Privacy Policy

1. Introduction

Veloxoft OOD ("we", "us", or "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and other applicable European Union data protection laws.

This policy applies to all personal data we process when you use our website, services, or interact with us in any way.

2. Data Controller

The data controller responsible for your personal data is:

Veloxoft OOD
Sofia, Bulgaria
Email: privacy@veloxoft.com

3. Personal Data We Collect

We may collect and process the following categories of personal data:

• Identity Data: Name, username, LinkedIn profile information
• Contact Data: Email address, phone number
• Technical Data: IP address, browser type and version, time zone, operating system
• Usage Data: Information about how you use our website and services
• Profile Data: Your preferences, feedback, and survey responses

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under Article 6 of the GDPR:

• Consent (Art. 6(1)(a)): Where you have given explicit consent for specific purposes
• Contract (Art. 6(1)(b)): Where processing is necessary for the performance of a contract
• Legal Obligation (Art. 6(1)(c)): Where we must comply with a legal obligation
• Legitimate Interests (Art. 6(1)(f)): Where processing is necessary for our legitimate business interests

5. How We Use Your Data

We use your personal data for the following purposes:

• To provide and maintain our services
• To process partner registration and authentication via LinkedIn
• To communicate with you about our services
• To improve our website and user experience
• To comply with legal obligations
• To protect our legitimate business interests

6. Data Sharing and Third Parties

We may share your personal data with:

• Service Providers: Third-party companies that help us operate our services (e.g., MongoDB Atlas for database hosting)
• Authentication Partners: LinkedIn for OAuth authentication
• Legal Authorities: When required by law or to protect our rights

We ensure all third parties process your data in accordance with GDPR requirements and have appropriate data processing agreements in place.

7. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Other legally approved transfer mechanisms

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Typically:

• Account data: Retained while your account is active, plus 3 years after deletion
• Transaction records: 7 years for legal compliance
• Marketing preferences: Until you withdraw consent

9. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access (Art. 15): Request a copy of your personal data
• Right to Rectification (Art. 16): Request correction of inaccurate data
• Right to Erasure (Art. 17): Request deletion of your data ("right to be forgotten")
• Right to Restriction (Art. 18): Request limitation of processing
• Right to Data Portability (Art. 20): Receive your data in a portable format
• Right to Object (Art. 21): Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

To exercise any of these rights, please contact us at privacy@veloxoft.com. We will respond within 30 days.

10. Cookies and Tracking

We use cookies and similar technologies to enhance your experience. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy. You can manage your cookie preferences through the cookie consent banner on our website.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Secure authentication mechanisms
• Regular security assessments
• Access controls and audit logging

12. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

14. Supervisory Authority

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with your local data protection supervisory authority. In Bulgaria, this is the Commission for Personal Data Protection (CPDP).

15. Contact Us

For any questions about this Privacy Policy or our data practices, please contact us:

Email: privacy@veloxoft.com
Address: Veloxoft OOD, Sofia, Bulgaria