VA.Team LLC
VA.Team LLC ("VA.Team," "we," "us," "our," or the "Company") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (www.va.team), use our platform and services, or communicate with us via SMS/MMS, email, or other methods.
This Privacy Policy applies to all users of the VA.Team platform, including clients and visitors. By creating an account, clicking "I Agree" (or similar acceptance mechanism), using VA.Team services, or submitting your information through our website, you agree to the terms of this Privacy Policy.
For processing based on your consent (such as marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal. If you do not agree with these practices, please do not use our services.
We collect information that you voluntarily provide when using our services. For each category below, we specify the legal basis under GDPR where applicable:
Name, email address, phone number, company name, business address, and billing information.
Company logo, industry type, team size, and business description.
Job descriptions, required skills, preferred working hours, and project details.
Messages exchanged between you and VA.Team, including SMS/MMS content related to service coordination, emails, feedback, support inquiries, and correspondence with our team and VAs.
Files, documents, and other materials you upload to the platform or share with Nabu AI.
When you access our platform or website, we automatically collect certain information:
Payment card information is processed by our PCI DSS-compliant third-party payment processors. VA.Team does not store complete payment card numbers on our servers. We receive only limited payment data necessary for billing and record-keeping purposes, such as the last four digits of your card, card type, and billing address.
We use the information we collect to:
If you provide your mobile phone number, you may receive service-related SMS/MMS messages from VA.Team. These messages may include:
You may opt out of SMS messages at any time by replying STOP to any message. To receive assistance or information about our SMS program, reply HELP to any message or contact us at hello@va.team.
Message frequency may vary depending on your service activity and communication preferences. Message and data rates may apply depending on your mobile carrier. Please contact your carrier for details about your messaging plan.
If you are located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, we process your personal data based on the following legal grounds under the General Data Protection Regulation (GDPR):
Processing necessary for the performance of our contract with you, including account management, service delivery, payment processing, and VA matching.
Processing necessary for our legitimate business interests, including platform security, fraud prevention, service improvement, analytics, and customer support, where those interests are not overridden by your data protection rights.
Processing based on your explicit consent, such as for marketing communications and non-essential cookies. You may withdraw consent at any time.
Processing necessary to comply with legal obligations to which VA.Team is subject, such as tax reporting and responding to lawful government requests.
When you use Nabu AI, your inputs, queries, and uploaded files are processed to provide AI-powered assistance. This data is used solely to deliver services to you and is not used to train or improve AI models.
Nabu AI may utilize third-party AI service providers acting as subprocessors to deliver AI functionality. These providers:
All content processed by Nabu AI remains confidential and is subject to the same privacy protections as other data on our platform. We do not share Nabu AI interactions with third parties except:
Nabu AI is a technology system designed to assist with task automation and content generation. VA.Team uses Nabu AI as a supplementary tool to enhance service delivery. Nabu AI may process your data to provide recommendations, insights, and automated assistance with assigned tasks.
Nabu AI should not be considered an automated decision-making technology (ADMT) that produces solely automatic decisions with legal or similarly significant effects as defined under CCPA and other privacy regulations. VA.Team maintains human oversight and control over all significant business decisions affecting clients. Any automated assistance from Nabu AI is reviewed and approved by VA.Team representatives before implementation.
California residents and other applicable state residents have the right to request information about whether Nabu AI produces automated decisions affecting them and to request human review of such decisions. Contact hello@va.team to exercise these rights.
VA.Team respects Global Privacy Control (GPC) signals transmitted through your browser or device. If your browser sends a GPC signal, we will:
Please note that GPC signals do not disable essential cookies or service-related functionality required to operate our platform. We will respond to valid GPC signals in compliance with applicable state privacy laws. You may also exercise these rights directly by contacting us at hello@va.team.
When you connect a Google account to Nabu, Nabu accesses Google Workspace data (Google Drive files and Google Calendar events) only at your direction and only to carry out the tasks you request. The OAuth scopes you grant are listed on Google's consent screen before you authorize, and you can revoke access at any time from the Nabu integration settings or from your Google Account's Third-party apps with account access page.
Specifically, Workspace API data received by VA.Team is:
VA.Team does not sell, rent, or trade your personal information to third parties for their own marketing purposes or for monetary consideration. We do not disclose your personal data to third parties for their independent use. We do not engage in the "sale" or "sharing" of personal information as those terms are defined under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). We do not use your data for targeted advertising or cross-context behavioral advertising.
Data Controller and Data Processor Relationship:
VA.Team LLC acts as the data controller for all client data. Virtual Assistants engaged through our platform act as data processors under VA.Team's documented instruction and control, in accordance with the terms of the VA Independent Contractor Agreement (ICA) and applicable data protection regulations.
When you engage a VA through our platform, you authorize us to disclose relevant information to that VA to enable service delivery. VAs are independent contractors who process your information solely to perform tasks you direct.
VAs receive access only to information necessary to perform assigned tasks, including: company name, project details, task requirements, files uploaded for specific tasks, and communication history related to their assignments.
VAs are bound by confidentiality agreements and Data Processing Agreements (DPAs) that include GDPR Article 28 requirements. All VAs execute DPAs with VA.Team prior to processing any client data.
VAs are prohibited from using client information for purposes other than performing assigned work as directed by VA.Team.
Access is revoked immediately upon reassignment or termination of the VA relationship.
Virtual Assistants (Processors):
VA.Team acts as the data controller for all client data. Virtual Assistants engaged through our platform act as data processors under VA.Team's instruction and control. All VAs execute Data Processing Agreements (DPAs) with VA.Team that include all requirements of GDPR Article 28, including:
Dynamic VA Assignments:
Because VA assignments are dynamic and may change based on client needs, workload, and availability, VA.Team provides general notice that Virtual Assistants will have access to client data to perform assigned tasks, rather than individual notifications for each VA assignment. Clients may request information about specific VAs assigned to their accounts at any time by contacting hello@va.team.
All VAs must comply with the terms of the VA Independent Contractor Agreement (ICA) and execute DPAs containing GDPR Article 28 requirements before processing any personal data. A current list of all active VAs and their processor status is available upon request at hello@va.team.
Additional Service Providers and Subprocessors:
We may share your information with service providers and contractors who perform services on our behalf, under strict confidentiality agreements. We maintain Data Processing Agreements (DPAs) with all processors who handle personal data on our behalf. Our categories of service providers include:
A current list of all subprocessors is available upon request at hello@va.team. We will provide at least thirty (30) days' notice before adding new subprocessors that process personal data. During this notice period, clients may object to new subprocessors by contacting hello@va.team.
We may disclose your information to government agencies, regulatory bodies, or law enforcement when required by law, or in response to valid legal processes (subpoenas, court orders, search warrants), to protect VA.Team's legal rights, property, or safety, or in emergency situations involving potential harm to persons. Where legally permitted, we will attempt to notify you before disclosure.
We may share your information with other parties with your explicit consent.
In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of VA.Team's assets, your personal information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our website of any change in ownership or uses of your personal information.
VA.Team collects limited sensitive personal information, specifically:
We do not collect precise geolocation, Social Security numbers, racial/ethnic origin, religious beliefs, health information, or biometric data.
We implement industry-standard administrative, technical, and physical safeguards to protect your data from unauthorized access, disclosure, or misuse, including:
In the event of a data breach that compromises your personal information, VA.Team will:
We retain your information only as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods:
| Data Type | Retention Period |
|---|---|
| Active Accounts | Information retained while your account is active and as necessary to provide services. |
| Account Deletion | Upon deletion request, data is retained for 30 days (for recovery), then deleted from production systems. Data may persist in encrypted backups for up to 90 additional days. |
| Financial Records | Invoices, payment history, and tax documents retained for 7 years as required by law. |
| Security Logs | Access logs and audit trails retained for up to 2 years for security monitoring, fraud detection, and investigation purposes. |
| VA Access | When a VA relationship ends, VA access to your data is revoked immediately. |
You may:
To exercise these rights, contact us at hello@va.team or use self-service tools in your account settings. We will respond within 30 days (or shorter where required by law). We may need to verify your identity.
If we deny your privacy request, you may appeal by contacting hello@va.team within 30 days. We will respond to appeals within 45 days. You may also have the right to lodge a complaint with a supervisory authority.
If you are located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, you have additional rights under the GDPR:
Obtain confirmation of whether we process your data and access to that data.
Have inaccurate data corrected.
Request deletion in certain circumstances.
Request restriction of processing in certain circumstances.
Receive your data in a structured, machine-readable format.
Object to processing based on legitimate interests or for direct marketing.
Not be subject to solely automated decisions with legal effects.
Lodge a complaint with a supervisory authority.
Contact hello@va.team to exercise these rights. For complaints: EEA authorities | UK ICO
California residents have rights to:
Residents of Virginia, Colorado, Connecticut, Utah, Oregon, Texas, Montana, Delaware, Iowa, New Hampshire, New Jersey, Nebraska, Maryland, Minnesota, Rhode Island, Indiana, Kentucky, Tennessee, and other states with comprehensive privacy laws (as effective) may have similar rights including: access, correction, deletion, portability, opt-out of targeted advertising/sale/profiling, and appeal rights.
In the preceding 12 months, we collected:
We have not sold any of these categories.
You may designate an authorized agent to make requests on your behalf with written permission and identity verification.
Your information may be transferred to and processed in the United States and other countries. When transferring data from the EEA, UK, or Switzerland, we implement appropriate safeguards including:
Request copies of SCCs or transfer safeguard information at hello@va.team.
Our website and platform may contain links to third-party websites, services, or applications. We are not responsible for the privacy practices, security, or content of those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit. This Privacy Policy applies solely to information collected by VA.Team.
Our Services are intended for business use by individuals 18 years or older. We do not knowingly collect information from individuals under 18, and specifically do not knowingly collect information from children under 13 in compliance with COPPA (US) or children under 16 where applicable under GDPR. If we become aware that we have collected information from a child under 13, we will delete it promptly.
If you believe we have collected information from a child, please contact us immediately at hello@va.team.
We may update this policy from time to time. Any changes will be posted on this page with the updated effective date. For material changes, we will send an email to your registered email address at least thirty (30) days before changes take effect.
If you have questions about this Privacy Policy or your data, please contact us:
BY USING VA.TEAM SERVICES, CREATING AN ACCOUNT, OR CLICKING "I AGREE," YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY AND CONSENT TO THE DATA PRACTICES DESCRIBED HEREIN.
We use cookies and similar technologies to run this site and, with your consent, to understand how it's used — including session replays of on-screen activity — so we can improve it. Essential ones keep the site working. You can accept, reject, or choose what's on. See our Privacy Policy.