Privacy Policy

Velov is a template-based social-video generator: you upload clips and images, apply a template, and get a compiled video. This policy explains what data we process, where it lives, and your rights. Velov is operated by an individual developer based in Switzerland; data processing (hosting and rendering) is performed by infrastructure providers located in the European Union (Germany) and Switzerland.

1. Who is responsible ("controller")

Velov is operated by the individual developer ("we", "us", "our"). You can contact us at support@velov.app. For data-protection questions, the same address applies.

2. What data we collect and process

2.1 Account data

When you create an account, we process your email address and a password (stored securely as a salted hash). An optional display name and profile details you choose to provide.

2.2 Content you upload (media data)

To create a video you upload video clips, images, and audio. We process this content only to render your project. Your uploaded source media is held temporarily on our render server and is automatically deleted shortly after rendering (typically within 48 hours). Generated output videos are stored so you can download them.

2.3 AI caption processing (if you enable auto-captions)

When you enable automatic captions, the audio track of your clip is transmitted to our transcription provider (Mistral AI) to generate the caption text and word timings. This processing only occurs when you actively enable the captions feature. The caption transcript is stored as part of your project so it can be rendered.

2.4 Payment data

Payments for credit packages are processed through a certified payment processor. We do not see or store your full card details. We store the transaction status and references needed for billing and refunds.

2.5 Technical / usage data

Standard server logs (IP address, timestamps, pages/endpoints requested, browser/user-agent, error data), collected for security, stability, and abuse prevention. We use only privacy-respecting, self-hosted analytics.

3. Where your data is processed (location)

Because our operator is based in Switzerland and storage/processing occurs in the EU, your data benefits from both the Swiss Federal Act on Data Protection (nFADP) and the EU General Data Protection Regulation (GDPR) protections. Transfers between Switzerland and the EU are covered by EU adequacy decisions.

4. Why we process data (legal bases)

• Performance of the contract: providing the service you requested (rendering videos, storing projects, processing payments).
• Consent: enabling AI captioning (you opt in per project); optional marketing communications.
• Legitimate interests: security, abuse prevention, fraud detection, and service improvement.
• Legal obligation: where we must retain data to comply with the law.

5. When we share data

We share data only with the processors named in §3 as needed to run the service, and never sell it. We may disclose data if required by law, court order, or to protect our rights and the safety of users.

6. Data retention

• Source media (uploads): deleted shortly after rendering (typically ≤ 48 h).
• Generated videos & projects: kept while your account is active, and until you delete them or your account.
• Account data: retained for as long as the account exists; deleted on account deletion unless retention is legally required.
• Server logs: retained for a limited period (typically 30 days) for security.
• Payment records: retained as required by tax and accounting law (Swiss law mandates retention for a set period).

7. AI captioning (transcription) — details

When you enable auto-captions, we send the audio of your selected clip to our transcription provider to generate the captions. The audio is used solely to generate the transcript and is not used to train consumer models. Processing occurs under Mistral AI's terms; where applicable, data is processed in the EU. If you do not want audio processed by an external provider, you can use our manual-caption option or the on-premises/air-gapped tier where your audio is transcribed on infrastructure we control and never leaves it.

8. Your rights

Depending on your location (Swiss nFADP and/or EU GDPR), you have the right to:

• Access a copy of the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Delete your data ("right to be forgotten").
• Restrict or object to processing, including objection to legitimate-interest processing.
• Data portability (receive your data in a structured, machine-readable format).
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) and/or your local EU supervisory authority.

To exercise any right, contact support@velov.app. We respond within the timeframes required by law (typically within 30 days).

9. Cookies

We use only essential cookies and local storage needed for authentication and session handling. We do not use third-party advertising or tracking cookies.

10. Children

The Service is not directed at children under the age of 16 (or the minimum age that applies in your location). We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

11. Security

We apply technical and organisational measures appropriate to the risk, including encryption in transit (HTTPS), hashed passwords, controlled access to servers, and automatic deletion of temporary media. No method of transmission or storage is 100% secure, but we work to protect your data.

12. Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page with an updated "Last Updated" date, and we will notify you through the Service where appropriate. Continued use after changes constitutes acceptance.

13. Contact

For any privacy question or to exercise your rights: support@velov.app.