Privacy Policy

1 Information we collect

We collect information in three ways: information you give us directly, information collected automatically when you use the Services, and information we receive from third-party sources you choose to connect.

1.1 Information you provide directly

• Account information: name, work email address, and password (stored as a salted hash, never in plain text) when you sign up, plus the sign-in method you use (email, Google, Microsoft, or LinkedIn).
• Contact and inquiry information: name, email address, company name, and the content of your message when you submit our contact form or request a demo.
• Billing information: if you subscribe to a paid plan, billing details such as name, business address, and payment method, processed by our payment provider on our behalf. We do not store full payment card numbers on our own servers.
• Communications: anything you send us by email, in-app messages, or support requests.

1.2 Information collected automatically

• Usage data: pages viewed, features used (for example, forecasts run, Goal Seek scenarios, reports exported), timestamps, and referring/exit pages.
• Device and log data: IP address, browser type and version, operating system, device identifiers, and general location inferred from your IP address.
• Cookies and similar technologies: as described in Section 6.

1.3 Information from third parties

• Single sign-on providers: if you register or log in using Google, Microsoft, or LinkedIn, we receive your name, email address, and profile identifier from that provider, consistent with the permissions you grant during that sign-in flow.
• Connected marketing and CRM channels: if you choose to connect third-party accounts to Velora (see Section 2), we receive the data those integrations are authorized to share.

2 Connected accounts & integrations

Velora's forecasting and sentiment features work by connecting to marketing, CRM, and data warehouse platforms that you authorize. We only access these accounts after you explicitly connect them, and only for the purposes described below.

You can review connector status and disconnect (re-authenticate or revoke) any integration at any time from within the Velora dashboard. Disconnecting stops future data collection from that source but does not automatically delete data already imported; see Section 10 for deletion requests.

3 How we use information

We use the information described above to:

• Create and administer your account, and authenticate you when you log in;
• Provide the core Services — data quality scoring, model auto-selection and backtesting, Goal Seek scenario planning, sentiment analysis, accuracy tracking, and report/export generation;
• Respond to contact form submissions, support requests, and demo inquiries;
• Send account, security, and service-related communications, and — where you've agreed to receive them — product updates and marketing emails;
• Monitor, secure, debug, and improve the Services, including diagnosing technical issues;
• Detect, investigate, and prevent fraud, abuse, or violations of our Terms; and
• Comply with legal obligations.

4 Our legal bases for processing

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar requirements, we rely on the following legal bases:

• Contractual necessity — to create your account and deliver the Services you've signed up for;
• Legitimate interests — to secure and improve the Services, prevent abuse, and respond to inquiries, balanced against your rights;
• Consent — for optional marketing communications and non-essential cookies, which you can withdraw at any time; and
• Legal obligation — where processing is required to comply with applicable law.

5 How we share information

We do not sell your personal information. We share information only in the following circumstances:

• Service providers: hosting and infrastructure providers (including our database and application hosting provider), payment processors, email delivery providers, and analytics providers, each bound by contractual confidentiality and data-protection obligations.
• Integrations you authorize: data flows to and from third-party platforms you connect (Section 2) as directed by you.
• Business transfers: if Neocordon is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to standard confidentiality protections.
• Legal reasons: where required to comply with a subpoena, court order, or other legal process, or to protect the rights, property, or safety of Neocordon, our users, or the public.
• With your consent: in any other case where you've directed us to share information.

6 Cookies & similar technologies

We use cookies and similar technologies to keep you signed in, remember preferences, understand how the Services are used, and, where you've consented, measure marketing performance. Categories include:

• Strictly necessary — session and authentication cookies required for login and core functionality.
• Analytics — help us understand aggregate usage patterns so we can improve the product.
• Marketing — used only where you've consented, to measure the performance of our own marketing.

You can control cookies through your browser settings; blocking strictly necessary cookies may prevent parts of the Services, including login, from working correctly.

7 Data retention

We retain account and usage information for as long as your account is active, and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements. Contact form submissions are retained for as long as reasonably necessary to address your inquiry and for our internal records. You may request earlier deletion as described in Section 10.

8 Security

We use technical and organizational safeguards designed to protect your information, including password hashing, encryption in transit, and role-based access controls (RBAC) restricting internal access to what's needed. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify affected users and relevant authorities as required by applicable law.

9 International data transfers

Neocordon's infrastructure may process and store data in the United States and other countries where our service providers operate. Where we transfer personal information from the EEA, UK, or Switzerland to a country without an adequacy decision, we rely on appropriate safeguards, such as Standard Contractual Clauses, to protect that information.

10 Your rights & choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you;
• Correct inaccurate or incomplete information;
• Delete your personal information, subject to certain legal exceptions;
• Object to or restrict certain processing, including marketing;
• Request a portable copy of your data; and
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us using the details in Section 14. We may need to verify your identity before fulfilling a request. You can unsubscribe from marketing emails at any time using the link in those emails; you'll continue to receive account and security-related communications.

11 Children's privacy

The Services are intended for business use by adults and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

12 Customer data you upload to Velora

When you upload campaign data, connect integrations, or otherwise submit business data ("Customer Data") for the purpose of generating forecasts, sentiment scores, or reports, we process that data as your service provider/processor, on your instructions, solely to provide the Services to you. Customer Data is not used to train models for other customers and is not shared with third parties except as needed to operate the Services (for example, our hosting provider) or as you direct (for example, a Power BI export). You remain responsible for ensuring you have the right to upload any data you provide, including any personal information about your own customers or contacts contained in that data.

13 Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a notice on the Services prior to the change taking effect. The "Last updated" date at the top of this page reflects the most recent revision.