Privacy Policy

Who this covers

Velantia is built and run by one person. This policy covers this website and the app at app.velantia.app. Same product, one policy.

What we collect

When you create an account, we store the email address and password you sign up with. Passwords are handled by our authentication provider, Supabase. We never see or store your password as plain text.

When you set up your store, we store the web address you give us, the name you call your store, what you sell, how your site is built (for example Shopify or something custom), and who makes changes to it. We use these to decide what a fix should look like for your specific site.

Each time you run a check, we store the result: your scores, the technical findings about your site, the questions we asked an AI assistant on your behalf and what it answered, and the list of fixes we generated. If you join the waitlist instead of signing up, we store the email address and any note you leave.

Who we send it to

Running a check means asking a few outside services to do the parts we can't do ourselves. Here's exactly what each one receives:

• Your website itself. Our server fetches the page you submit directly, the same way a browser would, to read what's on it.
• Google PageSpeed Insights. Receives the web address you submit, to measure how fast your site loads on mobile.
• Anthropic. Receives your store's name and what you sell (not your web address), used to write the shopping questions we ask and to pull competitor names out of the answers.
• Perplexity. Receives only the shopping questions we generate, such as "what's a good soy candle brand for a gift." Your store's name and web address are deliberately left out of these questions, because asking an AI assistant about you by name would prove nothing about whether it would say your name unprompted.
• Serper, a Google search API. Receives generic category search phrases, such as "best soy candles," used to check where your site ranks and whether it turns up as a recommended brand. Your store's name and web address are not sent to Serper.

We don't sell any of this. Supabase hosts our database and handles sign-in, so it holds everything described above as our infrastructure provider. It isn't a service we send data to for a specific purpose the way the four above are.

Analytics and session recordings

We use PostHog to see how this site and the app get used: which pages get visited, what gets clicked, recordings of what a session looked like on screen, and any errors your browser runs into. If you're signed in, that activity is tied to your account email, which is what lets us find and fix a problem you actually hit, instead of guessing. This data isn't sold or shared with anyone else.

Cookies and local storage

Staying signed in works through your browser's local storage, not a cookie. That's how our authentication provider, Supabase, keeps your session. PostHog, our analytics service, stores an identifier in your browser so two visits count as the same visitor. We don't set advertising cookies of any kind.

How long we keep it

We keep your account and check history for as long as your account exists. There's no automatic deletion yet. If you want your account or data removed, emailhelp@velantia.appand it will be handled by hand.

What we don't claim

Velantia doesn't claim compliance with GDPR, CCPA, or any other privacy law. We haven't built the tooling those require (automated data export, a formal deletion process, consent management), so we're not going to say we have.

Governing law

Velantia is operated from Texas, United States. This policy is governed by the laws of the State of Texas, without regard to its conflict-of-law rules. If you have a question or a complaint about how your data is handled, emailhelp@velantia.appfirst. It reaches a person, not a queue.

Changes to this policy

If what we collect or who we send it to changes, we'll update this page and change the date at the top.

Questions

Email help@velantia.appor see the contact page.