Company documents

Privacy Policy

Clear and practical: what data is needed to run the VPN and what we never collect.

No activity logs

We do not collect browsing history, traffic contents, DNS queries or visited websites.

Optional connection diagnostics

Only after an explicit in-app choice, we may store an account identifier when signed in, the public IP and country seen by our server, device model, OS and app version, selected region, node and protocol, connection timestamps, success or failure, and technical error details. This never includes traffic contents. Diagnostics are off by default and can be changed in app settings.

Account and subscription

Sign-in and subscription management are handled via Velora Security. Payment data is processed by Google Play, the Apple App Store or the payment provider, not the app itself.

VPN functionality

On Android the app uses VpnService, and on iPhone and iPad it uses Apple Network Extension, to create a secure tunnel. VPN is the core functionality of the app.

Use, storage and sharing

Diagnostics are used only to operate, secure, troubleshoot and improve VPN reliability. They are stored on systems controlled by Velora. We do not sell, use for advertising, or share VPN data or diagnostics with third parties. VPN traffic is routed only to provide the service and is not stored as browsing history.

Operator

Velora Security is operated by Mostovyi Dmytro Dmytrovych. Contact: [email protected].

Operator: Mostovyi Dmytro Dmytrovych. Contact: [email protected]. If the question is about account access, subscription or billing, include the email you use in Velora.

App Privacy Policy

Direct privacy page for the Velora VPN app, available by link for store and compliance review.

Core principle

We do not collect or store browsing history, traffic contents, DNS queries or lists of websites visited while connected to the VPN.

Data needed to operate the service

We process account email, authentication tokens and subscription status when an account is used. Optional diagnostics are collected only after an explicit in-app choice and may include an account identifier, public IP and country seen by our server, device model, OS and app version, selected region, node and protocol, connection timestamps, success or failure, and technical error details.

IP addresses

IP addresses may be processed transiently by VPN servers as a technical requirement to provide the service and are not retained beyond what is needed for real-time connection handling.

Notifications

If enabled, device notification tokens may be used only for service-related notifications.

Choice and control

Optional diagnostics are off by default. VPN access remains available when they are declined. The choice can be changed at any time under VPN Data & Privacy in app settings.

Use, storage and third parties

Diagnostics are used only to operate, secure, troubleshoot and improve VPN reliability and are stored on systems controlled by Velora. We do not sell, use for advertising, or share VPN data or diagnostics with third parties. VPN traffic is routed only to provide the service and is not stored as browsing history.

Use this page as the direct public privacy policy URL for Google Play and App Store compliance flows.

Terms of Service

Service usage rules. Short and practical.

Purpose

Velora VPN provides VPN connectivity to protect your connection and improve privacy.

Prohibited activities

Do not use the service for malicious activities, attacks, malware distribution, fraud or other illegal actions.

Limitations

We may limit access in case of abuse, such as automated attacks or excessive load, to protect infrastructure.

Disclaimer

The service is provided as is. We strive for stability but cannot guarantee uninterrupted availability at all times.

Operator

Velora Security is operated by Mostovyi Dmytro Dmytrovych. Contact: [email protected].

Contact

For legal or service questions, contact [email protected].

Operator: Mostovyi Dmytro Dmytrovych. Contact: [email protected]. Use this page as the public terms route for account, billing and app-related references.

Legal Notice

Velora Security is a technology brand operated by Mostovyi Dmytro Dmytrovych, a registered sole proprietor (FOP) in Ukraine.

Legal Entity

Mostovyi Dmytro Dmytrovych

Contact

[email protected]

Website

https://velora-security.com

The Velora Security website, products, and services are operated under the legal responsibility of Mostovyi Dmytro Dmytrovych.

Account and Data Deletion

If you want to remove your Velora account and related records, use this route.

Step 1

Send an email to [email protected].

Step 2

Use subject: Account deletion request.

Step 3

Include the email address used for your Velora account.

What is deleted

The Velora account and related records, including subscription state inside the Velora system.

Timeframe

Requests are usually completed within up to 7 days.

This direct page can be used anywhere a public account deletion URL is required for app-store or compliance purposes.

Privacy Policy — Photo Compressor

Document from the local source website.

This Privacy Policy explains how Photo Compressor handles information when you use the mobile application.

Last updated: March 14, 2026

1. Who we are

Photo Compressor is operated by Velora Security.

If you have questions about this Privacy Policy or your data, you can contact us at [email protected] .

2. What the app does

Photo Compressor allows users to select photos from their device, compress image files, resize images, convert supported image formats, inspect certain image metadata, remove metadata from exported images, save processed images locally, and share processed files using the system share menu.

3. Photos and image processing

The app processes selected photos locally on your device.

We do not upload your photos to our servers for compression, resizing, metadata viewing, or metadata removal.

Your selected images remain under your control unless you explicitly choose to save or share them through another app or service.

4. Information the app may access

Depending on how you use the app, it may access:

photos or images you explicitly choose from your device;

basic file information such as file name, file size, image dimensions, MIME type, and available metadata;

storage-related access needed to save processed images to your device;

device and app information required for app functionality, diagnostics, and advertising.

The app only accesses photos that you actively select.

5. Metadata handling

The app may read available metadata from selected images, including file name, file type, file size, image dimensions, date taken, camera model, and the presence of GPS or location metadata.

If you enable metadata removal, the exported image is created without retained metadata to the extent supported by the implementation. This is intended to improve privacy before sharing or saving the processed file.

6. Advertising

The app uses Google AdMob to display advertisements.

AdMob and its partners may collect and process certain information for advertising, fraud prevention, analytics, and ad delivery. This may include device identifiers, advertising identifiers, IP address, app interactions, and related technical information, in accordance with Google’s own privacy documentation.

For more information, please refer to Google’s Privacy Policy and Google’s advertising technology documentation.

7. Saving and sharing

When you use the save feature, processed images are stored on your device, typically in a folder such as Pictures/PhotoCompressor .

When you use the share feature, the app shares the processed image through Android’s system share interface to the app or service you choose.

We do not control how third-party apps or services handle content after you choose to share it with them.

8. Data retention

Because image compression and processing are performed locally on device, we generally do not store your images on our servers.

Processed images that you save remain on your device until you delete them.

Temporary local files may be created during processing or sharing and may later be removed automatically by the system or overwritten by the app.

9. Children’s privacy

The app is not directed to children under the minimum age required by applicable law.

If you believe that a child has provided personal information in connection with the app, please contact us and we will review the request.

10. Your choices

You can choose whether or not to select a photo, remove metadata before export, save a processed image, share a processed image, and allow device permissions where applicable.

You may also stop using the app at any time and delete any saved files from your device.

11. Security

We take reasonable measures to design the app in a way that limits unnecessary data exposure. However, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

12. Third-party services

The app may rely on third-party services, including Google AdMob, Android system components and content providers, and app distribution platforms such as Google Play.

These third parties may process data according to their own privacy policies and terms.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Continued use of the app after changes become effective means you accept the updated Privacy Policy.

14. Contact us

If you have questions about this Privacy Policy, you can contact us at [email protected] .

Privacy Policy — PDF Tools: Merge & Compress

Document from the local source website.

PDF Tools: Merge & Compress is a local-first Android utility app for common PDF tasks. The app is designed to process files on the device and keep the workflow simple.

1. What the app does

The app helps users merge PDF files, split PDF files, compress PDF files, convert images to PDF, and export PDF pages as images. These tasks are intended to work locally on the user's device.

2. Data we handle

The app can access files that the user explicitly selects through the Android system file picker. This may include PDF files and image files chosen by the user for processing.

The app also stores a local recent files list on the device. This list may include:

file name

operation type

file path or file URI

file size

creation date

3. How files are processed

File processing is intended to happen locally on the device. We do not require account creation, cloud storage, or backend upload for the main PDF tools functionality.

4. Advertising

The app uses Google AdMob to display ads. AdMob and its partners may collect certain device, app, and advertising data to provide, personalize, and measure ads. This data handling is governed by Google's policies and technologies.

Learn more here: Google Advertising Policies and AdMob information for users .

5. Permissions

The app is designed to use minimal permissions. It relies on the Android system file picker instead of broad storage access wherever possible. The app does not request camera, microphone, contacts, location, or phone permissions for its core functionality.

6. Data sharing

We do not sell user files. Files selected for processing are intended to remain local to the device, except where third-party ad services such as AdMob may collect technical advertising-related data as described above.

7. Data retention and deletion

Processed files remain where the user saves them. The local recent files list can be cleared inside the app from Settings. Users may also delete created files directly from their device storage.

8. Children's privacy

This app is not directed to children and is not designed specifically for use by children.

9. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated effective date.

10. Contact

If you have questions about this Privacy Policy, contact: [email protected]

Cookie policy

Document from the local source website.

Velora uses essential cookies by default. Optional analytics cookies are only enabled after consent.

Last updated: March 25, 2026

1. What cookies are used for

Cookies help keep site sessions stable, remember user preferences, and support basic security and consent logic.

2. Cookie categories

Essential cookies for sessions, CSRF protection, and technical operation.

Preference cookies for things like interface language.

Optional analytics cookies, enabled only after user consent.

3. Controls

Users can accept or decline optional analytics cookies in the cookie banner and can also manage cookies through browser settings.

Security

Document from the local source website.

Velora is built around secure defaults, practical access controls, and a privacy-first operational posture.

Last updated: March 25, 2026

1. Architecture principles

Security and privacy are considered during design, not only after deployment.

Data collection and retention are limited to what is operationally necessary.

2. Infrastructure protection

TLS for external services and administrative access where applicable.

Segmentation, role-based access, and regular maintenance of exposed components.

Backups and operational recovery procedures for critical paths.

3. Monitoring and anti-abuse

Velora uses technical monitoring, audit logs, rate limiting, and anti-abuse controls to keep services stable and to investigate security events.

4. Vulnerability reporting

Security reports can be sent to [email protected] with steps to reproduce, impact, and supporting evidence.

Privacy Policy — Velora TempMail

Privacy Policy

This policy covers the Velora Mail website and the Velora TempMail iOS and Android apps. Temporary mail is intended for short-lived use. It is not end-to-end encrypted and should not be used for sensitive correspondence, important accounts or password recovery.

Velora Mail is part of Velora Security, operated by Mostovyi Dmytro Dmytrovych, a registered sole proprietor (FOP) in Ukraine. See our Legal Notice . Contact: [email protected] .

Mail and accounts

To receive and display messages, our servers process your temporary address, sender and recipient addresses, subject, message body, attachment metadata and delivery timestamps. We store inbox identifiers, ownership credentials and settings to let you access the correct inbox. A guest inbox does not require an account.

If you create or sign in to a Velora account, we process your personal email or username, authentication information and account identifiers. Passwords are stored as hashes. Signing in with Apple or Google uses the provider's identity and authorization credentials. Apple may provide a private relay address instead of your personal address. We do not request access to your Apple or Google mailbox, contacts, photos or files.

Velora identity is shared with other Velora services. Mail data and subscription access remain separate from VPN access. The iOS app stores session and inbox access credentials in the system Keychain. The Android app encrypts these credentials using a non-exportable Android Keystore key and excludes them from backups.

Retention and deletion

Free messages are accessible for up to 24 hours, with a history limit of 50 messages. Premium messages are accessible for up to 14 days, with a history limit of 250 messages. Limits can remove older messages earlier. Expired messages and inboxes are removed by scheduled cleanup; expiry immediately prevents access even before cleanup runs. Free addresses expire after 24 hours; Premium addresses expire after 30 days. An address is not permanent.

You can delete an inbox or your Mail data in the app. Deleting Mail data removes your Mail inboxes, messages, private domains and Mail access credentials. Your shared Velora account and VPN access remain active. Account deletion does not cancel an Apple or Google Play subscription: cancel it separately with the store used for purchase. Contact us for requests concerning the shared account or personal data.

Subscriptions

Apple processes iOS subscription payments; Google Play processes Android subscription payments. We do not receive your payment card details. We store subscription product and transaction identifiers, encrypted Google Play purchase tokens, an account binding identifier, entitlement status and expiry to verify purchases, restore access and process renewals or refunds. A mobile subscription is linked to the Velora account used for that purchase.

Advertising

The free mobile apps use Google AdMob for interstitial advertising. Premium does not show ads. Advertising services may process IP-derived approximate location, device or app identifiers, ad interactions and diagnostic data to deliver and measure ads, prevent fraud and operate their services. We do not send email addresses, message contents or subjects to AdMob.

Both mobile apps request non-personalized ads. The iOS app does not request permission to track you across apps. Google's consent form is shown when required for your region. Where available, use Advertising privacy in Settings to review or withdraw consent. Your choices do not prevent you from using temporary mail. Read Google's Privacy Policy for its handling of advertising data.

Optional usage and crash reports

Firebase Analytics and Crashlytics are disabled until you enable Usage and crash reports in Settings. If enabled, Firebase receives app and device information, an installation identifier, language, coarse events such as viewing a plan, completing a purchase or displaying an ad, and crash diagnostics. Ad revenue events contain the ad format, currency and amount. We do not add email addresses, senders, subjects, message bodies, access tokens or Velora account identifiers to these reports.

You can turn this option off at any time. We then stop collection, reset the local Analytics identifier and discard unsent crash reports. Turning it off does not erase reports already received by Google; contact us about data requests. Firebase data is handled according to Firebase's privacy information .

Security, website storage and providers

We process network and request information for routing, account security, abuse prevention and operation of the service. Access to private inboxes requires their credentials. Transport uses HTTPS; this is not end-to-end encryption. Both mobile apps block remote content in HTML messages.

The website uses cookies and local storage for sessions, preferences and consent choices. See our Cookie Policy . Providers processing data to operate the service include hosting and mail delivery providers, Apple and Google for authentication, Apple and Google Play for mobile payments, and Google for advertising and optional diagnostics. They may process data outside your country. We do not sell the contents of your inbox.

You can also request deletion of your Mail account or shared Velora identity without installing the app.

Your choices and contact

You may ask about access, correction, deletion, restrictions or objections concerning your personal data, and contact the appropriate data protection authority where applicable. To make a request or ask a privacy question, email [email protected] . Do not include inbox access secrets or sensitive message contents in your request.

Delete your account and Mail data

Delete your account and Mail data

Velora TempMail is provided by Velora Security. You can request deletion here without installing the app.

Delete your Mail account in the app

Sign in, open Settings and select Delete account. Confirm the deletion. Your Mail inboxes, messages, private domains, API credentials and Mail account access are removed. Your identity used by other Velora services, including VPN, remains active.

Request deletion without the app

Email [email protected] from the address associated with your account. Use the subject “Velora TempMail account deletion”. Tell us whether you want to delete only your Mail account or your entire shared Velora identity, including access to other Velora services. We will verify ownership before acting.

If you cannot access your account email, contact support so we can discuss another way to verify ownership. Never send your password, inbox secret or sensitive message contents.

Subscriptions and retained records

Deleting an account does not cancel store subscriptions. Cancel future renewals separately in Apple Subscriptions or Google Play Subscriptions. We may retain records required for legal, financial or security obligations; where applicable, we explain the reason and retention period when responding to your request. Other Velora service data is not removed by a Mail-only deletion.

Terms of Service — Velora TempMail

Updated October 4, 2026

Terms of Service

By using Velora Mail, you agree to these terms. Please read them carefully before using our service.

1. Service Description

Velora Mail provides temporary and semi-permanent email inbox services. Free accounts receive disposable email addresses that expire automatically. Premium accounts receive extended message retention and addresses that expire after 30 days.

The service is provided "as is" without guarantees of deliverability, availability, or message retention beyond the stated limits for your subscription plan.

We reserve the right to modify, suspend, or discontinue the service at any time with or without notice, though we will make reasonable efforts to notify users of significant changes.

2. Acceptable Use

You agree not to use Velora Mail to:

Send, receive, or store spam, phishing, or malicious content

Circumvent anti-fraud or age verification systems illegally

Conduct any activity that violates applicable laws or regulations

Impersonate individuals, organizations, or brands

Automated scraping or abuse of our API beyond documented rate limits

Distribute malware, ransomware, or other harmful software

Conduct illegal activities including but not limited to fraud, money laundering, or terrorism

Violation of acceptable use may result in immediate account suspension or termination without refund.

3. Message Retention & Data Limits

Free Plan: Messages are automatically deleted after 24 hours. A maximum of 50 messages are available in history. Free addresses expire after 24 hours. Scheduled cleanup removes expired data.

Premium Plan: Messages are retained for up to 14 days. History is extended to 250 messages. Premium addresses expire after 30 days; they are not permanent.

Velora Mail is a temporary email service. Do not use it as a primary email address for important accounts, financial services, or legal communications. We accept no liability for lost messages.

iOS Subscriptions

iOS Premium subscriptions are billed by Apple. The price and billing period appear before purchase. Subscriptions renew automatically unless cancelled in your Apple account settings before renewal. Cancelling stops future renewals; Premium remains available until the paid period ends.

Use Restore Purchases in the app to restore an eligible purchase to the same Velora account. Deleting your Mail account does not cancel an Apple subscription. Refund requests for Apple purchases are handled by Apple.

4. Privacy & Data

We collect only the minimum data required to operate the service: email address (for Premium accounts), username, hashed password, account identifiers, email content and metadata for routing and displaying messages.

We do not sell, rent, or share your personal data with third parties, except as required by law or to operate the service, including authentication, advertising, optional diagnostics and payment processing. Apple handles iOS payments; we do not receive card details.

Full details are available in Velora Mail's Privacy page .

5. API Usage & Rate Limits

The Velora Mail Developer API is available to Premium users with an active API token. Rate limits apply:

Premium accounts: up to 500 API requests per month

Attempting to circumvent rate limits, including through token rotation or distributed requests, is a violation of these terms and may result in immediate account termination.

6. Accounts & Security

You are responsible for maintaining the security of your account credentials. Do not share your password or API token with third parties.

We implement device verification for logins from new browsers or IP addresses. If you receive a verification code you did not request, change your password immediately and contact support.

We reserve the right to require re-authentication at any time for security reasons.

7. Liability & Disclaimers

Velora Mail is provided "as is" without warranty of any kind, express or implied. We disclaim all warranties including merchantability, fitness for a particular purpose, and non-infringement.

In no event shall Velora Mail be liable for any indirect, incidental, special, or consequential damages arising from your use of the service, including loss of data, revenue, or business.

Our total liability for any claim arising from these terms or use of the service shall not exceed the amount you paid us in the 3 months preceding the claim.

8. Changes to Terms

We may update these Terms of Service at any time. Material changes will be notified via the service interface or by email if you have an account with a verified email address.

Your continued use of the service after changes take effect constitutes acceptance of the new terms. If you do not agree to the updated terms, you must stop using the service.

9. Governing Law

These Terms of Service are governed by and construed in accordance with applicable international privacy and consumer protection laws. Disputes shall first be attempted to be resolved through direct communication with our support team.

For legal inquiries, contact us at: [email protected]

© 2026 Velora Mail

Cookie Policy — Velora TempMail

Cookie Policy

Velora Mail uses only essential cookies and local storage needed for login, preferences, and basic security.

What We Use

velora_token: HTTP-only secure session cookie used to keep registered users signed in.

velora_cookie_consent: Local storage value that remembers your cookie choice.

velora_privacy_accepted: Local storage value that remembers acknowledgement of the temporary-data notice.

velora_lang: Local storage value for your selected interface language.

velora_device_id: Local storage identifier used for device security and inbox rotation limits.

velora_guest_*: Local storage values for the current anonymous temporary inbox.

No Tracking Cookies

We do not use advertising cookies, behavioral tracking cookies, Meta Pixel, Google Analytics, or third-party profiling scripts on Velora Mail.

Why Local Storage Is Used

Anonymous temporary inboxes need a local secret so your browser can reopen the same inbox during its lifetime. This is stored only in your browser and can be cleared by deleting the inbox or clearing site data.

Managing Preferences

You can clear Velora Mail cookies and local storage in your browser settings at any time. If you clear them, anonymous inbox access from this browser may be lost.