GDPR and EU Privacy

1. Lawful basis

Depending on the context, we process personal data to perform a contract, comply with legal obligations, pursue legitimate interests, or based on consent.

Examples include providing the product, billing, preventing abuse, responding to support, and improving reliability.

2. Data subject rights

EU and UK users may request access, correction, deletion, portability, restriction, objection, or withdrawal of consent where applicable.

We may need to verify your identity or authority before completing a request.

3. Cookies and analytics

Essential cookies support login, security, locale, and product operation. Non-essential analytics or marketing cookies should only run where allowed by applicable consent rules.

4. Transfers and subprocessors

Velnezo uses infrastructure and service providers that may process data outside the EU/UK. We evaluate safeguards and contractual commitments for relevant subprocessors.

5. DPA and vendor review

Business customers may request a DPA, subprocessors list, or security questionnaire support for procurement and compliance review.