Legal

Privacy Policy

Effective date: January 1, 2026  ·  Last updated: July 1, 2026

Vela ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services. Please read this policy carefully. If you disagree with its terms, please discontinue use of our services.

1. Information we collect

Information you provide directly

When you create an account and use Vela, we collect information you provide, including:

  • Account information: your name, email address, and password when you register.
  • Company information: your company name, industry, and business description entered during onboarding.
  • Repository content: brand voice descriptions, product knowledge, audience persona details, compliance rules, and any documents you upload (brand guides, product docs, past campaigns).
  • Campaign data: briefs you submit, campaigns generated, edits you make, and any feedback signals (ratings, approvals, deployment status).
  • Payment information: billing details processed through Stripe. We do not store your payment card information on our servers.
  • Communications: emails or messages you send us directly.

Information collected automatically

When you use Vela, we automatically collect certain usage data, including:

  • Usage events: pages visited, features used, campaigns generated, and actions taken within the platform. Collected via PostHog analytics.
  • Device and browser information: browser type, operating system, IP address, and device identifiers.
  • Log data: server logs including request timestamps, error logs, and performance data.

2. How we use your information

We use the information we collect to:

  • Provide, operate, and improve the Vela platform and its features.
  • Generate AI-powered campaign content using your repository context.
  • Process payments and manage your subscription through Stripe.
  • Send transactional emails (account confirmation, password reset, billing receipts) via Resend.
  • Send product updates, usage tips, and campaign prompts where you have opted in.
  • Analyze platform usage to improve features and fix issues.
  • Respond to your support requests and communications.
  • Enforce our Terms of Service and protect against fraud or misuse.

3. Your data is never used to train AI models

This is a hard commitment, not a feature toggle. Your repository content — brand guides, product documents, persona definitions, past campaigns, and all data you provide during onboarding — is never used to train any shared AI model, including the models Vela uses for campaign generation. Your data is processed solely within the scope of delivering the service to your account.

Campaign generation calls are made to the Anthropic Claude API. Anthropic's API usage policies also prohibit training on API-submitted data. Your content does not leave your isolated account context.

4. How we share your information

We do not sell your personal data. We share information only with the following categories of service providers who help us operate the platform:

  • Supabase — database, authentication, and file storage. Your repository data and account information are stored on Supabase's infrastructure (AWS us-east-1).
  • Anthropic — AI generation API. Campaign generation requests include your repository context assembled server-side. Anthropic does not retain this data for training.
  • Stripe — payment processing. We share billing information necessary to process your subscription payments.
  • Resend — transactional email delivery. We share your email address to send account and billing communications.
  • PostHog — product analytics. Usage events are collected to help us understand how the platform is used and improve it.
  • Vercel — frontend hosting and edge functions.

We may also disclose information if required by law, court order, or government authority, or to protect the rights, property, or safety of Vela, our users, or the public.

5. Data retention

We retain your account data and repository content for as long as your account is active. If you cancel your subscription, your data is retained for 90 days in case you wish to reactivate, after which it is permanently deleted from our systems.

You may request deletion of your account and all associated data at any time by emailing privacy@getvela.io. We will complete the deletion within 30 days of receiving your request.

6. Data security

We implement appropriate technical and organizational measures to protect your information, including encryption at rest (AES-256), encryption in transit (TLS 1.3), row-level security policies in our database, and access controls limiting which employees can access customer data. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Cookies

We use cookies and similar tracking technologies to maintain your session (authentication cookies), remember your preferences, and collect analytics data. You can control cookies through your browser settings. Disabling cookies may affect your ability to use certain features of the platform, including staying logged in.

8. Your rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: request a copy of the data we hold about you.
  • Correction: request correction of inaccurate or incomplete data.
  • Deletion: request deletion of your personal data.
  • Portability: request your data in a machine-readable format.
  • Objection: object to processing of your data for certain purposes.
  • Opt-out of marketing: unsubscribe from marketing emails at any time via the link in any email we send.

To exercise any of these rights, contact us at privacy@getvela.io. We will respond within 30 days.

9. Children's privacy

Vela is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a person under 18, we will delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email and by posting the updated policy with a new effective date. Continued use of the platform after the effective date constitutes acceptance of the revised policy.

11. Contact

If you have questions about this Privacy Policy or how we handle your data, contact us at:

Vela
Email: privacy@getvela.io
Glassboro, NJ, United States