← Home

Privacy Policy

Last updated: May 05, 2026

PRIVACY POLICY

Last updated: May 05, 2026

This Privacy Notice for VeloxAssist ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you visit our website at https://www.veloxassist.ai or use our AI-powered customer support platform.

If you have questions or concerns, reading this notice will help you understand your privacy rights and choices. If you disagree with our policies and practices, please do not use our Services. For any questions, contact us at hello@veloxassist.ai.

1. WHAT INFORMATION DO WE COLLECT?

Personal Information You Provide to Us

We collect personal information that you voluntarily provide to us when you register for an account, use the Services, or contact us. This includes:

  • Names
  • Email addresses
  • Billing addresses
  • Debit and credit card numbers (processed securely by Stripe)
  • Contact or authentication data and preferences

Sensitive Information. We do not process sensitive information such as social security numbers, financial account credentials, health data, or biometric data.

Payment Data. We may collect data necessary to process your payment, such as your payment instrument number and the security code associated with it. All payment data is handled and stored by Stripe. You may find their privacy notice at https://stripe.com/privacy.

Information Automatically Collected

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include:

  • IP address and approximate geographic location
  • Browser type and version
  • Device characteristics and operating system
  • Referring URLs and pages visited
  • Log and usage data (access times, pages viewed, clicks)
  • Cookies and similar tracking technologies

2. HOW DO WE PROCESS YOUR INFORMATION?

We process your personal information for the following purposes:

  • Account creation and authentication: to create and manage your account and verify your identity
  • Service delivery: to provide, maintain, and improve the VeloxAssist platform and features
  • User support: to respond to your inquiries and resolve issues
  • Administrative communications: to send billing receipts, service updates, security alerts, and policy notices
  • Order and subscription fulfillment: to process payments and manage your subscription
  • Feedback collection: to request feedback and improve our Services
  • Security and fraud prevention: to monitor for suspicious activity and protect against unauthorized access
  • Usage trend analysis: to understand how our Services are used and make data-driven improvements
  • Vital interest protection: to protect your vital interests or those of a third party where necessary

3. WHAT LEGAL BASES DO WE RELY ON?

For Users in the EU, UK, EEA, and Switzerland

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on to process your personal information:

  • Consent: where you have given us permission to process your information for a specific purpose. You may withdraw consent at any time.
  • Performance of a Contract: where processing is necessary to fulfill our contractual obligations to you, such as providing the Services you subscribed to.
  • Legitimate Interests: where processing is necessary for our legitimate business interests (e.g., fraud prevention, security, service improvement), provided those interests are not overridden by your rights.
  • Legal Obligations: where processing is necessary to comply with applicable law.
  • Vital Interests: where processing is necessary to protect your vital interests or those of another person.

For Users in Canada

We may process your information with your express or implied consent. You may withdraw consent at any time by contacting us. In certain exceptional circumstances permitted by law, we may process information without consent, such as when required by a court order, to protect public safety, or as part of a legally authorized investigation.

4. WHEN AND WITH WHOM DO WE SHARE YOUR INFORMATION?

We may share your personal information with the following third-party service providers that help us operate and deliver the Services:

  • OpenAI: powers the AI chat responses. Customer query data may be transmitted to OpenAI for processing. Subject to OpenAI's usage and privacy policies.
  • Resend: transactional email delivery (e.g., account confirmations, password resets, billing receipts).
  • Supabase: database and authentication infrastructure. Your account and usage data is stored on Supabase servers.
  • Stripe: payment processing. Billing information is handled directly by Stripe and subject to their privacy policy.

Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.

We do not sell your personal information to third parties for their own marketing purposes.

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

Yes. We may use cookies and similar tracking technologies (such as web beacons and pixels) to access or store information about your browsing activity on our Services. This helps us maintain your session, remember your preferences, and analyze traffic patterns.

If you are a resident of a US state with applicable opt-out rights (including California, Colorado, Connecticut, Utah, or Virginia), you may have the right to opt out of certain tracking activities. See Section 13 for more information.

6. AI-BASED PRODUCTS

VeloxAssist offers AI-powered features as part of our core Services. These features are built on OpenAI's language models and are used to automatically generate customer support responses on behalf of your store.

When your store's customers interact with the VeloxAssist chat widget:

  • Customer queries and relevant store context are transmitted to OpenAI for response generation.
  • OpenAI processes this data in accordance with their privacy policy and API usage policies.
  • We do not use customer conversation data to train our own models.
  • AI-generated responses may not always be fully accurate; store owners are responsible for configuring and reviewing AI behavior.

If you wish to opt out of AI processing, please contact us at hello@veloxassist.ai. Note that opting out of AI processing will disable the core functionality of the Services.

7. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

Our servers and infrastructure are located in the United States. If you access our Services from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States and potentially other countries where our service providers operate.

If you are located in the EEA, UK, or Switzerland, we rely on appropriate safeguards such as standard contractual clauses approved by the European Commission to facilitate international data transfers. By using our Services, you consent to the transfer of your information to the United States as described in this notice.

8. HOW LONG DO WE KEEP YOUR INFORMATION?

We retain your personal information for as long as you maintain an active account with us, plus any additional period required by law or necessary to resolve disputes and enforce our agreements.

When your account is closed or deleted, we will delete or anonymize your personal information within a reasonable timeframe, unless we are legally required to retain it. Aggregated, anonymized data that cannot reasonably be used to identify you may be retained indefinitely for analytical purposes.

9. HOW DO WE KEEP YOUR INFORMATION SAFE?

We implement appropriate technical and organizational security measures designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include encrypted data transmission (TLS/HTTPS), access controls, and secure infrastructure provided by Supabase.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. You transmit information to us at your own risk. If you become aware of any security breach, please notify us immediately at hello@veloxassist.ai.

10. DO WE COLLECT INFORMATION FROM MINORS?

We do not knowingly collect or solicit personal information from individuals under the age of 18. Our Services are directed to adults only. If you are under 18, please do not use our Services or submit any personal information.

If we learn that we have inadvertently collected personal information from a minor under 18, we will deactivate the account and take reasonable steps to promptly delete such information from our records. If you believe we may have collected information from a minor, please contact us at hello@veloxassist.ai.

11. WHAT ARE YOUR PRIVACY RIGHTS?

For Users in the EEA, UK, and Switzerland

Under applicable data protection law, you have the following rights regarding your personal information:

  • Right of Access: you may request a copy of the personal information we hold about you.
  • Right to Rectification: you may request that we correct inaccurate or incomplete information.
  • Right to Erasure: you may request that we delete your personal information under certain circumstances.
  • Right to Restrict Processing: you may request that we limit how we use your information.
  • Right to Data Portability: you may request a machine-readable copy of your personal information.
  • Right to Object: you may object to our processing of your information where we rely on legitimate interests.
  • Right to Withdraw Consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise these rights, contact us at hello@veloxassist.ai. We will respond to your request within 30 days. You also have the right to lodge a complaint with your local data protection authority.

You may also review and update certain account information by logging into your account settings.

12. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature you can activate to signal your privacy preference. At this time, we do not respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online, as no uniform standard for recognizing and implementing DNT signals has been finalized.

California law requires us to disclose this practice. If a standard for online tracking is adopted that we must follow, we will update this notice accordingly.

13. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

State Privacy Rights

Depending on the state where you reside, you may have specific rights regarding your personal information. These states include California, Colorado, Connecticut, Utah, Virginia, and others with comprehensive privacy laws.

Your rights may include:

  • The right to know whether we are processing your personal data
  • The right to access your personal data
  • The right to correct inaccuracies in your personal data
  • The right to request deletion of your personal data
  • The right to obtain a copy of your personal data
  • The right to non-discrimination for exercising your privacy rights
  • The right to opt out of targeted advertising, the sale of personal data, and profiling in furtherance of decisions that produce legal or similarly significant effects

How to Submit a Request

To exercise your rights, you may submit a verifiable consumer request via:

We will verify your identity before processing your request. We will respond within the timeframe required by your applicable state law.

California Shine the Light

California Civil Code Section 1798.83 ("Shine the Light" law) permits California residents who are our customers to request information about whether we have disclosed personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes. California residents may request this information by contacting us at hello@veloxassist.ai.

14. DO WE MAKE UPDATES TO THIS NOTICE?

Yes. We may update this Privacy Notice from time to time. The updated version will be indicated by a revised date shown at the top of this notice and will be effective as soon as it is accessible.

If we make material changes, we will notify you by sending an email to the address associated with your account before the changes take effect. We encourage you to review this notice periodically to stay informed about how we protect your information.

15. HOW CAN YOU CONTACT US?

If you have questions, comments, or concerns about this Privacy Notice or our privacy practices, please contact us:

VeloxAssist
United States
Email: hello@veloxassist.ai

16. HOW CAN YOU REVIEW, UPDATE, OR DELETE YOUR DATA?

Based on applicable law, you may have the right to request access to, correct, or delete the personal information we collect from you. To submit a data subject access request, please visit:

https://app.termly.io/dsar/9248a849-faa0-4a88-baa9-0a85635f6e25

You may also contact us directly at hello@veloxassist.ai to make a request or ask about your data.

17. PARTNER PROGRAM

The VeloxAssist Partner Program operates through a separate portal at https://partners.veloxassist.ai. When you join the Partner Program, we collect and process the following additional information:

  • Name and email address: used to create and manage your partner account.
  • Referral activity: we track which stores sign up using your referral link, the payments they make, and the commissions you earn.
  • Payout information: bank account and payout details are collected and managed through Stripe Connect to facilitate commission payments. This data is handled by Stripe and subject to Stripe's privacy policy.

Referral Tracking. Referral attribution is handled via a browser cookie named velox_ref. This cookie has a 30-day expiry and is set when a user visits VeloxAssist through your referral link. It is used solely to attribute signups and payments to the correct partner. The cookie follows a first-referral-wins rule and will not overwrite an existing attribution cookie.

Partner activity data is retained for the duration of your partner relationship and for any period required to process payouts, resolve disputes, or comply with applicable law.