Privacy Policy

Who this covers

Velantia is built and run by one person. This policy covers this website and the app at app.velantia.app — the same product, one policy.

What we collect

When you create an account, we store the email address and password you sign up with. Passwords are handled by our authentication provider, Supabase — we never see or store your password as plain text.

When you set up your store, we store the web address you give us, the name you call your store, what you sell, how your site is built (for example Shopify or something custom), and who makes changes to it. We use these to decide what a fix should look like for your specific site.

Each time you run a check, we store the result: your scores, the technical findings about your site, the questions we asked an AI assistant on your behalf and what it answered, and the list of fixes we generated. If you join the waitlist instead of signing up, we store the email address and any note you leave.

Who we send it to

Running a check means asking a few outside services to do the parts we can't do ourselves. Here's exactly what each one receives:

• Your website itself. Our server fetches the page you submit directly, the same way a browser would, to read what's on it.
• Google PageSpeed Insights. Receives the web address you submit, to measure how fast your site loads on mobile.
• Anthropic. Receives your store's name and what you sell — not your web address — used to write the shopping questions we ask and to pull competitor names out of the answers.
• Perplexity. Receives only the shopping questions we generate, such as "what's a good soy candle brand for a gift." Your store's name and web address are deliberately left out of these questions — asking an AI assistant about you by name would prove nothing about whether it would say your name unprompted.
• Serper, a Google search API. Receives generic category search phrases, such as "best soy candles," used to check where your site ranks and whether it turns up as a recommended brand. Your store's name and web address are not sent to Serper.

We don't sell any of this. Supabase hosts our database and handles sign-in, so it holds everything described above as our infrastructure provider — it isn't a service we send data to for a specific purpose the way the four above are.

Cookies and local storage

Staying signed in works through your browser's local storage, not a cookie — that's how our authentication provider, Supabase, keeps your session. We don't set tracking or advertising cookies of any kind.

How long we keep it

We keep your account and check history for as long as your account exists. There's no automatic deletion yet. If you want your account or data removed, emailzacharystevens009@gmail.comand it will be handled by hand.

What we don't claim

Velantia doesn't claim compliance with GDPR, CCPA, or any other privacy law. We haven't built the tooling those require — automated data export, a formal deletion process, consent management — so we're not going to say we have.

Governing law

PLACEHOLDER_LEGAL

Changes to this policy

If what we collect or who we send it to changes, we'll update this page and change the date at the top.

Questions

Email zacharystevens009@gmail.comor see the contact page.