7. How does the consent mechanism work (opt-in)?

​

It is based on Social Login (Facebook Login, Google Login). This is the fastest way Vurdere found for the Consumers to create a rich profile about themselves, and make all consent flows clear and easy, allowing the Consumers to share more about who they are and to ensure that their opinions and their endorsements to a product are legit and relevant.

Imagine the situation: you read two reviews of a product, one made by a contact you know and another by a stranger. Which one would be more relevant for you? Probably, the one made by your friend.

​

Example of consent flow in our client’s website, Evino:

​

7.1 The Consumer wants to react to a product, rate it, or react to a post of another client in Carrefour. So, they are invited to identify themselves and become part of the Carrefour community:

​

7.2 So, they choose “Continue with Facebook”. With that, a Facebook window will pop up, asking the Consumer for permission so that the platform can share data with Carrefour:

​

7.3 We request from Facebook the following data about the Consumer: “name”, “profile image”, “e-mail address”, “gender”, “Likes”, and “List of Friends” that are users of Carrefour Social Media and consented to share the same kind of information.

 

7.4 The consumer has to opt-in to share each piece of personal data and can read an explanation about how that data in specific will be used in Carrefour Social Media:

 

After going through this opt-in process, the client becomes a member of the Carrefour community.

 

The consent via social login screens, as the Facebook example above, do not allow for personalization. Although, they always include a link to our Privacy Policy (it is shown in the footer of the example screen above). This link will lead to the Privacy Policy of Carrefour Social Media page in our system, that is based on this Data Treatment Policy.

 

8. For how long the personal data of my Consumers will be kept?

 

During the validity of this contract between Vurdere and the Vurdere Clients, we keep the personal information of Consumers just for as long as it is necessary. This period will depend on what we are using this information, according to this data treatment policy.

 

For example, if a Consumer had shared with us personal information as part of a review, reaction or question they published about a product, we can retain this personal data and content created by them for the period that their account exists in Vurdere Client.

 

If this personal information is not necessary for this purpose anymore, for example: the Vurdere Client discontinued a product line and is not interested anymore in the content the users created for it, we will delete it or make it anonymous, removing all the details that identify the Consumers.

 

9. And when our contract is terminated, what will be done with my Consumers data?

 

In this case, Vurdere will evaluate the best procedure and deadline to return all the information collected during the construction and operation of your brand community, used to enrich the experience and conversion of your e-commerce, because this data is legally under control of the Vurdere Client.

 

10. How do you store personal data and what safety measures are adopted to protect it?

 

Physical access control

​

The environment hosting Vurdere services maintains over 90 data center certifications, including conformity to ISO 27001, ISO 27018, SOC 1, SOC 2, SOC3, FedRAMP, HITRUST, MTCS, IRAP, ENS and PCI. All these certifications required controlled physical access to be conceded. For further information, access the website Microsoft Azure Compliance and the website Microsoft Azure Trust Your Cloud.

 

Separation control

​

The Vurdere service that transforms online stores into our client's own social media platform currently comprises 8 micro-services, each one of them with its own infrastructure and life cycle. Each application has its own servers and the databases are always kept separated. Besides that, the data and its processing stay separated to the level of every Cclient. A single account is the Controller of all data that belongs to a given contract. By our app's design, there is no way to access the data without acknowledgement of the account (storage) that contains them. This separation is not only at the Account level, but also at the environment: our stable version software is stored in different servers of the ones that keep the beta versions. The development environments are also separated from the production and beta environments.

​

Attribution Control

​

The admission of Vurdere employees includes personal screening to the extent permitted by law. Furthermore, in our employment contract we include a legally binding declaration in which we state that all data belonging to Vurdere clients is considered confidential and must be treated as such. We also advise discretion and common sense in avoiding comments about Vurdere's work with the brands, activities and Consumers of Vurdere Clients.

​

Virtual access control

​

At Vurdere we implement procedures to ensure that each person has access to all the resources needed to perform their task, but no more than that (role-based access control). Roles are defined and permissions that reflect those needs are granted accordingly.

Virtual Access control

Access logging is present both at the Vurdere application level and at the Azure infrastructure level, according to Microsoft. All passwords are unique, have a minimum length of at least 40 characters, and two-factor authentication is always required — both at Vurdere application and at infrastructure level. All passwords are stored encrypted, like any other sensitive data.

Transmission control

All data managed and processed by Vurdere is encrypted during transmission. Vurdere plug-ins on your Customers' e-commerce platforms, including forms, are only served via the HTTPS protocol, and the same for the Vurdere API. We always employ the most up-to-date and certified encryption methods. Access to the infrastructure of the Vurdere production environment, that is very rarely needed, is only possible via VPN.

​

Data addition/edition control

​

Vurdere adheres to the "Privacy by Design" concept, so all personal data is separated from the keys that allow the identification of each individual, and access to any of the silos is controlled by defining roles and permissions to the individuals, as mentioned in Virtual Access Control, and access to the data prior to its anonymization is restricted to head positions only. As well, all modifying actions are recorded in logs. All logs are centralized and can be used for auditing.

​

Availability control

​

Vurdere also implements all the best practices to ensure our solution is as available as possible. All of our services are based on a multi-AZ infrastructure and follow a Disaster Recovery Plan, with an additional geographic region in Azure. We are also a member of the Microsoft for Startups program, in which we constantly review our architecture and resource usage practices in conjunction with a Microsoft specialist to ensure that our services are in the best possible conditions for availability and scalability.

​

11. What is the estimated number of consumers whose data is being processed?

​

You can always follow the latest number of users that consented to be part of your brand community by the Vurdere Social+Intelligence™ Central, available at:

 

https://[your brand]-[cctld].mais.social

​

So, in the Social+Users menu there is the total number of users in base.

If your corporate email isn’t authorized to access it yet, please request for access at customer.success@vurdere.com

​

12. What are the metrics generated from the processing of data collected from Consumers that can measure the engagement of the community created for my brand?

​

The collected information is anonymized, aggregated, and then the following indexes are extracted and provided to the Vurdere Client:

• Total of users in your brand community;

• Reactions and evaluations total by product or service;

• TQI™ average (Text Quality Index): calculated by a Vurdere automatized system with an applied patent, which analyzes the collected evaluations of products or services features as orthographic errors, grammatical errors, feeling, key-words that impact in the sales of that category, to score the quality of the received evaluations;

• Share with Friends™ average: index calculated to measure the percentage of interconnected users in the brand's community, such as users with friends, with followers, with friends of friends, with followers of followers and other relevant clusters formed in the Vurdere Customer's online store. An interconnected community strengthens your brand's appeal and your online store's relevance;

• Conversion average in your brand community: number of times a Consumer's rating and/or reaction to a product or service was viewed/read and influenced the sale of that item.

​

13. Which of my other systems can receive the data collected by Vurdere?

​

• Web-analytics: Vurdere plugins installed on your e-commerce platform(s) already send, by default, all events triggered by your brand's community to your Google Analytics as well.

• CRM: integrations already approved by Vurdere include those with CRM and Customer Care systems. For now, Zendesk and Salesforce. Other platforms are already expected to be approved.

• Other personalized integrations, by APIs: Vurdere stays open to plan personalized projects for other integrations, such as iOS and Android apps, be it via SDK or APIs, or other CRM platforms.

​

14. Which third party services and websites can receive the data collected by Vurdere?

​

One of the primary objectives of Vurdere is to increase the exposition and the availability of evaluations, reactions and endorses of Consumers to their products or services.

​

When a Consumer reacts to a product or service, he or she is investing time and energy to relate to a brand. This motivation deserves reward.

Therefore, we allow other services to show the evaluations and reactions collected from your store by Vurdere plug-ins in the public profile of these Consumers.

​

This increases the potential audience, the awareness of other Consumers about your brand, your products or services, and rewards your most engaged Consumers.

​

If authorized by the Vurdere Clients, the categories of services and third-party websites that can show ratings and reactions from their Customers are:

• Search engines, including Google and Bing, via our Social+SEO™ plug-in.

• Consumers and business portals, including price comparison websites and shopping guides, as Google Shopping, via our The Social+Ring™ plug-in.

• Other partners and marketplace platforms in which Vurdere and Vurdere Client operate. For example, Vurdere Clients that are sellers in a Marketplace, if wanted, can have the evaluation of their products also published on their pages in that platform, via our The Social+Ring™ plug-in.

• Social Media, such as Facebook, WhatsApp, Instagram, Pinterest, LinkedIn, Twitter via sharing by the users of Social+Reviews™ and Social+Expression™ themselves.

 

15. What if my competitors start to scour through my product pages using automated tools just to collect my Consumers’ data and annoy them with Guerrilla Marketing practices?

​

Vurdere serves large customers, including the largest retail companies in the world, players operating in segments with very intense rivalry between competitors. And yes, we have already seen cases of competitors trying to “scrap” data from product pages, including data present in our social area.

​

Precisely because we have already diagnosed and experienced this several times, we implement security mechanisms that block most of these initiatives right away.

​

These include IP request limiters, greater control over the browsing behavior coming from ASNs from Cloud Hosting, anti-BOTs systems developed by us and by partners (Cloudflare), among others.

​

16. Which entities and countries can my Consumers' personal data be sent to?