Privacy Policy
Last updated: 1 September 2026
This Privacy Policy explains what personal data Velora collects, why we collect it, and the choices you have. Velora is committed to processing data responsibly and minimally.
1. What data we collect
We collect the following categories of data:
- Account data: your email address, password hash, and authentication details.
- Profile data: your name, company, and role, if you choose to provide them.
- Project data: the product details, URLs, copy, and screenshots you enter for diagnosis.
- Funnel numbers: visitor, signup, activation, and payment figures you submit.
- Support messages: content of emails or messages you send us for help.
- Usage and device data: pages visited, browser type, and approximate location, collected automatically.
2. Why we collect it
- To create and secure your account and authenticate you.
- To run our diagnostic engine and generate your funnel report.
- To bill you for paid plans and prevent fraud.
- To respond to support requests and improve our product.
- To send essential service emails and, if you opt in, product updates.
3. Legal bases for processing
Where the GDPR or similar law applies, we rely on:
- Contract: to provide the service you signed up for.
- Legitimate interests: to secure and improve Velora and prevent abuse.
- Consent: for optional cookies and marketing emails, which you can withdraw at any time.
- Legal obligation: for tax, accounting, and compliance records.
4. Processors and sub-processors
We use trusted third parties to operate Velora. Our primary infrastructure provider is Lovable Cloud, which provides hosting, database, and authentication services on our behalf. We also use payment processors to handle billing. All processors are bound by data processing agreements and only access data necessary to perform their function.
5. Data retention
We retain account and project data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within 30 days, except where we must retain records for legal, tax, or fraud-prevention purposes. Support messages may be retained longer for quality and training purposes.
6. Your rights
Depending on your location, you may have the right to:
- Access a copy of the personal data we hold about you.
- Export your project data and funnel numbers.
- Correct inaccurate data or ask us to delete it.
- Object to or restrict certain processing, and withdraw consent at any time.
You can export or delete your account directly from account settings. For any other request, email privacy@velora.app.
8. Children's privacy
Velora is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.
9. International data transfers
Velora and its processors may store and process data in countries other than your own, including the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses to protect data transferred internationally.
10. Contact
For privacy questions or requests, email privacy@velora.app.