• Contact names, email addresses, meeting notes, and deal data necessary to sync with your account.

We process only the data needed to fulfill the requested integration actions and never sell or share CRM data for unrelated purposes.

3.4. Usage & Analytics Data

We automatically collect diagnostic, technical, and usage information (e.g., IP address, device identifiers, browser type, activity logs, error data) to improve performance and security.

3.5. Communications

If you contact us at hello@vellora.ai, we retain your correspondence for support and operational purposes.

4. How We Use Information

We use collected data to:

• Provide, maintain, and improve our Services;
• Authenticate users and secure accounts;
• Generate transcriptions, summaries, and productivity analytics;
• Provide customer support;
• Comply with legal obligations or enforce our Terms of Service;
• Communicate updates, billing notices, or feature announcements.

We do not sell or rent personal data to any third party.

5. Data Storage and Security

All user data, recordings, and transcripts are securely stored in Supabase-hosted infrastructure located in the United States. Supabase provides encrypted databases and storage buckets under SOC 2-compliant standards.

We employ industry-standard encryption, access controls, and monitoring.

No system can be guaranteed 100% secure, but we maintain reasonable administrative, technical, and physical safeguards to protect your data.

6. Data Retention and Deletion

Your data (including recordings and transcripts) remains stored until you delete it or close your account.

After account closure, we retain data for up to 90 days for operational backup, after which it is permanently deleted.

Deleted data cannot be recovered.

7. Sharing and Disclosure

We may share information only as follows:

• Service Providers and Subprocessors (e.g., Supabase, analytics or infrastructure vendors) who process data under written confidentiality agreements;
• CRM Integrations—only when explicitly authorized by you;
• Third-Party Platform Integrations—when you connect Third-Party Services (such as LinkedIn, Google, Microsoft, or social networking platforms), data may be shared with those services as necessary to provide the requested integration functionality. Such sharing occurs only with your explicit authorization and is subject to the privacy policies of those Third-Party Services;
• Legal Compliance—to respond to subpoenas or lawful requests;
• Business Transfers—in the event of a merger, acquisition, or sale, data may transfer under this same Privacy Policy.

We do not provide user data to advertisers or data brokers.

8. Third-Party Service Integrations

Vellora AI allows you to connect to various third-party platforms and services ("Third-Party Services") to enhance your experience. This section describes how we handle data in connection with these integrations.

8.1 Integrated Services

We may offer integrations with the following categories of Third-Party Services:

• Social and Professional Networks: LinkedIn and other professional networking platforms;
• CRM Systems: HubSpot, Salesforce, Zoho, Pipedrive, Attio, Freshsales, GoHighLevel, and similar platforms;
• Email and Calendar: Google Workspace, Microsoft 365, and other email/calendar providers;
• Communication Tools: Various messaging and collaboration platforms.

8.2 Data Sharing with Third-Party Services

When you connect a Third-Party Service to Vellora AI:

• We access and retrieve data from that service only as authorized by you and as necessary to provide the requested functionality;
• We may send data to that service (such as contact information, messages, or updates) as directed by you;
• Data flows are governed by both this Privacy Policy and the privacy policy of the Third-Party Service;
• You can disconnect integrations at any time through your account settings.

8.3 LinkedIn Integration Disclaimer

IMPORTANT: Vellora AI is not affiliated with, endorsed by, sponsored by, or officially sanctioned by LinkedIn Corporation. Our LinkedIn integration features are provided independently and are not approved or certified by LinkedIn.

When you connect your LinkedIn account:

• You authorize Vellora AI to access certain LinkedIn data on your behalf;
• Your use of LinkedIn through Vellora AI remains subject to LinkedIn's User Agreement and Privacy Policy;
• Vellora AI is not responsible for any actions LinkedIn may take regarding your account, including restrictions, suspensions, or terminations;
• LinkedIn may change, restrict, or discontinue API access at any time, which may affect our integration features;
• You assume all risks associated with connecting your LinkedIn account to Vellora AI.

8.4 Third-Party Privacy Practices

Vellora AI is not responsible for the privacy practices, data collection, or security measures of Third-Party Services. Each Third-Party Service has its own privacy policy that governs how it collects, uses, and protects your data. We encourage you to review the privacy policies of all Third-Party Services you connect to Vellora AI.

Disconnecting a Third-Party Service from Vellora AI does not delete data that has already been shared with or collected by that Third-Party Service. To manage data held by Third-Party Services, you must contact those services directly.

8.5 Your Control Over Integrations

You have full control over which Third-Party Services you connect to Vellora AI. You may:

• Connect or disconnect integrations at any time through your account settings;
• Review which integrations are currently active;
• Revoke Vellora AI's access to Third-Party Services through those services' settings;
• Request deletion of data imported from Third-Party Services by contacting us at hello@vellora.ai.

8.6 Assumption of Risk and Indemnification

BY CONNECTING ANY THIRD-PARTY SERVICE TO VELLORA AI, YOU ACKNOWLEDGE AND AGREE THAT:

• You assume all risk associated with connecting your Third-Party Service accounts, including the risk of account restrictions, suspensions, bans, data loss, loss of connections, or any other adverse consequences imposed by Third-Party Services;
• You agree to indemnify and hold harmless Vellora AI, Inc. from any claims, damages, losses, costs, or expenses arising from your use of Third-Party Service integrations;
• You release Vellora AI from any liability for actions taken by Third-Party Services against your accounts as a result of your use of our integration features.

For complete terms regarding Third-Party Service integrations, including detailed indemnification obligations, please refer to Section 14 of our Terms of Service.

9. Your Responsibilities

By using Vellora's Services, you agree to:

• Obtain consent from all meeting participants before recording;
• Use the Services only for lawful purposes;
• Avoid uploading or sharing data that infringes privacy, intellectual property, or confidentiality rights.

You agree to indemnify and hold Vellora AI, Inc. harmless for any claims, damages, or liabilities arising from your misuse of the Services or failure to comply with applicable law.

10. User Rights

Depending on your jurisdiction (e.g., EU GDPR, UK GDPR, California CCPA/CPRA, or India DPDP), you may have rights to:

• Access, correct, or delete your personal information;
• Restrict or object to processing;
• Data portability;
• Withdraw consent (without affecting prior lawful processing).

Requests may be submitted to hello@vellora.ai. We will verify your identity before fulfilling any rights request.

11. International Transfers

We store and process data primarily in the United States.

By using our Services, you consent to the transfer of your data to the U.S. and any other jurisdiction where Vellora or its subprocessors operate, subject to applicable data protection laws.

12. Children's Privacy

The Services are not directed to individuals under 13 years old (or the minimum age in your jurisdiction). We do not knowingly collect data from minors.

13. Limitation of Liability

To the fullest extent permitted by law, Vellora's total aggregate liability for any claim related to the Services or this Privacy Policy is limited to the amount you paid for the Services in the one (1) month preceding the event giving rise to the claim.

14. Dispute Resolution and Governing Law

This Policy is governed by the laws of the State of Delaware, excluding conflict-of-law rules.

Any disputes arising from this Policy or your use of the Services shall be resolved through binding arbitration in accordance with the Federal Arbitration Act and the rules of the American Arbitration Association, with venue exclusively in Delaware, USA.

15. Changes to this Policy

We may update this Privacy Policy periodically. If material changes occur, we will post the new version on our website with the updated "Last Updated" date. Your continued use of the Services constitutes acceptance of the revised policy.

16. Contact Us

Vellora AI, Inc.
701 Tillery Street, Unit 12
Austin, Texas 78702 USA
Email: hello@vellora.ai