Privacy Policy

Who we are

Velyoh (“Velyoh”, “we”) is an AI website engine: it interviews your business through a questionnaire, builds an AI Brand Profile, generates a complete website and publishes it on a velyoh.com subdomain or on your own custom domain.

The service is operated by [Company legal name], [Legal form], [Registered address]. For any privacy request, contact us at velyoh.contact@gmail.com.

Data we collect

We collect only what is needed to run the service:

• Account data — email address, name, and authentication identifiers managed through Supabase Auth (email/password or Google sign-in).
• Business information — the answers you give in the questionnaire (company details, story, offering, audience, goals, brand preferences).
• Uploaded media — logos, photos and other files you upload to illustrate your website.
• Generated content — your AI Brand Profiles, generated website versions, improvement proposals and blog drafts, kept as version history in your account.
• Billing data — your plan, subscription status and invoice history. Payments are processed by Stripe; full card details never reach or get stored on Velyoh's servers.
• Technical data — server logs, IP addresses, security events and rate-limiting counters needed to keep the service safe.
• Preferences — your interface language, stored in a cookie.

Why we process your data

Where EU law (GDPR) applies, we rely on the following legal bases:

• To create and operate your account and provide the service, including generating your Brand Profile and website (performance of a contract).
• To run the AI improvement features you explicitly request (performance of a contract).
• To bill subscriptions through Stripe and keep required accounting records (contract and legal obligation).
• To secure the platform, prevent abuse and debug incidents (legitimate interest).
• To send transactional emails such as sign-in and account messages (performance of a contract).
• To remember your language preference (legitimate interest / consent where required).

AI processing

When you request a generation or an improvement, the business information you submitted (questionnaire answers, Brand Profile, existing website content and your instructions) is sent to our AI provider, Anthropic, solely to produce that result for you. We do not use your data to train AI models.

Every AI output is stored as a draft or proposal that you review; nothing is published without your explicit action.

Generated websites

Websites generated with Velyoh are separate, user-controlled content. Once you publish one on a subdomain or custom domain, it is publicly accessible, and any business information it contains (for example your public contact details) is visible to its visitors.

You decide what your generated website contains before publishing it, and published sites are served only while the owner's subscription is active.

Service providers

We share data only with the processors required to operate Velyoh:

• Supabase — database, authentication and file storage (project hosted in the EU, region eu-west-1).
• Vercel — application hosting and content delivery.
• Stripe — subscription payments and invoicing.
• Anthropic — AI generation and improvement features.
• Resend — transactional email delivery.
• Upstash — rate limiting infrastructure.

International transfers

Some providers process data outside the European Economic Area (for example in the United States). Where that happens, transfers are covered by appropriate safeguards such as the EU Standard Contractual Clauses or an adequacy decision.

Data retention

Account and generated content are kept for as long as your account exists, so your version history keeps working. If you ask us to delete your account, we delete or anonymise your personal data, except billing records we must keep to satisfy legal retention duties. Technical logs are kept only briefly.

Cookies

Velyoh uses no advertising or third-party tracking cookies. We set only:

• Authentication cookies — Supabase session cookies required to sign in and keep your session active.
• Language cookie — a single cookie (NEXT_LOCALE) storing your interface language.

Your rights

Depending on your jurisdiction, you have the right to:

• Access the personal data we hold about you and receive a copy (portability).
• Correct inaccurate data.
• Request deletion of your data.
• Restrict or object to certain processing.
• Lodge a complaint with your data protection authority.

Security

All traffic is encrypted in transit (TLS). Data access is protected by row-level security in the database, least-privilege server keys, and security headers on every response. Payment credentials are handled exclusively by Stripe.

Children

Velyoh is a business tool and is not directed at children under 16. We do not knowingly collect data from children.

Changes to this policy

We may update this policy as the service evolves. The date at the top reflects the latest revision; material changes will be communicated in the app or by email.

Contact

For any privacy question or to exercise your rights: velyoh.contact@gmail.com, or by post at [Registered address].