Privacy Policy

1. Introduction

Velar ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our static site deployment platform, CLI tools, and related services (collectively, the "Service").

2. Information We Collect

Account Information

When you create an account, we collect your email address and a hashed version of your password. We never store passwords in plain text.

Deployment Data

When you deploy a site, we store the files you upload, deployment metadata (timestamps, file counts, sizes), and project configuration. Your deployed files are stored in secure cloud storage and served via our global edge network.

Usage Data

We automatically collect certain information about your use of the Service, including IP addresses, browser type, operating system, referring URLs, pages visited, and timestamps. This data helps us improve the Service and diagnose issues.

CLI Data

When you use the Velar CLI, we collect authentication tokens and deployment commands. The CLI communicates with our API over HTTPS. We do not collect or transmit any files from your system other than those explicitly deployed.

3. How We Use Your Information

• To provide and maintain the Service
• To authenticate your identity and authorize access
• To process and serve your deployed sites
• To send you important updates about the Service
• To monitor and analyze usage patterns to improve performance
• To detect, prevent, and address technical issues and abuse
• To comply with legal obligations

4. Data Storage & Security

Your data is stored using industry-standard cloud infrastructure. We use encryption in transit (TLS/HTTPS) and at rest. Authentication tokens are generated using cryptographically secure methods and stored securely.

Deployed files are stored in Vercel Blob Storage and distributed across our global edge network. We implement access controls to ensure only authorized users can manage their deployments.

5. Data Sharing

We do not sell, rent, or trade your personal information. We may share data with:

• Infrastructure providers: We use Vercel, Neon (PostgreSQL), and other cloud services to host and operate the platform
• Legal requirements: When required by law, subpoena, or legal process
• Safety: To protect the rights, property, or safety of Velar, our users, or the public

6. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Export your deployment data
• Withdraw consent for optional data processing

7. Cookies

We use essential cookies for authentication (session tokens stored as httpOnly cookies). We do not use tracking cookies or third-party advertising cookies. Our session cookies are strictly necessary for the Service to function.

8. Data Retention

We retain your account information as long as your account is active. Deployment data is retained until you delete it or your account. When you delete your account, we remove your personal data and deployment files within 30 days based on our backup rotation schedule.

9. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at privacy@velardev.app.