Privacy Policy

1. Collection of Personal Data

Personal Data We Receive Automatically from Your Use of the Services

When you access or use our Services, we may automatically collect certain technical and usage information to operate, secure, personalize, and improve our products and platforms.

• Device information, including browser type, operating system, device identifiers, and system settings.
• Usage data, including pages viewed, features used, session duration, clicks, navigation paths, and interaction events.
• Log data, including IP address, timestamps, referring URLs, error logs, and diagnostic information.
• Approximate location data inferred from IP address or device settings.
• Cookies, pixels, SDKs, and similar technologies used for analytics, security, preferences, and performance.
• AI interaction metadata, such as prompts, queries, workflow actions, timestamps, model response metadata, and system performance signals.

2. Uses of Personal Data Permitted Under Applicable Data Protection Laws

We use personal data only where permitted under applicable data protection laws and for legitimate business, operational, security, and product purposes.

• To provide, operate, maintain, and improve our Services.
• To authenticate users, manage accounts, and provide customer support.
• To deliver AI-powered insights, recommendations, automation, and platform functionality.
• To monitor system performance, troubleshoot issues, and improve reliability.
• To protect against fraud, abuse, unauthorized access, security threats, and misuse.
• To personalize user experiences and improve product usability.
• To communicate updates, service notices, product information, and marketing messages where permitted.
• To comply with legal obligations, enforce agreements, and protect our legal rights.

3. How We Disclose Personal Data

We do not sell personal data in the traditional sense. We may disclose personal data only as necessary to operate our business, deliver our Services, meet legal requirements, and support trusted platform operations.

• Service Providers: Cloud hosting, analytics, security, payment, communication, support, and infrastructure partners.
• Business Customers: Where Services are provided through an organization, administrators may access certain account, usage, and activity information.
• Professional Advisors: Legal, accounting, audit, compliance, insurance, and business advisors.
• Legal and Regulatory Authorities: Where required by law, subpoena, court order, government request, or legal process.
• Business Transfers: In connection with a merger, acquisition, financing, reorganization, sale of assets, or similar corporate transaction.
• With Consent: Where you direct us or authorize us to share information with third parties.

4. Rights and Choices

Depending on your location and applicable law, you may have certain rights regarding your personal data.

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete personal data.
• Request deletion of personal data, subject to legal and contractual limitations.
• Request restriction or objection to certain processing activities.
• Request data portability where applicable.
• Opt out of certain marketing communications.
• Withdraw consent where processing is based on consent.
• Appeal certain decisions where required by applicable privacy laws.

5. Data Transfers

Veloxs AI may process and store personal data in the United States and other jurisdictions where we, our affiliates, or our service providers operate. Where personal data is transferred internationally, we use appropriate safeguards such as contractual protections, security controls, and other lawful transfer mechanisms required by applicable data protection laws.

6. Data Retention, Data Lifecycle, and Security Controls

We retain personal data only for as long as necessary to provide the Services, fulfill business purposes, comply with legal obligations, resolve disputes, enforce agreements, and maintain security.

• Data lifecycle controls for collection, processing, storage, access, archival, and deletion.
• Encryption in transit and at rest where appropriate.
• Role-based access controls and least-privilege access principles.
• Audit logging, monitoring, and security event tracking.
• Secure software development practices and vulnerability management.
• Data minimization and purpose limitation practices.
• Backup, recovery, and business continuity safeguards.

7. Children

Our Services are not directed to children under the age of 13, and we do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without appropriate consent, we will take reasonable steps to delete such information.

8. Changes to Our Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, legal requirements, business practices, or privacy commitments. When we make material changes, we may provide notice through our website, Services, or other appropriate communication channels. The “Effective Date” at the top of this policy indicates when it was last updated.

9. Contact Information

If you have questions, concerns, or requests related to this Privacy Policy or our data practices, please contact us:

10. Legal Bases for Processing

Where applicable data protection laws require a legal basis for processing personal data, we rely on one or more of the following bases:

• Contract: To provide Services requested by you or your organization.
• Legitimate Interests: To operate, secure, improve, and promote our Services.
• Consent: Where you have provided consent for specific processing activities.
• Legal Obligation: To comply with applicable laws, regulations, and legal processes.
• Vital or Public Interest: Where required or permitted under applicable law.

11. Regional Supplemental Disclosures

California Privacy Notice

California residents may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, including the right to know, access, correct, delete, opt out of sale or sharing, limit use of sensitive personal information where applicable, and not be discriminated against for exercising privacy rights.

European Economic Area, United Kingdom, and Switzerland

Individuals in the EEA, UK, and Switzerland may have additional rights under applicable data protection laws, including rights to access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with a supervisory authority.

Other Jurisdictions

Depending on where you reside, you may have additional privacy rights under local laws. We will respond to privacy requests in accordance with applicable legal requirements.