Privacy policy
What we collect, why, and what you can ask us to do with it.
- Last updated: October 29, 2026
- Applies to velosyd.com and our services
The short version
We collect what we need to answer you, run projects and keep the Site working. We do not sell personal data. Optional analytics and advertising cookies load only with your consent where the law requires it. You can ask what we hold about you, correct it or have it deleted at any time by writing to [email protected].
1. Who is responsible
The data controller is Velosyd LLC, [POSTAL ADDRESS, to confirm], United States ("Velosyd", "we"). We have not appointed a data protection officer; privacy questions go to [email protected]. Our representative in the European Union and the United Kingdom can be reached through [email protected].
2. What we collect
| When | What | Why |
|---|---|---|
| You fill in the contact form or email us | Name, email, company or business name, the service, timing and budget range you selected, what you wrote, and how you reached the Site (campaign and referrer) | To reply and prepare a proposal. Each submission also goes through an automated spam check, run by a language model through OpenRouter |
| You use the Ask AI assistant | The messages you type, the answers given, the page you were on, and your name, email and company if you share them | To answer your questions and send the team a summary of your project |
| You book a call | Name, email, the time you chose and your time zone | To hold the call on Google Meet |
| You become a customer | Contract and billing details, project communications, access credentials you grant us | To deliver and invoice the project |
| You browse the Site | Technical data such as IP address, browser, pages visited and approximate country; with your consent, the cookies described in the Cookie policy | To keep the Site secure and understand how it is used |
3. Why we are allowed to use it
Where the GDPR or UK GDPR applies, we rely on: steps taken at your request before a contract, and performance of a contract (replying to inquiries, running projects); our legitimate interest in answering and following up business inquiries and in running and securing the Site; your consent for non-essential cookies, which you can withdraw at any time from the Cookie policy page or the "Cookie settings" link in the footer; and legal obligations for tax and accounting records.
4. The Ask AI assistant and AI providers
The assistant always says it is an AI. Your messages are sent to OpenRouter, which routes them to third-party language model providers with training data collection turned off. OpenAI moderation checks each message for abuse. Please do not share sensitive personal information (health data, financial account numbers, identification documents) in the chat; it is not needed to answer questions about our Services.
5. Trackers on this Site
With your consent where required, the Site uses Google Analytics, Google Ads with enhanced conversions, Ahrefs Analytics, Microsoft Clarity and the HubSpot tracking code. Visitors from the European Union, Iceland, Liechtenstein, Norway, the United Kingdom and Switzerland, and visitors whose country cannot be determined, see a cookie banner, and none of these trackers loads before "Accept all" or a saved preference. Details and the switches are on the Cookie policy page.
7. International transfers
Velosyd LLC is a United States company, and our service providers store data mainly in the United States. When data from the European Union or the United Kingdom is transferred, we rely on Standard Contractual Clauses. A copy of the relevant clauses is available on request.
8. How long we keep it
- Messages that do not lead to work: two years.
- Ask AI conversations: deleted from the Site 6 hours after the last message. Anything that identifies you is saved in our CRM under the two-year rule.
- Records tied to paid work: as long as tax and accounting rules require.
- Server logs with IP address and browser: thirty days.
- Analytics data: as set out in the Cookie policy.
9. Your data during a project
Data you give us during a project is used only for the agreed work, under the non-disclosure agreement. Credentials are kept in a password manager and revoked at the end. Your data is never used to train a model and never copied outside your infrastructure without your written agreement.
10. Your rights
Depending on where you live, you can ask us to: access the personal data we hold about you; correct it; delete it; restrict or object to how we use it; receive it in a portable format; and withdraw consent. If you are in California, you also have the right to know, delete and correct, and the right not to be discriminated against for exercising these rights. We do not sell or share personal information as defined by the CCPA. To exercise any right, email [email protected]. We handle requests in writing, normally the same working day and always within thirty days. You may also complain to your local data protection authority.
11. Security
We use encryption in transit, access controls and the principle of least privilege. No system is perfectly secure; if a breach affects your data, we notify you and the relevant authorities as the law requires.
12. Children
The Site and the Services are for businesses and are not directed at children under 16. We do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.
13. Changes to this policy
We may update this policy as the Site and the Services change. The date at the top shows the current version; for significant changes we notify customers by email.