Legal

Privacy Policy

Last updated: [Month DD, 2026]

Your privacy matters to us. This policy explains, in plain language, what we collect and how we use it.

Overview

Velorah (“we,” “us,” or “our”) operates the Velorah marketing and lead-automation platform and the website at velorahflow.io. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using our website or platform, you agree to the practices described here.

Information we collect

We collect information in a few ways:

• Information you provide. When you book a demo, contact us, or sign up, you may give us your name, work email, company, and message.
• Platform data. When you use Velorah, we process the contact and campaign data you upload or generate in order to provide the service.
• Usage data. We automatically collect standard technical information such as IP address, browser type, and pages visited, to keep the service secure and improve it.
• Cookies. We use strictly necessary cookies to run the site, and only use analytics or marketing cookies if you opt in via the cookie banner. See our Cookie Policy for the full list and how to change your choice at any time.

How we use information

We use the information we collect to:

• Provide, maintain, and improve the platform and website;
• Respond to your requests, including demo bookings and support;
• Send you service-related and, where you have opted in, marketing communications;
• Protect the security and integrity of our service;
• Comply with legal obligations.

How we share information

We do not sell your personal information. We share it only with:

• Service providers who help us operate the platform (for example, hosting, email delivery, and analytics), under contracts that require them to protect it;
• Legal and safety recipients when required by law or to protect rights and safety;
• Business transfers in connection with a merger, acquisition, or sale of assets, subject to this policy.

Responsible AI & communications

Velorah includes AI-assisted outreach features, including a voice agent. We build these to be used responsibly:

• The AI voice agent is consent-first — it is intended to contact only people who have opted in.
• The agent discloses that it is AI on calls.
• Customers are responsible for ensuring their own outreach complies with applicable laws, including TCPA, CRTC, CASL, GDPR, and CAN-SPAM.

We provide tooling (consent gating, disclosure, logging) to support compliant use, but customers remain the controllers of the outreach they send.

Your rights & choices

Depending on where you live, you may have the right to access, correct, delete, or port your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at the address below. You can unsubscribe from marketing email at any time using the link in each message.

Data security & retention

We use administrative, technical, and physical safeguards designed to protect your information. No system is perfectly secure, so we cannot guarantee absolute security. We retain personal information for as long as needed to provide the service and meet our legal obligations, then delete or anonymize it.

International transfers

We may process and store information in countries other than your own. Where we transfer personal data internationally, we use appropriate safeguards as required by applicable law.

Children’s privacy

Velorah is a business tool not directed to children, and we do not knowingly collect personal information from anyone under 16.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “last updated” date above and, for material changes, provide a more prominent notice.

Contact us

Questions about this policy or your data? Email us at [email protected] or write to Velorah, [company address].