Privacy Policy

1. Data Collection

We collect only the information necessary to provide and improve the Service:

• Your email address for authentication and account-related communications
• Your name for workspace personalization and display within the platform
• Media files you explicitly upload to cloud storage for AI processing
• Project metadata and workflow configurations saved to your account

2. Payment Processing

All payment information is processed directly and securely by Stripe. Velva Design Labs FZE LLC does not store credit card numbers, debit card numbers, or any other raw payment card data on its servers. Your card details are handled entirely by Stripe in compliance with PCI DSS (Payment Card Industry Data Security Standard). We only receive confirmation of successful transactions, subscription status, and customer identifiers from Stripe to manage your account.

3. AI Model Providers

To provide AI generation services, your prompts and uploaded assets may be processed by third-party providers. These include:

• Fal.ai — Image generation, video generation, 3D model generation, upscaling, and segmentation
• Kling — Video generation
• Veo — Video generation
• Sora — Video generation
• Rodin — 3D model generation

These providers are committed to data security and process your data solely to fulfill the generation request. We do not retain AI-generated outputs on our servers beyond what is necessary to deliver them to your workstation. Generated content is stored in your cloud storage bucket under your control.

4. Usage Data

We track credit consumption, transaction history, and aggregate feature usage to ensure accurate billing and improve our node-based workstation. This includes the number and type of generation tasks executed, credits consumed, and subscription activity. We do not use third-party advertising trackers. Analytics, when present, are limited to aggregate usage patterns.

5. Local-First Architecture

Velva is designed with a privacy-first hybrid protocol. Node-based workflows, editor states, project settings, and user preferences are stored locally in your browser via IndexedDB and localStorage. This means:

• Your creative workflow data remains on your device by default
• Cloud sync is opt-in and triggered only when you save projects
• Clearing browser data will remove locally stored project data

6. Cloud Storage & Processing

When you upload media or save projects to the cloud, data is stored securely using Cloudflare R2 and Cloudflare Stream. Media files are encrypted in transit with TLS 1.3 and at rest. For video-intensive workflows, Cloudflare Stream handles transcoding according to industry-standard encryption protocols.

7. Data Sharing

We do not sell your personal data to third parties. We share data only with the following service providers, solely to operate the platform:

• AI model providers (Fal.ai, Kling, Veo, Sora, Rodin) to execute your generation requests
• Cloudflare for content delivery, media storage, and video transcoding
• Stripe for secure payment processing
• Authentication providers (Google, GitHub, Apple) for login

8. Cookies

Velva uses essential cookies for authentication session management. We do not use third-party advertising or tracking cookies.

9. Your Rights

You have the right to access, correct, and control your personal data. Specifically, you can:

• View and update your profile information at any time via your Profile settings
• Manage your subscription and payment methods through the Stripe Customer Portal in Settings
• Request deletion of your account and all associated data by contacting support@velva.ai
• Request a copy of your personal data held by Velva
• Withdraw consent for data processing at any time (which may limit your use of the Service)

Upon receiving a deletion request, we will remove your account information, cloud-stored media, and any associated metadata within 30 days.

10. International Users

Velva Design Labs FZE LLC is registered in Sharjah, United Arab Emirates and serves users globally. If you are located in the European Economic Area (EEA), United Kingdom, or any region with data protection regulations (such as GDPR or equivalent local laws), your rights under those regulations are respected. Data may be transferred to and processed in jurisdictions where our service providers operate. By using Velva, you consent to such transfers, which are safeguarded by appropriate contractual protections.

11. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated revision date. Continued use of Velva after changes constitutes acceptance of the updated policy.

12. Contact

Velva Design Labs FZE LLC
Business Centre, Sharjah Publishing City Free Zone
Sharjah, United Arab Emirates

If you have questions about this Privacy Policy or your data, contact us at support@velva.ai.