Last updated: May 16, 2026
This Privacy Policy explains how Vellem ("Vellem", "we", "us", "our") collects, uses, and shares information when you use our website and services (the "Service"). We have written this in plain language and kept it short on purpose.
What we collect
Information you provide. When you use the brand kit builder, you may enter information including your brand name, industry, aesthetic preferences, and brand description. When you purchase, you provide your email address and payment information (handled by our payment processor, not stored on our servers).
Information collected automatically. We log standard web request information including IP address, browser type, device type, pages visited, referrer URL, and timestamps. We use cookies and similar technologies as described in our Cookie Policy.
Information from third parties. Our payment processor provides us with limited information needed to complete your purchase: transaction ID, amount, status, and the email address used for the transaction. We do not receive your card number or banking details.
How we use it
We use your information to (a) provide the Service, including generating and delivering your Kit, (b) communicate with you about your purchase, (c) improve the Service through aggregate analytics, (d) prevent fraud and abuse, and (e) comply with legal obligations. We do not use your information for behavioral advertising on third-party platforms.
We may use your inputs (brand name, industry, etc.) in aggregate, de-identified form to improve our generation system. We do not use individual customer data to train models that are made available to other Vellem customers in a way that would expose your specific brand identity.
Who we share it with
We share information only with: (a) service providers who help us operate the Service (hosting, payments, email delivery, analytics), bound by contract to use the information only as we direct; (b) law enforcement when required by valid legal process; (c) a successor entity in the event of a merger, acquisition, or sale of assets, subject to this Privacy Policy.
We do not sell your personal information. We do not share your personal information with advertisers for their independent use.
Your rights
Depending on your location, you may have rights under applicable law including:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate information.
- Deletion: Request deletion of your personal information, subject to our legal obligations to retain certain records.
- Portability: Request a copy of your information in a portable format.
- Objection: Object to certain processing activities.
- Opt out of sale (US): California residents and others under similar US state laws may opt out of any "sale" of personal information. We do not sell personal information; this right is acknowledged for completeness.
To exercise these rights, email privacy@vellem.io. We will respond within the time required by applicable law (generally 30 days). We may need to verify your identity before fulfilling certain requests.
Data retention
We retain your purchase records and the brand kit you generated for the lifetime of your account or as long as needed to provide the Service. You may request deletion at any time, subject to our legal obligation to retain certain transaction records (typically 7 years for tax purposes).
Data security
We use industry-standard security measures including TLS encryption in transit, encryption at rest for sensitive data, access controls limiting employee access to need-to-know, and regular security review. No system is perfectly secure; we cannot guarantee absolute security and do not warrant the security of any information you transmit to us.
International transfers
Vellem operates in the United States. If you are located outside the United States, your information will be transferred to and processed in the United States. We rely on Standard Contractual Clauses or equivalent legal mechanisms to enable lawful transfers from regions including the European Economic Area and the United Kingdom.
Children
The Service is not directed to children under 16. We do not knowingly collect information from children under 16. If we learn that we have collected such information, we will delete it. Parents or guardians who believe their child has provided information may contact us at privacy@vellem.io.
Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated policy at this URL with a new "Last updated" date. Material changes will be communicated by email to active customers where reasonable.
Contact
For privacy questions or to exercise your rights, contact us at privacy@vellem.io.