Privacy Policy

1. Introduction

Veilus ("we", "our", "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use the Veilus application and website (collectively, the "Service").

2. Data We Collect

2.1 Account Data

When you create an account, we collect:

• Email address — for authentication and communication
• Payment information — for card payments, LemonSqueezy (our merchant of record) processes your name, email, and card details directly; we do not store card numbers. For VND bank transfers, our bank sends us the transfer details it receives, including the sender's name and the transfer content.

2.2 Usage Data (Opt-in Only)

If you opt in to telemetry, we collect aggregate, anonymized usage statistics:

• Feature usage frequency (e.g., how often automation is used)
• Application performance metrics (startup time, error rates)
• Operating system and Veilus version

We never collect:

• Browsing history or visited URLs
• Profile contents or fingerprint configurations
• Automation scripts or workflow data
• IP addresses for tracking purposes
• Any personally identifiable information (PII) through telemetry

2.3 Browser Profile Data

All browser profile data (fingerprints, cookies, sessions, automation scripts) is stored locally on your device. If you use Veilus Sync, profile data is synced to a Git repository or Google Drive that you choose — that data is not encrypted by Veilus, so use a private repository or drive. Only the remote access token is encrypted, locally on your device.

3. How We Use Your Data

4. Data Storage & Security

• Local storage: Profile data, scripts, and settings are stored on your local machine.
• Cloud infrastructure: Account data (email, license and order records) is stored in Cloudflare D1.
• Sync: Veilus Sync stores profile data in a Git repository or Google Drive you choose; that data is not encrypted by Veilus. Only the remote access token is encrypted, locally on your device, and never transmitted to our servers. Exporting a profile to a .veiluspack file lets you set an optional password, which encrypts the file with AES-256-GCM.
• Edge hosting: Our website and API run on Cloudflare Workers/Pages with global edge distribution.

5. Third-Party Services

We use the following third-party services:

We do not sell, rent, or share your personal data with third parties for advertising purposes.

6. Your Rights (GDPR & Global)

You have the right to:

• Access your personal data
• Correct inaccurate information
• Delete your account and associated data
• Export your data in a portable format
• Withdraw consent for telemetry at any time
• Object to processing based on legitimate interest

To exercise any of these rights, contact us at privacy@veilus.io.

7. Data Retention

• Active accounts: Data is retained while your account is active.
• Deleted accounts: All personal data is deleted within 30 days of account deletion. Payment records may be retained for up to 7 years for legal and tax compliance.
• Telemetry data: Aggregate analytics are retained for 24 months.

8. Cookies

The Veilus website uses minimal cookies:

• Essential cookies: Session authentication only
• Analytics: We use Google Analytics 4, configured with IP anonymization

We do not use advertising cookies or third-party tracking cookies.

9. Children's Privacy

Veilus is not intended for use by individuals under 16 years of age. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users via email of any material changes at least 14 days before they take effect.

11. Contact

If you have questions about this Privacy Policy:

• Email: privacy@veilus.io
• Website: veilus.io