Privacy Policy

Enterprise Version

Effective Date: May 5, 2026 ยท Company: Veluro.ai

1. Overview

Veluro.ai ("Veluro," "we," "our," or "us") provides an AI-powered demand generation and business optimization platform. We process personal data in compliance with: - General Data Protection Regulation (GDPR) - California Consumer Privacy Act (CCPA/CPRA) - Other applicable global data protection laws

2. Categories of Data Collected

**A. Identifiers** Name, email, phone, IP address, company details **B. Commercial Data** Billing info, subscription details, transaction history **C. Behavioral & Intent Data** - Website activity - Ad engagement - Purchase intent signals - Device and browsing behavior **D. User-Generated Data** - CRM data - Leads and contacts - Campaign content - Uploaded files **E. Inferred Data** - Buying intent scores - Audience segmentation - Predictive analytics

3. Sources of Data

- Direct user input - Third-party integrations (Meta, Google, LinkedIn) - High-intent data providers - Cookies, pixels, tracking technologies - Public and commercial datasets

4. Legal Basis for Processing (GDPR)

We process data under: - Contractual necessity - Legitimate interest (marketing optimization, fraud prevention) - Consent (where required) - Legal obligations

5. How We Use Data

- Deliver and operate Veluro - Identify high-intent buyers - Build and optimize campaigns - Automate marketing and communications - Improve platform performance - Detect fraud and enforce security

6. AI & Automated Decision-Making

Veluro uses AI to: - Predict buyer intent - Automate marketing execution - Provide recommendations and insights **Important** - AI outputs are probabilistic, not guaranteed - Users are responsible for review before execution - Veluro does not make legally binding decisions on your behalf

7. Data Sharing

We may share data with: - Cloud providers (hosting, infrastructure) - Payment processors - Advertising platforms - Analytics tools **We do not sell personal data.**

8. Lead Data from Advertising Platforms

When you run lead generation campaigns through Veluro (including Meta/Facebook Instant Forms, Google, LinkedIn, or TikTok lead ads), we collect and process lead submissions on your behalf, which may include the lead's name, email address, phone number, company, and answers to custom form questions. **How lead data is used** - Delivered into your Veluro CRM so you can view, manage, and respond to your leads - Used to trigger follow-up communications (email/SMS nurture sequences) that you configure - Never used by Veluro for its own marketing, never enriched for other customers, and never sold **Retrieval & storage** - Lead data from Meta is retrieved via the Meta Graph API (leads_retrieval) and real-time webhooks, solely for the account owner who ran the campaign - Lead data is stored encrypted in transit and at rest **Retention & deletion** - Lead data is retained while your account is active or until you delete it - You may delete individual leads at any time from your CRM, or request full deletion via privacy@veluro.ai or our Data Deletion page - When you disconnect an ad platform integration, Veluro stops retrieving new lead data from that platform immediately **Lead rights** Individuals who submitted a lead form may contact privacy@veluro.ai to request access to or deletion of their data; we will coordinate with the relevant account owner to fulfill the request.

9. International Transfers

Data may be transferred outside your jurisdiction with safeguards such as: - Standard Contractual Clauses (SCCs) - Data processing agreements

10. Data Retention

We retain data only as long as necessary for: - Service delivery - Legal compliance - Business operations

11. Your Rights

**Under GDPR** - Access - Rectification - Erasure - Restriction - Data portability - Objection **Under CCPA/CPRA** - Right to know - Right to delete - Right to opt-out of sale/share - Right to non-discrimination ๐Ÿ“ง privacy@veluro.ai

12. Security

We implement: - Encryption - Access control - Monitoring systems No system is completely secure.

13. Children

Not intended for users under 18.

14. Updates

We may update this policy periodically.