Privacy Policy — Veltorox

What Veltorox is

Veltorox is an AI-powered tool that helps contractors, subcontractors, and site supervisors turn rough job site notes into structured daily construction report PDFs. Reports are created for your own use and sent to GC/clients only when you explicitly approve them.

Data we collect

Account information: name, email address, company name, and role when you sign up.
Report content: project names, addresses, crew notes, weather, delays, safety observations, photos, and other details you enter when generating a report.
Sample form submissions: name, company, email, trade, and site update text entered on the free sample page.
Report generation logs: timestamps, IP address, plan type, and generation status — used to enforce usage limits and prevent abuse.
Email send logs: recipient email, send timestamp, and delivery status when you send a report to a GC or client.
Payment status: whether your account has an active paid plan (processed externally via Gumroad — we do not store card data).
Technical data: browser type, referring URL, and other standard server log data.

How we use your data

To generate AI-drafted construction reports from your site notes.
To deliver reports by email to GC/clients after you explicitly approve the send.
To enforce usage limits and prevent abuse of our free sample and AI generation features.
To communicate with you about your account, updates, and support.
To improve the product based on aggregate, anonymized usage patterns.

AI processing

When you generate a report, the text you enter (your raw site update) is sent to Google's Gemini API to produce the structured report draft. Google processes this text under their own terms and privacy policy. We recommend you do not include personally sensitive information (such as personal ID numbers or medical details) in site updates, especially during free sample generation.

Report privacy

Your reports are private by default and only visible to you when you are logged in.
Reports are never sent to a GC or client without your explicit approval — you must click "Send to GC" to trigger delivery.
If you choose to create a shareable link for a report, only the report content (work completed, crew, materials, safety notes, delays) is accessible via that link. Your account details, raw site notes, and other reports are never exposed.
You can disable a shareable link at any time.

Data sharing

We do not sell your data. We share data only with:

Supabase — our database and authentication provider.
Google Gemini API — to generate report drafts from your site updates.
Resend — to deliver report emails to GC/clients on your behalf.
Gumroad — to process payments. We do not receive or store your card details.

Data retention

We retain your reports, logs, and account data for as long as your account is active. You may contact us to request deletion of your data at any time.

Security

We use industry-standard practices to protect your data: encrypted connections (HTTPS), server-side API keys, row-level security in our database, and rate limiting to prevent abuse. No security system is perfect — please use a strong password and do not share your account credentials.

Contact

For privacy questions or data deletion requests, email us at hello@veltorox.org.