Privacy Policy
Last updated: January 2026
What we collect
Account information (email, name via Clerk), workspace data you create (brand kit, connections, posts), message events we process for moderation, and usage metrics for billing. We do NOT sell personal data to third parties.
Why we collect it
To operate Veluxa: authenticate you, ship your posts, moderate your rooms, produce analytics, bill you. That is the whole list.
Where it lives
Primary region us-east-1 on AWS. EU data residency available on request (Frankfurt). Credentials are encrypted at rest with libsodium. Workspace-scoped — no cross-tenant reads.
How long we keep it
Active workspace data: for the life of your subscription. Deleted workspace data: 30 days retention, then purged. Moderation review items: 90 days. Audit logs: 1 year (compliance).
Your rights
Export, correction, deletion. Email [email protected] and we will fulfill within 30 days. GDPR + CCPA supported — nothing to opt into, you just have the rights.
Contact
[email protected] — real humans.