Skip to main content

EEA, UK, and Swiss Privacy Notice

Effective date: September 4, 2026

This regional Notice supplements the Privacy and Cookie Notice. It applies when EEA, UK, or Swiss data-protection law governs Valkyr Labs Inc.'s processing as a controller. When Valkyr processes Personal Data for a customer, that customer is ordinarily the controller and Valkyr is processor under the DPA.

Controller and contact​

Valkyr Labs Inc., 195 Tamal Vista Blvd #201, Corte Madera, CA 94925, is the controller for website, self-service account, billing, security, marketing, recruiting, and business-contact processing described in the Privacy Notice. Contact legal@valkyrlabs.com.

We rely on:

  • contract to create and administer accounts, provide requested Services, process purchases, and communicate service notices;
  • legitimate interests to secure and improve the Services, prevent fraud and abuse, analyze nonessential product performance where consent is not required, manage business relationships, and establish or defend claims, balanced against individual rights;
  • legal obligation for tax, accounting, sanctions, regulatory, and lawful-request compliance; and
  • consent for nonessential cookies, certain marketing, optional content sharing, and another purpose where law requires it.

You may withdraw consent at any time without affecting earlier lawful processing. We do not make solely automated decisions producing legal or similarly significant effects about individuals in our controller capacity unless we provide legally required information, safeguards, and a means to obtain human review.

Recipients, transfers, and retention​

Recipients and retention periods are described in the Privacy Notice. For transfers to a country without an adequacy decision, we use an approved mechanism such as the EU Standard Contractual Clauses, UK International Data Transfer Agreement or Addendum, and supplementary measures where required. You may request information about the applicable safeguard.

Rights​

Subject to legal conditions, you may request access, rectification, erasure, restriction, or portability; object to processing based on legitimate interests or direct marketing; withdraw consent; and complain to the supervisory authority where you live, work, or believe an infringement occurred. You may also contact the UK Information Commissioner's Office or Swiss Federal Data Protection and Information Commissioner where applicable.

For a Valkyr-controlled self-service account, an authenticated user can close the account from User Preferences → Account → Delete my account using the typed confirmation. This removes profile identifiers and credentials and retains a disabled pseudonymous tombstone only for documented integrity and lawful-retention purposes. Pseudonymized records remain Personal Data while Valkyr can reconnect them to an internal identifier; we do not treat that tombstone as anonymous data.

Send a request to legal@valkyrlabs.com when you cannot sign in, seek deletion beyond the account profile, want an exception reviewed, or need to exercise another right. We may verify identity and ask for information needed to locate records. If a Valkyr customer controls the data, we will direct the request to that customer and assist it as required by the DPA.

We respond without undue delay and ordinarily within one month after receiving a request. Where the GDPR permits an extension because a request is complex or numerous, we may extend by up to two additional months and will explain the extension within the first month. Erasure is not absolute: we may retain narrowly necessary Personal Data to comply with law, exercise or defend legal claims, protect freedom of expression, serve specified public interests, or meet another applicable statutory exception. Any retained data remains access-restricted, purpose-limited, and subject to its documented deletion date.

Required information and consequences​

Account and billing fields identified as required are needed to enter or perform a contract; without them, we may not be able to provide the Service. Optional profile, marketing, and content-sharing fields may be omitted without losing ordinary Service access.

Representatives and data protection officer​

Before offering Services in a manner that triggers GDPR or UK GDPR representative requirements, Valkyr will publish the appointed representative's identity and contact information here. Valkyr will publish Data Protection Officer details if appointment becomes legally required.