Privacy Policy

This Privacy Policy describes how Velora (“we,” “us,” or “our”) collects, uses, stores, and discloses information about users (“you”) of the Velora companion platform (“Platform,” “Service”). By using the Platform you acknowledge that you have read, understood, and agree to this Policy.

This Policy applies solely to data processed through the Platform. It does not apply to third-party websites, services, or applications that may be linked to or integrated with the Platform. We are not responsible for the privacy practices of any third party.

We collect only what is necessary to operate the Service:

• Account data — email address, hashed password, account creation timestamp, and language preference.
• Companion configuration — names, personality descriptions, appearance settings, and any other configuration you provide when building an AI persona.
• Conversation data — messages exchanged between you and AI personas within the Platform.
• Media metadata — image and video generation requests, render job records, and output references. We do not permanently store raw generated media beyond what is necessary for delivery.
• Billing events — subscription plan, payment timestamps, and transaction identifiers. Full payment card details are processed and stored exclusively by our third-party payment processor; we do not hold raw card data.
• Usage and technical data — IP addresses, browser type, device identifiers, session tokens, and log data needed for security, fraud prevention, and service operation.
• Moderation and audit records — administrator actions, moderation reports, and platform safety events.

We do not intentionally collect special-category personal data (health, biometric, racial, religious, or similar sensitive information). Do not submit such data through the Platform.

We use collected data strictly to:

• Provide, maintain, and improve the Platform and its features;
• Authenticate users and manage account access;
• Process payments and manage subscription entitlements;
• Route prompts to AI inference providers and return outputs to you;
• Detect and prevent fraud, abuse, and security threats;
• Enforce our Terms of Service and other policies;
• Comply with applicable legal obligations and lawful requests;
• Provide user support when requested.

We do not use your data for advertising profiling, do not sell your data to brokers, and do not share your data with third parties for their own marketing purposes.

We retain your data for as long as your account is active and for a reasonable period thereafter to fulfil our legal, security, and operational obligations. Conversation and generation data may be retained for a shorter period based on technical and business requirements.

When you request account deletion, we will remove your personal data within a commercially reasonable time, except where retention is required by law, fraud prevention, dispute resolution, or enforcement of our agreements. Anonymised or aggregated data from which you cannot be identified may be retained indefinitely.

We make no warranty that data will be retained for any minimum period. Data may be deleted earlier due to technical failures, infrastructure changes, or business decisions, and we accept no liability for such deletion.

We share data with third-party vendors only to the extent necessary to operate the Platform:

• AI inference providers — your prompts and conversation context are transmitted to third-party AI model providers to generate responses. These providers have their own data processing terms.
• Payment processors — billing data is processed by our payment partner. We do not store full card numbers or CVV data.
• Cloud infrastructure — data is stored and processed on cloud servers. All data in transit is encrypted using industry-standard protocols.
• Media generation services — image and video generation requests may be routed to third-party rendering APIs.

We do not control and are not responsible for the data practices of third-party providers. Their privacy policies govern their handling of any data we share with them.

When you submit prompts to AI companions, those prompts are transmitted to third-party AI model providers for inference. We cannot guarantee that AI vendors do not use submitted prompts for model training or other purposes under their own policies. You should not include sensitive personal information, credentials, or confidential business data in your prompts.

We make no warranty and accept no liability regarding how AI vendors handle data transmitted to their systems.

We use cookies and similar technologies solely for: session authentication, user preference storage (such as language and theme), and security purposes. We do not use third-party advertising cookies or cross-site tracking pixels.

You may disable cookies through your browser settings, but doing so may prevent the Platform from functioning correctly or at all. We accept no liability for Platform unavailability resulting from disabled cookies.

We implement reasonable technical and organisational security measures, including encrypted data transmission, hashed credential storage, and access controls limited to authorised personnel.

However, no method of transmission or storage over the internet is completely secure. We cannot and do not guarantee the absolute security of your data. In the event of a security incident, we will take reasonable steps to investigate and notify affected users as required by applicable law, but we accept no liability for unauthorised access, disclosure, or loss of data.

Subject to applicable law, you may request:

• Access to personal data we hold about you;
• Correction of inaccurate data;
• Deletion of your account and associated personal data;
• Export of your data in a commonly used format.

To exercise any of these rights, contact us through the support channel listed on the Platform. We will respond within a commercially reasonable time. We may need to verify your identity before processing requests.

We reserve the right to decline requests that are excessive, repetitive, or technically impracticable, or where data retention is required by law or legitimate business interest.

The Platform is intended exclusively for users aged 18 and over. We do not knowingly collect personal data from individuals under 18. If we become aware that we have collected data from a minor, we will delete it promptly. We accept no liability for access by minors in violation of our age requirements.

We do not sell, rent, or trade your personal data to third parties for their own commercial purposes. Data shared with vendors is strictly limited to what is required for them to provide services to us on your behalf.

The Platform may be operated from, and data may be stored and processed in, jurisdictions other than your own. By using the Platform you consent to the transfer of your data to such jurisdictions, which may have different data protection laws than your country. We accept no liability arising from such international transfers.

We may update this Privacy Policy at any time without prior individual notice. Changes take effect immediately upon posting. Your continued use of the Platform after changes are posted constitutes acceptance of the revised Policy. We recommend reviewing this page periodically.

For privacy-related inquiries, account deletion requests, or data export requests, please contact us through the support channel available on the Platform. We do not accept privacy requests through unverified channels.