VeloraPrivacy Policy
In short: we use your data only to run Velora for you. We do not sell data, do not show ads and do not use advertising or analytics trackers. Fan data belongs to the agency that connected the creator.
1. Who is responsible
Velora is operated by Pavlo Lagutin, an individual based in Ukraine. Contact for any privacy question or request: support@velorachat.app.
- Account, team and billing data — we decide how it is used, so we are the controller.
- Fan and creator data that an agency brings into Velora by connecting a creator account (fan profiles, messages, purchases, media) — the agency is the controller, and we process it on the agency’s behalf and on its instructions. Fans who want to use their rights should contact the agency or creator; we will help the agency respond.
2. What data we process
- Account: email, name, profile picture (from Google or Discord if you sign in with them), language and time zone, sign-in sessions.
- Agency and team: agency name and settings, team members and roles, invitations, activity log of important actions.
- Creator connections: platform account identifiers and access tokens (stored encrypted), creator profile, settings and AI persona text written by the agency, creator portal consents.
- Fan data from connected platforms: fan identifiers and display names, messages, media sent or received, purchases and tips, notes and memory facts the AI or the team saved about the chat.
- Billing: billing name, address, country and company details, wallet transactions, payment status from payment providers. Card details are handled by the payment providers.
- Support: your questions to the support assistant and to our team.
- Technical: IP address and request logs needed for security and troubleshooting.
- Voice: the creator’s voice model and generated voice messages, if the agency turned voice on; voice messages from fans and their transcripts, if the agency turned on transcription.
3. Why we use it
- To provide the Service you signed up for: chats, AI replies, team work, statistics, payments (performance of our contract with you).
- To keep Velora secure, prevent abuse and fraud, and protect fans and creators, including automated safety checks of messages and media (our legitimate interest and legal obligations).
- To keep accounting and payment records as required by law (legal obligation).
- To send service emails such as sign-in links, invitations and important notices (contract). We do not send marketing emails without your consent.
- Voice in a creator’s voice — on the basis of the creator’s consent, which the agency must have before turning it on; the creator can stop it at any time in the creator portal.
4. AI processing
To write or check a reply, Velora sends the relevant part of the chat, the creator’s persona and the needed facts to the language model provider. This happens for chats where the agency turned the AI on, and when your team uses AI tools such as translation or “rewrite in her style”. Media sent by fans can be checked automatically for safety. The provider processes the data under its API terms to return the result. Our in-app support assistant receives only your team’s support questions, never fan chats. We do not use your or your fans’ data to train our own AI models.
5. Who helps us
We share data only with service providers that we need to run Velora, and only what each of them needs:
| Provider | What for |
|---|---|
| Hetzner (Germany) | Servers and storage: the Service, its database and media files run in a data centre in Falkenstein, Germany. |
| xAI | Large language model that writes AI replies and runs safety checks. Receives the chat context needed for the reply. |
| Anthropic | AI model of the in-app support assistant. Receives only your team’s questions to support, never fan chats. |
| ElevenLabs | Voice messages in a creator’s voice, and transcription of voice messages that fans send — only where the agency turned these features on. |
| Telegram, Fanvue, OnlyFans API provider | The platforms you connect: messages, fan profiles, purchases and media are exchanged with them to run your chats. |
| Whop, NOWPayments, dropp | Payment processing for wallet top-ups and fan card payments. They process card or crypto payment details; we do not store full card numbers. |
| Zernio | Publishing posts to the social accounts you connect, if you use scheduled posting. |
| Google, Discord | Sign-in, if you choose it: we receive your email, name and profile picture. |
| Resend | Sending service emails: sign-in links, team invitations, confirmations and notifications. |
We may also disclose data when the law requires it, or to protect people from serious harm (for example, to report child sexual abuse material to the competent authorities).
6. Transfers outside the EEA
Our servers are in Germany. Some providers above are located outside the European Economic Area, including in the United States. Where the law requires it, these transfers rely on safeguards such as the European Commission’s standard contractual clauses or adequacy decisions.
7. How long we keep data
- While your agency account is active, we keep its data so the Service works.
- When an agency is deleted, its data is permanently deleted after 30 days (the delay protects against accidental deletion). Backups are kept for 14 days and then overwritten.
- Payment records and the log of important account actions are kept longer where accounting, tax or security law requires it.
8. Security
Each agency can see only its own data; this separation is enforced in the database itself. Access tokens and keys are stored encrypted, connections use HTTPS, and sign-in sessions are kept in secure cookies. Read more on the Security and data page.
9. Your rights
Depending on where you live (for example under the EU GDPR), you can ask us for access to your data, a copy of it, correction, deletion, restriction or objection to processing, and you can withdraw consent at any time. Write to support@velorachat.app; we answer within 30 days. You can also complain to your local data protection authority.
10. Cookies and local storage
We use only what the Service needs: a sign-in session cookie and a few settings stored in your browser (such as language or dismissed tips). We do not use advertising or analytics cookies, so there is no cookie banner.
11. Age
Velora is a service for adults. We do not knowingly process data of anyone under 18 as a customer, and our rules forbid any content involving minors.
12. Changes
We will update this policy when the Service changes. For significant changes we will notify account owners in the Service or by email before they take effect.