1. Introduction
Welcome to Vela ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy will inform you as to how we look after your personal data when you visit our application at vela.nafen.sbs (regardless of where you visit it from) and tell you about your privacy rights and how the law protects you.
2. The Data We Collect About You
We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
- Identity Data: First name, last name, and profile picture obtained via Google OAuth or standard registration.
- Contact Data: Your email address.
- Email Data: The content of your emails, which we access via the Gmail API to display within the application and process using Vela Intelligence for summarization and drafting replies at your explicit request. We do not persistently store your email content on our servers. Emails are fetched on-demand to display in your client.
- Technical Data: Authentication tokens required to securely communicate with Google APIs. These are encrypted and stored securely.
3. How We Use Your Data
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
- To provide the core functionality of the Vela email client (reading, organizing, and sending emails).
- To allow Vela Intelligence to summarize emails or draft replies. Your email content is securely passed to our Intelligence API for real-time processing and is immediately discarded. We strictly do not use your data, including Google workspace data, to develop, improve, or train generalized AI and/or ML models.
- To manage our relationship with you, including subscription and billing support.
4. Third-Party Services & Google API Limited Use
Vela utilizes third-party services to function effectively. We share necessary data with:
- Google: We use Google OAuth for authentication and the Gmail API to access your mailbox. Vela's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- Vela Intelligence: We use Vela Intelligence (powered by trusted third-party LLM providers) to power the intelligent summarization and drafting features. These providers are bound by strict zero-retention policies.
- Appwrite & Stripe: We use Appwrite Cloud to securely store your session data and encrypted access tokens, and Stripe to process payments.
5. Data Retention and Deletion
We retain your encrypted authentication tokens and profile data only for as long as your account is active. You can delete your account and clear all local data directly from the "Privacy" section in your Settings. Upon account deletion, all OAuth tokens are permanently destroyed, revoking our access to your Google account immediately. To prevent abuse of our services, we may retain a hashed version of your email address for up to 30 days post-deletion.
6. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. Your data is encrypted in transit and at rest where applicable.
6. Contact Us
If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, please contact us via the support channels provided in the application.