Privacy Policy

Welcome to Velva. We help you find the best skincare products with AI. This Privacy Policy explains what we collect, how we use it, and the choices you have.

Plain language summary: You upload a selfie and We analyze your skin to detect type and concerns, then recommend products. Your photos are encrypted, used only for analysis.

1) Data we collect

• Selfie photos you upload for analysis.
Technical data like device, browser, and approximate location derived from IP (for security and quality).
• Usage data such as pages viewed, clicks, and time spent (to improve the product).
• Optional : email or account details if you choose to save your results or receive updates.

2) How we use data

• Provide the core service: analyze your skin and generate personalized recommendations .
• Improve accuracy and user experience (e.g., measuring performance and fixing bugs).
• Prevent abuse and maintain security.
• Communicate with you about your account or changes to our services and policies.
• With your consent, send relevant tips or product updates (you can opt out anytime).

3) AI & image processing

Your photos are processed by our AI to detect your skin type (e.g., oily, dry, combination, sensitive) and concerns (e.g., acne, dark spots). Photos are encrypted in transit and at rest. We do not sell your data or share photos with advertisers.

Model training: We do not use your photos to train our models unless we explicitly ask and you provide informed consent .

4) Sharing

We share data only in limited situations:

• Vendors that help us operate (e.g., secure hosting, analytics) under strict contracts.
• Legal requests where we must comply with applicable law.
• Business transfers if we undergo a merger, acquisition, or asset sale, with notice where required.

We do not share your photos with third parties for their own marketing.

5) Data retention

We keep personal data only as long as necessary to provide the service and for legitimate business or legal purposes. Where possible, we delete or anonymize data after it’s no longer needed. You can request deletion at any time (see “Your rights”).

6) Security

We use industry-standard measures to protect your data, including encryption in transit (HTTPS) and at rest. No system is 100% secure, but we continuously work to safeguard information.

7) Your privacy choices & rights

Depending on your location (e.g., EU/EEA under GDPR, California under CCPA/CPRA), you may have rights to:

• Access, correct, or delete your personal data.
• Withdraw consent where we rely on consent.
• Object to or restrict certain processing.
• Receive a copy of your data (portability).
• Lodge a complaint with a data protection authority.

To exercise rights, contact us at support@velva.io (update this email as needed).

8) Cookies & similar technologies

We use necessary cookies to run the site and, with consent where required, analytics to understand usage. You can control cookies through your browser and device settings.

9) Children’s privacy

Velva is not directed to children under 13 (or the age required by local law). We do not knowingly collect data from children. If you believe a child provided us data, contact us to delete it.

10) International data transfers

If we transfer personal data across borders, we use appropriate safeguards (e.g., Standard Contractual Clauses) consistent with applicable law.

11) Changes to this policy

We may update this Policy from time to time. We’ll post the new date at the top. Material changes will be communicated where required.

12) Contact us

If you have questions or requests, email support@velva.io .

⚠️ Note: This template is provided for informational purposes and does not constitute legal advice. Please adapt it to your actual data practices and consult a qualified attorney.