Working draft, pending legal review
This text accurately describes what the site does with your data, but it has not yet been reviewed by a professional and some company details are missing. We publish it like this, with its gaps visible, because that is more useful and more honest than a page saying “in preparation”.
Privacy Policy
Last updated: August 26, 2026
This policy explains what personal data Veylo's website collects, why, who processes it, and what you can do about it.
It is written by describing what the site actually does rather than what documents like this usually say. If anything here does not match what you observe, tell us.
Who is responsible
Veylo, operating from Argentina and serving clients in Argentina, Spain, Mexico and the United States. For anything concerning personal data, write to veylo.info@gmail.com.
Pending: The registered legal name, tax identifier and registered address are missing. They are not filled in with an approximation.
What we collect
The site collects data only when you send it. There are no hidden forms and no passive collection of identifying data.
- Digital diagnosis
- Your name and email, plus company and phone if you fill them in. Also your answers to the thirteen questions and the result the system computes from them (level, score and suggested services).
- Contact form
- Your name, email, the type of enquiry, and — if you fill them in — company, phone and a free-text message.
- Footer newsletter
- The email address is validated in the browser and the submission is confirmed on screen, but nothing is stored and no provider is called. The feature is not connected yet.
- Technical data
- To limit form abuse we store an irreversible hash of your IP address, computed with a server-side secret. The IP address itself is never stored.
- Usage measurement
- Only if you accept measurement cookies. Before that decision the site loads no analytics tool and stores nothing in your browser.
What we use it for
We do not sell personal data, do not share it for advertising, and do not build profiles from it beyond the diagnosis result, which you see yourself.
- Answering your enquiry and following it up commercially.
- Computing and delivering your diagnosis result.
- Notifying the team by email when a new contact arrives.
- Protecting the forms from automated and repeated submissions.
- Understanding which content is useful, if you accepted measurement.
Who else processes it
We work with providers that process data on Veylo's behalf, solely to deliver the service:
- Supabase
- The database holding contacts, diagnosis answers and their results.
- Vercel
- Website hosting and server-side execution.
- Resend
- Sending the internal email notice when a contact arrives.
- Google Analytics
- Website usage measurement. Involved only if you accepted measurement cookies.
- WhatsApp (Meta)
- If you choose to message us via a link on the site, that conversation happens on Meta's platform under its own terms.
Where it is processed
These providers run infrastructure outside Argentina, mainly in the United States and the European Union. Submitting a form involves that international transfer.
How long we keep it
Contacts are currently kept for as long as the commercial relationship remains relevant. The system does not delete records automatically.
Pending: A concrete retention period and the matching automatic deletion still have to be defined and published. In the meantime you can ask us to delete your data and we do it by hand.
Your rights
You can ask to access, correct, update or delete your data, and withdraw consent for measurement at any time from the cookie policy.
To exercise any of these, write to veylo.info@gmail.com. We reply the same way.
In Argentina the Agencia de Acceso a la Información Pública is the supervisory authority for personal data. If you write to us from the European Union, the rights under the General Data Protection Regulation also apply to you.
Pending: The specific statutory references and the route for complaints to a supervisory authority need professional review before they can be treated as final.
Security
The browser never receives credentials for our database: every write happens on the server. Access to the internal panel is restricted by identity and by permissions the database itself verifies, and internal notes about a contact can only be added — never rewritten — by authorised people.
No system is infallible. If we detect an incident that affects you, we will tell you.
Changes
When this policy changes we update the date in the header. This version is a working draft and will be replaced by professionally reviewed text.