Privacy Policy

Account information. When you create a portal account we collect your email address and password (hashed). You may optionally provide your full name, company name, country, phone number, and timezone in your profile.

Usage data. We collect information about how you use the portal, including pages visited, features accessed, and support requests submitted.

Communication data. Support messages and any other correspondence you send us.

Technical data. IP address, browser type, and device identifiers collected automatically when you access the portal.

We use your information to:

• Provide, operate, and maintain the Velron Client Portal and your AI commerce automation system.
• Send you transactional emails (account confirmation, password reset, billing updates, service notifications).
• Respond to support requests and communicate with you about your account.
• Monitor portal health, detect fraud, and enforce our Terms of Service.
• Improve our services through aggregate, de-identified analytics.

Your account data is stored in Supabase, a GDPR-compliant cloud database provider hosted on AWS (eu-west-1 region). Supabase encrypts data at rest and in transit using AES-256 and TLS 1.2+.

Passwords are never stored in plaintext — they are hashed using bcrypt by Supabase Auth before storage.

API keys you add to the workspace key vault are stored in our database. We recommend storing only non-critical or scoped API keys in the portal vault.

We use the following third-party services to operate the portal:

• Supabase — authentication and database (supabase.com)
• n8n — workflow automation and transactional email delivery
• Vercel — portal hosting (vercel.com)

Each provider has its own privacy policy. We do not sell your personal data to any third party.

We retain your account data for as long as your account is active. If you delete your account, your profile and associated data are permanently deleted from our systems within 30 days. Backup snapshots may retain data for up to 90 days.

Support request records are retained for 2 years for quality and compliance purposes.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your account and personal data.
• Object to or restrict certain processing.
• Request a portable copy of your data.

To exercise any of these rights, email us at operations@velrondigital.online. We will respond within 30 days.

You may also delete your account at any time from the portal Settings page under “Danger Zone.”

We use browser storage to maintain your session and preferences. See our Cookie Policy for full details.

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Continued use of the portal after changes constitutes acceptance of the updated policy.

Questions about this Privacy Policy? Contact us at:

Velron Digital Solutions
operations@velrondigital.online