Privacy Policy

Veltrix AI operates an online subscription service that analyses publicly available marketplace product data and generates marketing assets using AI. You can contact us about privacy at support@veltrix.ai.

• Account data — name (if provided), email address, hashed login credentials or Google sign-in identifiers, account creation date.
• Subscription and plan data — your plan tier, subscription status, renewal dates and the transaction identifiers we receive from our payment provider. We do not collect or store your card details.
• Service content — the product URLs, keywords and prompts you submit, your saved searches, and the AI-generated results associated with your account.
• Credentials you choose to store — if you add your own third-party API key (e.g. OpenAI), it is stored encrypted at rest and used only to make requests on your behalf.
• Usage and technical data — feature usage, search counts against plan limits, log data, device and browser information, and IP address.
• Support data — messages and attachments you send us.

• To provide the Service — creating your account, running searches, generating content, saving history, enforcing plan limits. Legal basis: performance of a contract.
• To take payment and manage subscriptions — via our Merchant of Record. Legal basis: performance of a contract and legal obligation (tax, accounting).
• To keep the Service secure and prevent abuse or fraud — logging, rate limiting, investigating misuse. Legal basis: legitimate interests.
• To improve and troubleshoot the Service — aggregated analytics and error diagnostics. Legal basis: legitimate interests.
• To provide customer support. Legal basis: performance of a contract and legitimate interests.
• To send product or marketing emails where you have opted in. Legal basis: consent, which you can withdraw at any time.

• Merchant of Record — Paddle.com Market Ltd, which sells our subscriptions and handles checkout, payments, subscription management, invoicing, tax compliance and refunds. Paddle processes your billing details as an independent controller under its own privacy policy.
• Infrastructure and hosting providers — our cloud hosting, database and authentication provider, which stores your account data and saved searches.
• AI and data providers — the AI model providers that generate content from your prompts, and the marketplace data providers we query for public product listings. Prompts are sent to these providers to return results to you.
• Analytics and error monitoring providers, where enabled.
• Professional advisers (legal, accounting) and authorities where required by law or to protect our legal rights.

We do not sell your personal data.

Our providers may process data outside the UK/EEA, including in the United States. Where data leaves the UK/EEA we rely on appropriate safeguards such as the UK/EU Standard Contractual Clauses or an adequacy decision. You can request details of these safeguards at support@veltrix.ai.

We keep account data, saved searches and generated content for as long as your account is active. If you close your account, we delete or anonymise your personal data within 90 days, except where we must keep records longer to meet legal, tax or accounting obligations (typically up to 7 years for transaction records) or to resolve disputes. Stored API keys are deleted immediately when you remove them or delete your account. Logs are retained for a short period for security and diagnostics.

Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to processing, request portability, and withdraw consent. You can exercise these rights by emailing support@veltrix.ai; we will respond within one month. If you are in the UK or EEA you also have the right to lodge a complaint with your local data protection supervisory authority.

We apply appropriate technical and organisational measures, including encryption in transit, encryption at rest for stored third-party API keys, row-level access controls so users can only read their own records, and restricted administrative access. No system is completely secure, but we work to protect your data and will notify you and any relevant regulator of a qualifying personal data breach as required by law.

We use strictly necessary cookies and similar local storage to keep you signed in and to secure the Service; these cannot be switched off. Where we use analytics or marketing cookies, we ask for your consent first and you can withdraw it at any time by clearing cookies in your browser or contacting us. Our payment provider may also set cookies during checkout.

The Service is not intended for anyone under 18 and we do not knowingly collect their data.

We may update this notice; material changes will be notified by email or in-app. For any privacy question or request, contact support@veltrix.ai.