Privacy Policy

This Privacy Policy explains how Vellocity LLC, trading as Vellocity (“Vellocity,” “we,” “us,” or “our”), collects, uses, discloses, retains, and protects personal information.

Vellocity provides offer strategy, pricing, packaging, positioning, copywriting, and related consulting services to business customers.

Our website is located at https://vellocity.xyz/ (the “Site”).

For privacy questions, complaints, or requests, contact: hello@vellocity.xyz

This Privacy Policy applies to personal information processed through:

• the Site;
• contact and application forms;
• purchases and payment processing;
• sales, onboarding, and client communications;
• questionnaires, meetings, and working sessions;
• service delivery;
• email and other business communications; and
• related Vellocity services.

This Policy does not govern third-party websites, platforms, or services that maintain their own privacy policies.

Vellocity’s services are designed exclusively for businesses and their authorized representatives. They are not intended for personal, family, or household use.

If you provide information on behalf of a company or another person, you represent that:

• you are authorized to provide it;
• providing it does not violate another person’s rights;
• any required privacy notice has been given; and
• any required permission or consent has been obtained.

4.1 Information You Provide

We may collect information you submit directly, including:

• name;
• business email address;
• telephone number, if provided;
• company name and website;
• job title or business role;
• approximate annual business revenue;
• information about products, services, pricing, customers, positioning, delivery models, and business operations;
• descriptions of current offers and commercial challenges;
• information included in enquiries, applications, questionnaires, emails, meetings, and support requests;
• documents, presentations, recordings, notes, customer research, testimonials, commercial data, and other engagement materials;
• feedback, approvals, revision requests, complaints, and guarantee claims; and
• information necessary to administer contracts, invoices, payments, security investigations, and disputes.

Please do not provide highly sensitive personal information unless Vellocity specifically requests it and it is genuinely necessary.

Do not submit:

• passwords;
• complete payment-card numbers;
• government identification numbers;
• health information;
• biometric information;
• private authentication credentials; or
• unrelated personal information.

4.2 Payment and Transaction Information

Payments are processed through Stripe or another payment provider identified during checkout.

Payment providers may collect:

• payment-card information;
• cardholder and billing details;
• transaction identifiers;
• country or region;
• payment status;
• device information;
• authentication information; and
• fraud-prevention and security signals.

Vellocity generally receives transaction information such as:

• name;
• email address;
• billing details;
• amount;
• currency;
• payment status; and
• transaction identifier.

Vellocity does not ordinarily receive or store complete payment-card numbers. Payment providers process certain information under their own privacy policies, contractual terms, fraud-prevention requirements, and legal obligations.

4.3 Technical and Usage Information

When you visit the Site, Vellocity and its service providers may automatically collect:

• IP address;
• browser and device information;
• operating system;
• referring and exit pages;
• pages viewed;
• interactions with the Site;
• approximate location derived from IP address;
• date, time, and duration of visits;
• cookie and similar technology identifiers;
• diagnostic and performance information;
• checkout and form-interaction information; and
• security, bot-detection, and fraud-prevention signals.

4.4 Information From Other Sources

We may receive information from:

• your company;
• your colleagues or authorized representatives;
• payment processors;
• website and infrastructure providers;
• referral partners;
• publicly available company websites;
• public professional profiles;
• communications platforms;
• fraud-prevention providers; and
• legal or compliance sources.

Where permitted, we may combine this information with information collected directly from you.

We may use personal information to:

• respond to enquiries and applications;
• determine whether Vellocity’s services are suitable for a prospective client;
• verify identity, authority, and business eligibility;
• prepare proposals and enter into contracts;
• process payments and maintain transaction records;
• schedule and administer engagements;
• analyze and rebuild client offers, pricing, packaging, positioning, and copy;
• communicate with clients and their representatives;
• provide deliverables, support, and revisions;
• administer the Vellocity Better Offer Guarantee;
• investigate complaints, suspected abuse, or refund claims;
• identify duplicate, false, abusive, or fraudulent submissions;
• maintain, secure, troubleshoot, and improve the Site;
• detect fraud, payment abuse, security incidents, and unauthorized activity;
• enforce our agreements and protect legal rights;
• keep financial, tax, compliance, and business records;
• establish, exercise, or defend legal claims;
• comply with applicable laws and lawful requests;
• send service-related communications;
• send business marketing where legally permitted; and
• generate aggregated or de-identified insights that do not identify a person or disclose client confidential information.

We will not use personal information for a materially incompatible purpose without providing any notice or obtaining any consent required by law.

Where the EU GDPR, UK GDPR, or similar law applies, Vellocity relies on one or more of the following legal bases.

Contract and Pre-Contractual Steps

Processing may be necessary to:

• respond to a request for services;
• evaluate an application;
• enter into or perform a contract;
• process payment;
• deliver services;
• administer revisions;
• investigate complaints; or
• administer contractual guarantee rights.

Legitimate Interests

Vellocity may process information for legitimate interests including:

• operating and improving its business;
• communicating with business contacts;
• protecting the Site, systems, clients, and legal rights;
• verifying eligibility and authority;
• preventing fraud, chargeback abuse, and misuse;
• keeping proportionate business records;
• evaluating service performance;
• resolving disputes; and
• conducting proportionate business-to-business marketing.

We consider the potential effect on individuals before relying on legitimate interests.

Legal Obligations

We may process information where necessary to comply with:

• tax and accounting obligations;
• regulatory requirements;
• court orders;
• legal process;
• payment and financial-record obligations; and
• other applicable laws.

Consent

We rely on consent where required, including for certain non-essential cookies, analytics technologies, marketing communications, or optional data uses. Consent may be withdrawn at any time. Withdrawal does not affect processing that lawfully occurred before withdrawal.

Legal Claims

We may process and retain information where reasonably necessary to establish, exercise, investigate, settle, or defend legal claims.

The Site may use cookies, pixels, scripts, local storage, and similar technologies for:

• essential Site operation;
• checkout and payment processing;
• security and fraud prevention;
• remembering preferences;
• performance measurement;
• analytics; and
• marketing, if enabled.

Essential technologies may operate without consent where permitted by law. Where consent is legally required, Vellocity will request consent before activating non-essential analytics or marketing technologies.

You may manage cookies through the Site’s consent controls, where available, and browser or device settings. Blocking essential technologies may prevent portions of the Site, forms, or checkout from working properly.

Service Providers

Providers that assist with:

• payment processing, including Stripe;
• website building, deployment, infrastructure, or hosting, including Lovable;
• cloud storage;
• email and communications;
• scheduling and videoconferencing;
• document collaboration;
• analytics and performance;
• security and fraud detection;
• accounting and bookkeeping; and
• service delivery.

Providers may process information only for authorized purposes, subject to appropriate contractual restrictions where required.

Professional Advisers

We may disclose information to:

• lawyers;
• accountants;
• auditors;
• insurers;
• tax advisers;
• financial advisers; and
• other professional consultants.

Legal and Safety Disclosures

We may disclose information where reasonably necessary to:

• comply with law, legal process, or lawful government requests;
• enforce our agreements;
• investigate fraud, abuse, chargebacks, or security incidents;
• protect Vellocity, clients, or other persons;
• prevent reasonably suspected unlawful conduct;
• establish or defend legal claims; or
• respond to an emergency involving safety or security.

Corporate Transactions

Information may be disclosed in connection with:

• a merger;
• acquisition;
• investment;
• financing;
• restructuring;
• sale of assets;
• insolvency proceeding; or
• similar business transaction.

Appropriate confidentiality and legal safeguards will be used where required.

At Your Direction

We may disclose information when you request, authorize, or reasonably expect disclosure as part of an engagement.

Clients may provide materials containing personal information about employees, customers, prospects, contractors, or other individuals. The client is responsible for:

• determining whether the information is necessary;
• ensuring its collection and disclosure are lawful;
• providing required privacy notices;
• obtaining required permission or consent;
• minimizing or anonymizing information where possible;
• ensuring the information is accurate;
• avoiding disclosure of unnecessary sensitive information; and
• responding to individuals whose information the client controls.

Where Vellocity processes personal information solely on a client’s documented instructions, the client generally acts as controller or business and Vellocity acts as processor or service provider. The parties will enter into a data processing agreement where legally required.

Vellocity and its providers may process information outside the country in which the affected person is located.

Where required, Vellocity will use recognized safeguards such as:

• adequacy decisions;
• European Commission Standard Contractual Clauses;
• the UK International Data Transfer Addendum;
• contractual, technical, and organizational safeguards; or
• another legally recognized transfer mechanism.

You may contact hello@vellocity.xyz for information about applicable safeguards.

Vellocity retains personal information only for as long as reasonably necessary for the purposes described in this Policy. Retention is determined by:

• the duration of the business relationship;
• contractual requirements;
• tax and accounting obligations;
• applicable limitation periods;
• fraud and security risks;
• ongoing or anticipated disputes;
• legal holds; and
• operational necessity.

Unless a longer period is required or justified:

• unsuccessful enquiries and applications may be retained for up to 24 months after the last substantive interaction;
• client engagement records and deliverables may be retained for the engagement and up to seven years afterward;
• contracts, invoices, and payment records are retained for the legally required tax and accounting period;
• security and technical logs are retained for a proportionate period;
• complaints, guarantee claims, chargeback evidence, and dispute records may be retained until relevant limitation periods expire;
• fraud-prevention records may be retained for as long as reasonably necessary to prevent repeat abuse; and
• marketing information is retained until opt-out or until it is no longer useful.

Limited suppression information may be retained after an opt-out to ensure the request continues to be honored. Aggregated or irreversibly de-identified information may be retained without these limits.

Vellocity uses reasonable administrative, contractual, technical, and organizational measures designed to protect personal information. These measures may include:

• access controls;
• restricted provider access;
• secure payment processing;
• confidentiality obligations;
• account-security controls;
• software and infrastructure protections; and
• incident investigation procedures.

No internet transmission, system, or storage method is completely secure. Vellocity cannot guarantee absolute security.

You are responsible for:

• using secure methods when sending confidential materials;
• limiting information to what is necessary;
• protecting your accounts and credentials;
• maintaining backup copies of important materials; and
• notifying Vellocity promptly of suspected unauthorized disclosure.

Depending on your location and applicable law, you may have the right to confirm whether Vellocity processes your information; access personal information; correct inaccurate information; request deletion; restrict processing; object to certain processing; obtain portable information; withdraw consent; opt out of direct marketing; opt out of sale, sharing, targeted advertising, or qualifying profiling; limit certain uses of sensitive personal information; appeal a privacy-request decision; and complain to a competent privacy authority.

Rights may be subject to legal exceptions. Vellocity may retain information required for legal compliance, transaction records, fraud prevention, security, contract enforcement, or legal claims.

To exercise a right, email hello@vellocity.xyz with the subject line “Privacy Request”. Vellocity may request information reasonably necessary to verify identity, jurisdiction, the information concerned, and an agent’s authority. Vellocity will not discriminate against a person for exercising a legally protected privacy right.

EEA residents may complain to their local data-protection authority. UK residents may complain to the Information Commissioner’s Office.

This section applies only where a U.S. state privacy law applies to Vellocity and the information concerned.

During the preceding 12 months, Vellocity may have collected:

• identifiers;
• customer-record information;
• commercial and transaction information;
• internet or electronic activity;
• approximate geolocation;
• professional or employment-related information;
• correspondence and client-provided content; and
• inferences used to evaluate business-service suitability.

These categories may be disclosed for business purposes to service providers, payment processors, professional advisers, security providers, corporate-transaction recipients, and legal or regulatory recipients.

As of the Effective Date, Vellocity does not sell personal information for money and does not use personal information for cross-context behavioral advertising. If these practices change, Vellocity will update this Policy and provide any legally required opt-out mechanism. Vellocity does not knowingly sell or share personal information belonging to individuals under 18.

Where applicable, U.S. residents may request access, correction, deletion, portability, information about disclosures, an opt-out of covered processing, or an appeal of a denied request.

You may opt out of marketing emails by using the unsubscribe link or emailing hello@vellocity.xyz. After opting out of marketing, you may continue to receive communications concerning an enquiry or application, an active engagement, payment or invoices, deliverables, security, disputes, legal notices, or another existing business relationship.

Vellocity does not currently use personal information to make solely automated decisions that produce legal or similarly significant effects. Ordinary automation may be used to route enquiries, detect spam, assess security signals, identify duplicate submissions, prevent fraud, or support business administration.

The Site and services are not directed to individuals under 18. Vellocity does not knowingly collect personal information from children. If you believe a child has provided information, contact hello@vellocity.xyz.

The Site may link to services such as LinkedIn, Stripe, and other platforms. Vellocity is not responsible for third-party privacy practices, security, availability, content, or contractual terms. Review the relevant third-party policies before providing information.

Vellocity may update this Policy to reflect changes in services, providers, business practices, security measures, or legal obligations. The updated version will be posted with a revised “Last updated” date. Additional notice or consent will be provided where legally required.