Privacy notice

Last updated: 1 October 2026.

1. Controller and contact

The service is operated by Velora AI. Contact privacy@iavelora.it for privacy requests and to exercise your GDPR rights.

2. Data we process

• account data such as email address, protected credentials and recovery data;
• messages, prompts, documents or images you provide when using cloud features;
• technical and security data such as IP address, date and time, browser type, errors and usage counters;
• preferences, conversations and models stored locally in your browser.

3. Local and cloud processing

Local models process content on your device. When you select a remote model, agent, cloud image or voice feature, required content is sent to Velora servers and, where necessary, the selected AI provider. Documents inserted into context follow the selected model's processing path.

4. Purposes and legal bases

• providing the service and managing accounts: contract or pre-contractual steps;
• security, abuse prevention, diagnostics and continuity: legitimate interests;
• mandatory compliance: legal obligations;
• microphone, notifications or optional device features: consent or browser permission, which can be withdrawn.

5. Recipients and transfers

Data may be processed by hosting and infrastructure providers, including Heroku/Salesforce, and by AI providers activated by a request, which may include Groq, Google, OpenRouter, xAI, Hugging Face, Pollinations or AI Horde. Providers operating outside the EEA apply the relevant GDPR transfer safeguards and their own terms.

6. Retention

Account data is retained while the account is active or as needed for legal obligations, security and disputes. Local history, settings and caches remain on the device until deleted. External-provider retention depends on the selected function and the provider's notice.

7. Your rights

You may request access, correction, erasure, restriction, portability and objection, and withdraw consent without affecting prior processing. You may also complain to the Italian Data Protection Authority or your local supervisory authority.

8. Automated output and children

Velora AI generates content automatically but does not make decisions producing legal effects for users. Children must use the service with parental involvement and in accordance with the minimum age under applicable law.

9. Security and updates

We use reasonable technical safeguards, but no online service is risk-free. Updates are identified by the date shown above.