Privacy Policy

1. Introduction

Welcome to Velrix ("we," "our," or "us"). Your privacy and trust are fundamental to everything we do. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or engage with us.

Our Commitment: We are committed to protecting your privacy and using your information responsibly. We only collect what's necessary to provide you with exceptional service, and we never sell your personal information to third parties.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Contact us through our website forms — your name, email address, and optionally your company and budget, along with whatever you write in the message
• Request the automation assessment — your email address, and optionally a description of the process you have in mind
• Book a call through the scheduling link, which is operated by Google
• Email us directly

2.2 Automatically Collected Information

Two things measure traffic on this site, and neither of them records what you do on a page:

• Cloudflare Web Analytics runs on every visit. It sets no cookies and does not fingerprint your device. It reports which pages were loaded, roughly where in the world the request came from, and how quickly the page rendered.
• PostHog runs only if you agree to it. It counts page views and sets a cookie to avoid counting you twice. Session recording, click capture, and surveys are switched off, so it does not capture what you click, type, or look at.

We do not run advertising or marketing trackers of any kind, and we do not build profiles of visitors.

3. How We Use Your Information

We use the information we collect for various purposes, including:

• Providing and maintaining our services
• Responding to your inquiries and requests
• Sending you the assessment you asked for, and following up on it once
• Improving our website and services
• Analyzing usage patterns and trends
• Detecting and preventing fraud or security issues
• Complying with legal obligations

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

These are the specific third parties that process data on our behalf, and what each one receives:

• PostHog (United States): page view analytics, and only if you have agreed to it
• Cloudflare (United States): hosting, content delivery, and cookieless traffic measurement
• n8n, self-hosted by us at automation.velrix.co: receives what you submit through the contact and assessment forms, passes it to our inbox, and mails the assessment back to you
• Google (United States): the call booking link, if you use it

Beyond those, we may disclose information when required by law or to protect our rights, property, or safety, and in connection with a merger, acquisition, or sale of assets. We do not sell, trade, or rent your personal information.

5. Data Security

We take reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. In practice that means traffic to this site and to our form endpoint is encrypted in transit, access to the systems holding your information is limited to the people who need it, and we keep the number of places your information is stored as small as we can.

We are a small firm and we would rather tell you what we actually do than claim a certification we do not hold. We do not currently hold SOC 2, ISO 27001, or any equivalent audit.

While we use industry-standard security measures and continuously work to improve our protection methods, we want to be transparent that no method of transmission over the internet is completely secure. We are committed to promptly addressing any security concerns and will notify you immediately if any security incident affects your data.

6. Cookies and Tracking Technologies

This site sets one non-essential cookie, and only after you have said yes to it. There are no advertising or marketing cookies.

• Analytics (optional): if you agree, PostHog sets a cookie so that repeat visits are not counted as new ones. If you decline, the PostHog script is never loaded and the cookie is never set.
• Your answer itself: stored in your browser's local storage, not in a cookie, so that recording a refusal does not set the thing you refused.

You can change your answer at any time using the Analytics choice link in the footer of every page. Withdrawing is one click and takes effect immediately. You can also clear cookies through your browser settings.

7. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request transfer of your information
• Objection: Object to processing of your information
• Withdrawal: Withdraw consent at any time

To exercise these rights, please contact us using the information provided below.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Enquiries that do not turn into work are deleted within two years. Addresses that asked for the assessment are kept until you ask us to remove yours. Records relating to paid engagements are kept for as long as tax and accounting law requires. When information is no longer needed, we will securely delete or anonymize it.

9. International Data Transfers

Velrix operates from Istanbul, Türkiye, so your information is processed there. The providers listed in section 4 are based in the United States, which means information reaching them is transferred outside your country and, if you are in the European Economic Area or the United Kingdom, outside it too. Those transfers rely on the Standard Contractual Clauses in each provider's data processing terms.

If you would rather nothing of yours left your region at all, decline analytics and email us instead of using the form.

10. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

11. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: