Privacy Policy

Velocity is run by Sutrixa International [PLACEHOLDER: Pvt. Ltd. / LLP], [PLACEHOLDER: registered office address], India (“Sutrixa International”, “we”). For your account details, we decide how personal data is used: we are the data fiduciary under India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and the controller under the EU and UK General Data Protection Regulation (GDPR). For personal data you put into your workspace, such as leads and contacts, you are the fiduciary or controller and we act as your processor (see section 4).

• Account data: name, email address, password (stored only as a one-way hash), role and the workspace you belong to.
• Billing data: billing country, plan and subscription status. Card and UPI details are collected by Stripe or Razorpay, never by us.
• Workspace content: brand profile, research, drafts, posts, videos, leads, outreach emails and replies, reports, and tokens for the accounts you connect (stored encrypted).
• Usage and technical data: sign-in times, IP address (used for security and rate limits), an audit log of actions in your workspace, and server logs.

• To provide the Service you signed up for: running your workspace, sending account emails (confirming your address, password resets), reports and alerts. Basis: performing our contract with you (GDPR art. 6(1)(b)); your consent and legitimate uses under sections 6 and 7 of the DPDP Act.
• To bill you and keep tax records. Basis: contract and legal obligation.
• To keep the Service secure and prevent abuse. Basis: legitimate interests and legal obligation.
• To improve the Service using aggregated usage. Basis: legitimate interests. We do not sell personal data and we do not use your workspace content to train AI models.

Where we rely on consent, you can withdraw it at any time by writing to [PLACEHOLDER: privacy@your-domain]; this does not affect what was done before.

When Velocity finds leads or sends outreach for you, it handles business contact details on your instructions. You are responsible for having a lawful basis to collect and contact those people, for honouring their opt-out requests, and for answering their rights requests. We help you do so and process this data only to provide the Service to you. The Service uses official APIs and public business information; it does not scrape personal social media profiles.

We share data with these providers only as needed to run the Service, under contracts that require them to protect it:

Only if switched on for the Service: Voyage AI (search over your workspace memory), Hunter (finding and checking business email addresses), ElevenLabs (voiceover, instead of google).

We may also disclose data where the law requires, or to protect rights and safety. If we are part of a merger or sale, data may pass to the new owner under this policy.

We are based in India and several providers process data in the United States and elsewhere. Transfers out of India follow the DPDP Act and any restrictions the Indian government notifies. For personal data from the EU or UK, we rely on adequacy decisions or the European Commission’s Standard Contractual Clauses (and the UK addendum) with our providers.

• Account and workspace data: while your account is active, and up to 30 days after you close it or your workspace is deleted, so you can ask for an export.
• Business details that come from Google Places (name, address, phone): deleted after 30 days; the place ID and the business’s website address stay.
• Billing and tax records: as long as Indian tax law requires (generally 8 years).
• Security logs and backups: up to [PLACEHOLDER: 90] days, then overwritten.

Data is encrypted in transit (HTTPS) and connected-account tokens are encrypted at rest. Passwords are hashed. Access within Sutrixa International is limited to staff who need it, and actions are logged. No system is perfectly secure; if a personal data breach affects you, we will tell you and the authorities as the DPDP Act and GDPR require.

Depending on where you live, you have the right to:

• access a summary of the personal data we hold about you;
• correct, complete or update it;
• have it erased;
• withdraw consent, object to or restrict some uses, and (under GDPR) receive your data in a portable format;
• nominate someone to exercise your rights if you die or become unable to (DPDP Act);
• have a grievance addressed by us, and then complain to the Data Protection Board of India or, in the EU or UK, your local data protection authority.

Write to [PLACEHOLDER: privacy@your-domain]. We answer within 30 days. You can change your name and password in the app at any time.

We use only the cookies needed to keep you signed in and secure. We do not use advertising cookies or third-party trackers on this site. If that changes, we will update this policy and ask for consent where required.

Velocity is a business tool for people aged 18 and over. We do not knowingly collect children’s data; if you think we have, contact us and we will delete it.

We will post changes here and, for material ones, tell you by email or in the app before they take effect.

Privacy questions: [PLACEHOLDER: privacy@your-domain]. Grievance officer (DPDP Act and IT Rules): [PLACEHOLDER: name], [PLACEHOLDER: grievance@your-domain]. Post: Sutrixa International [PLACEHOLDER: Pvt. Ltd. / LLP], [PLACEHOLDER: registered office address], India. See also our Terms of Service.