Privacy Policy

Last updated: 30 March 2026  |  Effective immediately

Vela ("we", "our", "us") is operated by Marvanova. This Privacy Policy explains how we collect, use, store, and protect your information when you use our property management CRM platform at velacrm.app.

By using Vela, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the service.

1. Information We Collect

We collect information in the following ways:

• Account information: name, email address, and password when you register.
• Billing information: your payment details are handled entirely by Stripe. We never see or store your card number — only a Stripe Customer ID token.
• Usage data: properties, tenants, leads, rent payment records, and other CRM data that you voluntarily enter into the platform.
• Technical data: browser type, IP address, and page interaction logs for security and debugging purposes.

2. How We Use Your Information

• To operate and maintain the Vela service.
• To process your subscription payments via Stripe.
• To send you service emails (account confirmations, billing receipts, important updates).
• To improve the product based on aggregated, anonymous usage patterns.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Data Security & Isolation

Your data is stored on Supabase (hosted on AWS) with Row Level Security (RLS) enforced at the database level. This means:

• Your properties, tenants, and leads are cryptographically scoped to your account only.
• No other user — and no Vela employee — can access your client data without your credentials.
• All data is transmitted over TLS/HTTPS encryption.

4. Data Retention

We retain your data for as long as your account is active. If you cancel your subscription, your data remains accessible for 30 days, after which you may request deletion. To request full deletion of your account and all associated data, email support@velacrm.app.

5. GDPR & UK Data Protection

Vela is designed for users in the United Kingdom and complies with the UK GDPR and Data Protection Act 2018. You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure of your data ("right to be forgotten").
• Object to processing or withdraw consent at any time.

To exercise any of these rights, contact us at support@velacrm.app.

6. Cookies

Vela uses only functional cookies — specifically the Supabase authentication session token stored in your browser's localStorage. We do not use advertising or tracking cookies.

7. Third-Party Services

• Supabase – authentication and database hosting.
• Stripe – payment processing. See Stripe's Privacy Policy.
• Google Fonts – typography (font files loaded externally).

8. Contact

For any privacy-related queries, contact: support@velacrm.app
Operated by Marvanova, United Kingdom.