and materials supplied by customers for annotation under contract.

18. Records of processing

Where required by GDPR Article 30, we maintain records of processing activities for personal data we control and cooperate with clients on processor records for annotation programs. Summaries are available to enterprise clients and regulators as required by law and contract.