Privacy Policy

Last updated: January 1, 2025

1. Introduction

Velanova ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our desktop application and related services (the "Service").

This policy complies with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable data protection laws.

2. Information We Collect

2.1 Information You Provide

  • Account information (name, email address)
  • Payment information (processed securely via PayPal & Lemon Squeezy)
  • Support communications
  • Feedback and survey responses

2.2 Information Collected Automatically

  • Device information (operating system, hardware specs)
  • Usage data (feature usage, error logs)
  • IP address (for licensing verification only)

2.3 Data We Do NOT Collect

Zero-Knowledge Architecture

  • We do NOT access, store, or transmit your database contents
  • We do NOT store your AI queries or responses
  • We do NOT have access to your API keys (stored locally on your device)
  • All data processing happens locally on your machine

3. How We Use Your Information

  • To provide and maintain the Service
  • To process payments and manage subscriptions
  • To send important updates and security notices
  • To respond to support requests
  • To improve our products and services
  • To comply with legal obligations

4. Legal Basis for Processing (GDPR)

Under the GDPR, we process your data based on:

  • Contractual necessity: To fulfill our service agreement with you
  • Legitimate interests: To improve our services and prevent fraud
  • Consent: For marketing communications (you can opt-out anytime)
  • Legal obligation: To comply with applicable laws

5. Your Rights

Depending on your location, you may have the following rights:

GDPR Rights (EU/EEA)

  • Right to access
  • Right to rectification
  • Right to erasure
  • Right to restrict processing
  • Right to data portability
  • Right to object
  • Rights related to automated decision-making

CCPA Rights (California)

  • Right to know what data is collected
  • Right to delete personal information
  • Right to opt-out of sale of data
  • Right to non-discrimination

To exercise these rights, contact us at privacy@velanova.com

6. Data Security

We implement industry-standard security measures including:

  • End-to-end encryption for data in transit (TLS 1.3)
  • Encryption at rest for stored data (AES-256)
  • Regular security audits and penetration testing
  • SOC 2 Type II compliance
  • Secure development practices

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Account data is retained for the duration of your account plus 30 days after deletion request.

8. International Data Transfers

If we transfer data outside the EU/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions.

9. Third-Party Services

We use the following third-party services:

10. Children's Privacy

Our Service is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

12. Contact Us

For questions about this Privacy Policy or to exercise your rights, contact our Data Protection Officer:

Velanova Privacy Team

Email: privacy@velanova.com

Address: 123 Tech Street, San Francisco, CA 94105, USA

EU residents may also lodge a complaint with their local data protection authority.