Velado
Privacy policy
Last updated: 10 November 2026
Summary
The documents you process with Velado never leave your device and never reach us. The website uses no cookies or trackers; it counts visits in aggregate without identifying anyone. The personal data we process is what you give us in a form or an email, and what is needed to sell and deliver the licence.
Controller
HVR Business Consulting, Lda., Parque das Nações, Lisboa, Portugal, info@velado.app.
The application
The desktop application has no internet access. The browser version (velado.app/app) runs entirely in your browser; the server only delivers the application files and receives no documents, text, vaults or dictionaries. Firm settings (client dictionary, recent vaults, licence key) are stored locally on your device and can be deleted in the application.
The website
velado.app is hosted by Vercel Inc. (servers in the EU and the US), which logs technical access data (IP address, date and time, requested page) for a short period for security and operation. We use no cookies, pixels or third-party audience analytics.
Visit statistics
We count visits to the site to learn which pages are useful, without cookies and without storing your IP address. For each visit we record the page, the referring site, the country (provided by the host), the device type, the language and any campaign (utm) parameters. To count unique visitors we compute an irreversible hash of the IP address and browser, mixed with a random value that changes every day and is deleted after 2 days: visits on different days cannot be linked and the IP cannot be recovered. Legal basis: legitimate interest in improving the site. Records are stored with Supabase (EU servers, Paris) and deleted after 25 months.
Forms (early access and newsletter)
When you fill in a form on the site, we process your email and the details you provide (name, firm, profession, team size, message), the page you came from and campaign parameters, to reply, give you access to the app and, only if you agreed, send Velado news. Legal basis: steps taken at your request before a contract and, for news, your consent, which you can withdraw at any time by writing to us or via the link in each email. Data is stored with Supabase (EU, Paris) for up to 2 years after the last contact, or until you ask us to delete it.
Licence purchases
Purchases are made through Paddle.com Market Ltd (UK), merchant of record, which collects your identification, billing and payment data under Paddle's privacy policy (paddle.com/legal/privacy). We receive from Paddle your name, email, country and plan, which we use to issue the licence key, provide support and meet tax and accounting obligations. We keep this data for the duration of the licence and for the legal retention periods (10 years for accounting records).
Contact
When you write to info@velado.app, we process your name, email and the content of your message to reply, based on our legitimate interest in answering those who contact us. We keep correspondence for up to 2 years after the last contact.
Your rights
You have the right of access, rectification, erasure, restriction, portability and objection, and to lodge a complaint with the Portuguese data protection authority (cnpd.pt). To exercise your rights, write to info@velado.app.
Processors
Vercel Inc. (website hosting), Supabase Inc. (statistics and contact database, hosted in the EU), Paddle.com Market Ltd (payments and invoicing), Microsoft Ireland (email), GitHub Inc. (installer distribution). We do not sell or share data with third parties for marketing.