Privacy Policy

1. What data we collect and why

We collect and process personal data solely in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR).

• Contact form and onboarding: name, email address, company name, industry, business description, and any other information you voluntarily provide. This data is sent to us by email and fed into our system so the AI assistant can use the specific information about your business. Legal basis: Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(a) GDPR (consent).
• Platform usage data: when you use our SaaS platform, technical data is automatically collected: IP address, browser type, operating system, date and time of access, and pages visited. This data is used for the technical provision and security of the services. Legal basis: Art. 6(1)(f) GDPR (legitimate interests).
• Email communication: when you contact us by email, we store your email address and the content of the message to process your request. Legal basis: Art. 6(1)(b) GDPR.

2. Disclosure to third parties and processors

We only share your data with third parties where necessary for the performance of the contract or where you have given your express consent. We use the following service providers:

• Anthropic, PBC (AI processing): our AI assistant is powered by technology from Anthropic, PBC, 548 Market St, San Francisco, CA 94104, USA. Data is transmitted to the Anthropic API solely for the purpose of providing the service. A Data Processing Agreement (DPA) is in place with Anthropic. Further information: https://www.anthropic.com/privacy
• Stripe, Inc. (payment processing): payments are processed via Stripe, Inc., 510 Townsend Street, San Francisco, CA 94103, USA. Stripe collects and processes payment data under its own responsibility. Further information: https://stripe.com/privacy
• Vercel, Inc. (hosting and infrastructure): our platform is hosted on the infrastructure of Vercel, Inc., 340 Pine Street Suite 701, San Francisco, CA 94104, USA. Data centres are located in the EU (Frankfurt). Further information: https://vercel.com/legal/privacy-policy
• Google Ireland Limited / Google LLC (web analytics): we use Google Analytics 4 to measure website usage, analyse traffic and improve our service. Measurement is configured with IP anonymisation enabled. You can prevent measurement through your browser settings, blocking extensions or available privacy options. Further information: https://policies.google.com/privacy
• All US-based providers listed above offer appropriate safeguards pursuant to Art. 46 GDPR (EU Standard Contractual Clauses).

3. Retention periods

We store personal data only for as long as necessary for the respective purpose or as required by law (generally 6–10 years for tax-relevant data). Data from contact forms is deleted after the request has been processed or after the contractual relationship has ended.

4. Your rights as a data subject

You have the following rights under the GDPR. To exercise them, please contact: admin@getvelqia.com

• Right of access (Art. 15 GDPR): you may request information about the data we hold about you.
• Right to rectification (Art. 16 GDPR): you may request correction of inaccurate data.
• Right to erasure (Art. 17 GDPR): you may request deletion of your data, subject to legal retention obligations.
• Right to restriction (Art. 18 GDPR): you may request restriction of processing.
• Right to data portability (Art. 20 GDPR): you may receive your data in a common machine-readable format.
• Right to object (Art. 21 GDPR): you may object to processing based on legitimate interests.
• Right to withdraw consent (Art. 7(3) GDPR): any consent given may be withdrawn at any time with effect for the future.

5. Right to lodge a complaint

You have the right to lodge a complaint with the competent supervisory authority. The authority responsible for Velqia GbR is:

Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI) Ludwig-Erhard-Str. 22, 20459 Hamburg www.datenschutz.hamburg.de

6. Cookies and tracking

Our website uses technically necessary cookies required for the operation of the platform. These cookies do not require consent. We also use Google Analytics 4 to measure website usage and improve our service, but only after you have given your consent. Google Analytics may use cookies or similar technologies. Measurement is configured with IP anonymisation enabled. You can withdraw or prevent analytics tracking through your browser settings, blocking extensions or available privacy options.

7. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy as needed. The current version is always available at www.getvelqia.com. Registered users will be notified by email of material changes.