Privacy Policy - Veloxia

1. Introduction

Veloxia ("we," "us," or "our") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI financial intelligence services.

We operate in accordance with Singapore's Personal Data Protection Act 2012 (PDPA) and maintain the highest standards of data protection. Your financial information is sensitive, and we treat it with appropriate care and security.

For questions about this policy or our data practices, please contact us at [email protected].

2. Information We Collect

2.1 Personal Information

We collect the following types of personal information:

Contact details: name, email address, phone number, mailing address
Account credentials: username, password (encrypted), authentication information
Identity verification: NRIC/passport information for compliance purposes

2.2 Financial Information

Depending on your service, we may collect:

Bank account information and transaction history
Income sources and employment details
Investment accounts and portfolio information
CPF account details (for Singapore residents)
Property ownership and mortgage information
Business financial data (for professional services clients)
Expense categories and spending patterns

2.3 Usage Information

We automatically collect information about how you interact with our services:

Device information: IP address, browser type, operating system
Usage data: features accessed, time spent, interaction patterns
Cookies and similar technologies for service functionality and analytics

2.4 Communications

Content of your communications with our support team, including emails, chat messages, and phone conversations (which may be recorded with your consent).

3. How We Use Your Information

3.1 Service Delivery

Provide AI financial analysis and insights tailored to your situation
Generate reports, visualizations, and recommendations
Facilitate coordination features (for couple services)
Track utilization and project economics (for professional services)
Support transition planning and scenario modeling

3.2 Service Improvement

Enhance AI model accuracy and relevance
Identify and fix technical issues
Develop new features and capabilities
Understand usage patterns to optimize user experience

3.3 Communication

Respond to inquiries and provide customer support
Send service-related notifications and updates
Provide educational content about financial topics (with your consent)
Notify you of material changes to our services or policies

3.4 Legal and Compliance

Comply with applicable laws and regulations
Respond to legal process and government requests
Protect against fraud and security threats
Enforce our terms of service

4. Legal Basis for Processing

Under Singapore's PDPA, we process your personal data based on the following legal grounds:

Consent: You have given us explicit consent to process your information for specific purposes
Contract Performance: Processing is necessary to fulfill our service agreement with you
Legitimate Interests: We have legitimate business interests that are balanced against your privacy rights
Legal Obligations: We must process data to comply with Singapore laws and regulations

5. Data Sharing and Disclosure

5.1 We Do Not Sell Your Data

We never sell your personal or financial information to third parties. Your data remains confidential and is used solely for providing our services to you.

5.2 Service Providers

We share limited information with trusted service providers who help us operate our services:

Cloud hosting providers (Singapore-based infrastructure)
Payment processors for subscription billing
Customer support platforms
Analytics services for service improvement

All service providers are contractually bound to protect your data and use it only for specified purposes.

5.3 Legal Requirements

We may disclose information when required by Singapore law, legal process, or government request, or when necessary to protect our rights, property, or safety.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to the same privacy protections.

6. Data Security

We implement comprehensive security measures to protect your information:

6.1 Technical Safeguards

Bank-level encryption (AES-256) for data at rest and in transit
Secure Socket Layer (SSL) technology for all web communications
Regular security vulnerability assessments and penetration testing
Multi-factor authentication for account access
Automated backup systems with encrypted storage

6.2 Organizational Safeguards

Strict access controls limiting employee data access to job-essential functions
Comprehensive employee training on data protection and privacy
Regular security audits and compliance reviews
Incident response procedures for potential data breaches

6.3 Data Location

Your data is stored on secure servers located in Singapore, ensuring compliance with local data residency requirements and providing additional legal protections under Singapore law.

7. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

Active Accounts: Data is retained while your subscription remains active
Cancelled Accounts: Data is retained for 90 days after cancellation to allow reactivation, then securely deleted
Legal Requirements: Some data may be retained longer to comply with tax, accounting, or legal obligations (typically 7 years)
Aggregated Data: Anonymized, aggregated data may be retained indefinitely for statistical analysis and service improvement

You may request earlier deletion of your data by contacting [email protected], subject to legal retention requirements.

8. Your Rights

Under Singapore's PDPA, you have the following rights regarding your personal data:

8.1 Right to Access

You may request a copy of the personal data we hold about you. We will provide this within 30 days of your request.

8.2 Right to Correction

You may request correction of inaccurate or incomplete personal data. You can update most information directly through your account settings.

8.3 Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time. Note that this may affect our ability to provide certain services.

8.4 Right to Data Portability

You may request your data in a structured, machine-readable format for transfer to another service provider.

8.5 Right to Deletion

You may request deletion of your personal data, subject to legal retention requirements.

8.6 Right to Lodge a Complaint

If you believe we have mishandled your personal data, you may lodge a complaint with the Personal Data Protection Commission of Singapore.

To exercise any of these rights, please contact [email protected] with your request. We will respond within the timeframes required by PDPA.

9. Cookies and Tracking

We use cookies and similar technologies to provide and improve our services. For detailed information about our cookie practices, please see our Cookie Policy.

Essential cookies required for service functionality cannot be disabled. You may control optional cookies through your browser settings or our cookie preference center.

10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us immediately at [email protected].

11. International Data Transfers

Your data is stored and processed in Singapore. We do not routinely transfer personal data outside Singapore. If international transfers become necessary, we will ensure appropriate safeguards are in place and notify you in accordance with PDPA requirements.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. Material changes will be communicated through:

Email notification to your registered email address
Prominent notice in your account dashboard
Updated "Last Updated" date at the top of this policy

Continued use of our services after notification constitutes acceptance of the updated policy. If you disagree with changes, you may cancel your subscription.

13. Contact Information

Data Controller: Veloxia

Address:
138 Market Street, #24-02 CapitaGreen
Singapore 048946

Email: [email protected]

Phone: +65 6291 5847

For privacy-related inquiries, please clearly mark your communication as "Privacy Inquiry" to ensure prompt routing to our data protection team.