How we look after your business data.
Velora AI is a UK company building an AI business operating system. This page explains, in plain English, how we approach privacy, security and data protection today. We only describe controls we have actually implemented — we do not hold security certifications such as ISO 27001 or SOC 2, and we will say so here if that changes.
Customer data
The data in your workspace — your customers, quotes, documents and content — belongs to your business. We use it to run the features you ask for and to support you when you contact us. We do not sell it, and we do not use it to train third-party AI models.
Business data separation
Every business has its own workspace. Records are tied to your account and protected by row-level access rules in our database, so one customer's workspace cannot read another's.
Secure authentication
Sign-in is handled by our managed authentication provider. Passwords are never stored by Velora in readable form, and sessions are issued as short-lived tokens that are refreshed automatically.
Data in transit
The Velora application and website are served over HTTPS, and requests between the app and our database and AI providers are made over encrypted connections.
Infrastructure
Velora runs on established cloud infrastructure providers rather than self-managed servers, so patching, backups and physical security are handled by specialist platforms. Payments are processed by Stripe — we never see or store your full card details.
Data processing & AI
Some features send the content you provide to AI model providers to generate a response. We send only what is needed for that request. Where files such as receipts are uploaded, they are stored in a private bucket accessible only to your workspace.
Account security
You control who has access to your workspace. If you believe an account has been compromised, contact us and we will help you secure it. We recommend a unique, strong password for your Velora account.
UK GDPR considerations
Velora AI is a UK business. You can request a copy of your data, ask us to correct it, or ask us to delete your account and its contents by emailing us. We aim to respond to data requests within one month, in line with UK GDPR expectations.
Reporting a security issue
If you believe you have found a vulnerability in Velora, please email security@veloriaai.co.uk with the details and how to reproduce it. Please give us a reasonable opportunity to investigate before disclosing it publicly.
Velora AI · 48 West George Street, Glasgow, G2 1BP, United Kingdom. This page is a summary of our current practices and is not a contract; it is updated as the product develops.