At VelocityKit, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

Information We Collect

Information You Provide

We collect information you provide directly to us, such as:

Account information: When you create an account, we collect your email address and password. Passwords are securely hashed and never stored in plain text.
Profile information: You may provide additional information such as your name and profile picture.
Payment information: When you make a purchase, our payment processor (Stripe) collects your payment card details. We do not store your full card number—only a tokenized reference and last four digits for display purposes.
Communications: When you contact us for support or inquiries, we collect the information you provide in your messages.
License information: When you purchase VelocityKit, we associate your license with your account to provide access to downloads and updates.

Information Collected Automatically

When you use our service, we automatically collect:

Usage data: Pages visited, features used, and actions taken within the application via PostHog analytics.
Device information: Browser type, operating system, screen resolution, and device identifiers.
Log data: IP address, access times, referring URLs, and error logs for debugging purposes.

How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our services
Process purchases and provide access to purchased products and updates
Send transactional emails (purchase confirmations, password resets, update notifications) via Resend
Respond to your comments, questions, and support requests
Monitor and analyze trends, usage, and activities to improve the product
Detect, investigate, and prevent fraudulent transactions or unauthorized access
Personalize and improve your experience
Comply with legal obligations and enforce our Terms of Service

Information Sharing

We may share your information in the following circumstances:

Service providers: With third-party vendors who perform services on our behalf, including:
- Stripe for payment processing
- Supabase for authentication and database hosting
- PostHog for product analytics
- Resend for transactional email
- Vercel for application hosting
Legal requirements: If required by law or in response to valid requests by public authorities (e.g., a court or government agency).
Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
With your consent: When you have given us explicit permission to share your information.

We do not sell your personal information to third parties for marketing purposes.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. Specifically:

Account data: Retained while your account is active and for up to 30 days after deletion to allow for recovery.
Purchase records: Retained for 7 years for tax and legal compliance.
Analytics data: Aggregated and anonymized after 2 years.
Support communications: Retained for 3 years for quality and training purposes.

Security

We implement industry-standard security measures to protect your personal information:

All data is encrypted in transit using TLS/HTTPS
Passwords are hashed using secure algorithms
Database access is protected by Row Level Security (RLS) policies
Payment information is handled by PCI-compliant processors (Stripe)
Regular security audits and dependency updates

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

Cookies and Tracking

We use the following types of cookies and tracking technologies:

Essential cookies: Required for authentication and core functionality. These cannot be disabled.
Analytics cookies: PostHog cookies to understand how you use our service and improve it. You can opt out of analytics tracking.
Preference cookies: To remember your settings and preferences (e.g., dark mode).

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. Note that some features may not function properly without essential cookies.

Your Rights

Depending on your location, you may have the right to:

Access: Request a copy of the personal information we hold about you
Correction: Request correction of inaccurate or incomplete information
Deletion: Request deletion of your personal information (subject to legal retention requirements)
Restriction: Object to or restrict processing of your information
Portability: Request your data in a portable, machine-readable format
Withdraw consent: Where processing is based on consent, you may withdraw it at any time

For EU/EEA Residents (GDPR)

If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with your local supervisory authority.

For California Residents (CCPA)

California residents have the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell personal information.

To exercise any of these rights, please contact us at support@velocitykit.dev.

Third-Party Services

Our service integrates with the following third-party services:

Stripe: For payment processing. Privacy Policy
Supabase: For authentication and database. Privacy Policy
PostHog: For analytics. Privacy Policy
Resend: For transactional email. Privacy Policy
Vercel: For application hosting. Privacy Policy

Children's Privacy

Our service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us and we will take steps to delete such information.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page, updating the "Last updated" date, and if you have an account, sending you an email notification.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

support@velocitykit.dev