Privacy Policy

Last updated: July 4, 2026

1. Information We Collect

When you create a Velora account, we collect your name, email address, company name, and country. When you connect third-party integrations (Google Analytics, Paystack, Meta Ads), we collect and store encrypted OAuth tokens that allow us to fetch your business data on your behalf. We never store your passwords for third-party services.

2. How We Use Your Information

We use your information to provide the Velora service — specifically to display your business metrics on your dashboard, generate AI-powered weekly reports, and deliver those reports to your email address. We do not sell your personal data to third parties. We do not use your data for advertising purposes.

3. Data Security

All OAuth tokens from third-party integrations are encrypted using AES-256-GCM encryption before being stored in our database. Passwords are hashed using bcrypt with a cost factor of 12. Sessions are managed via httpOnly cookies to prevent XSS attacks. We use Supabase (SOC 2 compliant) for database storage.

4. Google User Data

Velora requests read-only access to your Google Analytics data (analytics.readonly scope). We only access the specific metrics needed to populate your dashboard — sessions, pageviews, and user counts. We do not access, store, or share any other Google account data. You can revoke Velora's access to your Google account at any time from your Google Account security settings.

5. Third-Party Services

Velora integrates with third-party services you choose to connect — currently including Google Analytics, Meta Ads, Paystack, Shopify, QuickBooks, and Mailchimp, with additional integrations added over time. The full current list is always visible on your Integrations page. Each integration is optional and can be disconnected at any time. When you disconnect an integration, all associated tokens and cached data are permanently deleted from our systems.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, all personal data, business metrics, and generated reports are permanently deleted within 30 days. You can request account deletion at any time by emailing us.

7. Your Rights

You have the right to access, correct, or delete your personal data at any time. You can update your profile information from your Settings page. To request complete account deletion or a copy of your data, contact us at the email below.

8. Cookies

Velora uses a single httpOnly session cookie (vl_session) to maintain your login state. This cookie is strictly necessary for the service to function and does not track you across other websites. We use Google Analytics on our marketing pages to understand how visitors find us.

9. Children's Privacy

Velora is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children.

10. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at: skyboixofficial@gmail.com