1. Who controls the data
Velora Security operates the websites and related services covered by this policy.
Privacy questions can be sent to [email protected].
2. Data we process
- Account data such as email address, technical account identifiers, and verification status.
- Subscription and payment metadata such as plan, billing period, payment provider, and transaction identifiers.
- VPN service diagnostics such as selected region, selected protocol, app version, connection status, failure code, latency, and coarse network type. We do not inspect the content of user traffic.
- Technical and security logs such as IP address, user agent, service errors, and anti-abuse events.
- Support messages and attachments when users contact us.
3. Why we process data
- To provide accounts, subscriptions, access control, and customer support.
- To operate VPN connectivity, select suitable nodes, apply plan limits, troubleshoot connection failures, and improve reliability.
- To protect infrastructure against fraud, abuse, and operational incidents.
- To comply with legal, accounting, and tax obligations where applicable.
4. Third parties and transfers
Velora does not sell personal data. Limited transfer may happen to payment, hosting, monitoring, and infrastructure providers when needed to run the service.
5. Retention and rights
We retain data only for the time needed to operate the service, handle disputes, meet legal obligations, and investigate abuse. Short-lived VPN diagnostics are kept only as needed for reliability and anti-abuse purposes. Depending on jurisdiction, users may request access, correction, deletion, restriction, or withdrawal of consent.
6. Security controls
Velora applies access control, logging, infrastructure segmentation, secure transport, backups, and incident handling procedures. More detail is available on the Security page.