Last updated 31 July 2026
Privacy policy
What we collect
- Account details — your email address and a record of when you signed in. We use passwordless sign-in, so we never hold a password for you.
- Licence and billing status — which plan you hold, whether it is active, and the devices activated against your licence. Card details are handled entirely by our payment provider; we never see or store them.
- Encrypted content — only if you subscribe to managed backup. It is encrypted on your device before upload, with keys we do not have. To us it is unintelligible data.
- Operational logs — error and performance records used to keep the service working, scrubbed of document content and personal identifiers.
What we do not collect
- Your documents, in any readable form.
- The questions you ask or the answers Veldrun produces.
- Your encryption keys.
- Analytics or advertising identifiers. Our website runs no third-party trackers.
Your content is never used for training
We do not use your documents, questions or answers to train or fine-tune any model, and there is no mechanism by which we could: analysis runs on your hardware, and anything reaching our infrastructure is encrypted with keys we do not hold.
Why we process what we do
We process account and licence data to perform our contract with you, operational logs on the basis of our legitimate interest in a working and secure service, and marketing email only with your consent, which you may withdraw at any time.
Who else is involved
We use a small number of processors, each limited to what its function requires: a payment provider (billing and tax, as merchant of record), an email provider (sign-in links and service notices), and an infrastructure and content-delivery provider. Where managed backup is used, encrypted blocks sit with an object-storage provider that cannot read them. We do not sell personal information and we do not share it for cross-context behavioural advertising.
International transfers
Our providers may process data in the United States and other countries. Where required, transfers rely on Standard Contractual Clauses or an equivalent approved mechanism.
How long we keep it
Account and licence records are kept while your account is active, and afterwards for as long as tax and accounting obligations require. Operational logs are retained for a short rolling period. Encrypted backup content is deleted when you delete it or close your account.
Your rights
Depending on where you live, you may have the right to access, correct, delete, port or restrict the personal data we hold, to object to processing, and to complain to your data protection authority. If you are in California you may also request disclosure of the categories of information collected and opt out of sale or sharing — though we do neither. We will not discriminate against you for exercising any of these rights.
To exercise them, email hello@veldrun.com. We respond within 30 days. Note that we cannot produce copies of your documents in response to such a request, because we do not hold them in readable form.
Security, stated honestly
Content is encrypted on your device before it leaves it, and keys stay with you. Two limits are worth stating plainly rather than leaving you to discover them: because we never hold your keys, we cannot recover your archive if you lose them; and remote access through our relay terminates TLS at our provider’s edge, so that connection is encrypted in transit rather than end-to-end.
Children
Veldrun is not directed at children under 13 and we do not knowingly collect their personal information. Household members are managed by the account holder.
Changes and contact
We post material changes to this page and, where they affect you meaningfully, notify you by email. Controller: Maibots LLC. Contact: hello@veldrun.com.