Privacy Policy

This Privacy Notice for Velaaa (doing business as Kuchai Studio Limited) ('we', 'us', or 'our') describes how and why we might access, collect, store, use, and/or share your personal information when you use our services, including when you:

• Visit our website at velaaa.com or any website of ours that links to this Privacy Notice
• Use Velaaa — Idea Management & AI Ideation for Founders
• Engage with us in other related ways, including any marketing or events

Questions or concerns? Contact us at velaaa.team@gmail.com.

Table of Contents

1. What Information Do We Collect?
2. How Do We Process Your Information?
3. What Legal Bases Do We Rely On To Process Your Personal Information?
4. When And With Whom Do We Share Your Personal Information?
5. Do We Offer Artificial Intelligence-Based Products?
6. How Long Do We Keep Your Information?
7. How Do We Keep Your Information Safe?
8. Do We Collect Information From Minors?
9. What Are Your Privacy Rights?
10. Controls For Do-Not-Track Features
11. Do United States Residents Have Specific Privacy Rights?
12. Do We Make Updates To This Notice?
13. How Can You Contact Us About This Notice?
14. How Can You Review, Update, Or Delete The Data We Collect From You?

1. What Information Do We Collect?

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

The personal information we collect may include:

• Names
• Email addresses
• Passwords
• Content you submit — ideas, notes, prompts, and other inputs you enter into Velaaa
• Preference and profile data inferred from your submissions to personalise AI suggestions
• Usage data — IP address, browser type, pages visited, and time spent in the app

Sensitive Information. We do not process sensitive information.

Third-party data. We do not collect any information from third parties.

Payment Data. We may collect data necessary to process your payment if you choose to make purchases, such as your payment instrument number and security code. All payment data is handled and stored by Stripe. You may find their privacy notice here: stripe.com/gb/privacy.

2. How Do We Process Your Information?

We process your personal information for the following purposes:

• To facilitate account creation, authentication, and otherwise manage user accounts.
• To generate AI-powered suggestions and insights personalised to your ideas and preferences.
• To improve and maintain the Velaaa platform.
• To process payments and manage your subscription.
• To send you product updates, service announcements, or responses to your enquiries.
• For security and fraud prevention.
• To comply with legal obligations.
• To save or protect an individual's vital interest, such as to prevent harm.

3. What Legal Bases Do We Rely On To Process Your Personal Information?

If you are located in the EU or UK, we rely on the following legal bases under UK/EU GDPR:

• Contract. Processing necessary to deliver the service you have signed up for — account management, AI suggestions, and billing.
• Consent. We may process your information if you have given us permission for a specific purpose. You can withdraw consent at any time by contacting us.
• Legitimate Interests. Improving our product, preventing fraud, and communicating relevant updates, where these interests are not overridden by your rights.
• Legal Obligations. Where we are required to retain or disclose data by law.
• Vital Interests. Where we believe it is necessary to protect your vital interests or those of a third party.

4. When And With Whom Do We Share Your Personal Information?

We do not sell your personal data. We share data only with trusted third-party service providers (such as Anthropic and Stripe) that help us operate Velaaa, and only to the extent necessary. We may also share data in the following situations:

• Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• Legal requirements. Where required by law or to protect the rights and safety of our users or business.

5. Do We Offer Artificial Intelligence-Based Products?

Yes. We offer products, features, and tools powered by artificial intelligence and machine learning. We provide these AI products through third-party service providers including Anthropic. Your input, output, and personal information will be shared with and processed by these AI service providers to enable your use of our AI products. We do not sell your data to Anthropic or any third party.

You must not use the AI products in any way that violates the terms or policies of any AI service provider.

6. How Long Do We Keep Your Information?

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law. We will keep your personal information for as long as you have an account with us. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes (e.g. transaction records).

7. How Do We Keep Your Information Safe?

We have implemented appropriate and reasonable technical and organisational security measures designed to protect the security of any personal information we process. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, and we cannot promise or guarantee that hackers, cybercriminals, or other unauthorised third parties will not be able to defeat our security.

8. Do We Collect Information From Minors?

We do not knowingly collect, solicit data from, or market to children under 18 years of age. By using the Services, you represent that you are at least 18 years of age. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data. If you become aware of any such data, please contact us at velaaa.team@gmail.com.

9. What Are Your Privacy Rights?

In some regions (like the EEA, UK, Switzerland, and Canada), you have certain rights under applicable data protection laws, including:

• The right to request access and obtain a copy of your personal information.
• The right to request rectification or erasure ('right to be forgotten').
• The right to restrict the processing of your personal information.
• The right to data portability.
• The right to object to processing based on legitimate interests or for direct marketing.
• The right not to be subject to automated decision-making.
• The right to withdraw consent at any time (where processing is consent-based).

To exercise any of these rights, contact us at velaaa.team@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

10. Controls For Do-Not-Track Features

Most web browsers and some mobile operating systems include a Do-Not-Track ('DNT') feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. We do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online, as no uniform technology standard for recognising and implementing DNT signals has been finalised.

11. Do United States Residents Have Specific Privacy Rights?

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you, correct inaccuracies, get a copy of, or delete your personal information. Your rights include:

• Right to know whether or not we are processing your personal data.
• Right to access your personal data.
• Right to correct inaccuracies in your personal data.
• Right to request the deletion of your personal data.
• Right to obtain a copy of the personal data you previously shared with us.
• Right to non-discrimination for exercising your rights.

To exercise these rights, contact us at velaaa.team@gmail.com.

12. Do We Make Updates To This Notice?

Yes, we will update this notice as necessary to stay compliant with relevant laws. We may update this Privacy Notice from time to time and will indicate the updated version with a revised date at the top. Where changes are material, we will notify you by email or in-app notice.

13. How Can You Contact Us About This Notice?

14. How Can You Review, Update, Or Delete The Data We Collect From You?

You have the right to request access to the personal information we collect from you, correct inaccuracies, or delete your personal information. To request to review, update, or delete your personal information, please contact us at velaaa.team@gmail.com.