Privacy Policy

1. Who we are

Velora Studio ("we", "us") is a digital studio that builds websites, online stores, booking systems and client dashboards. The data controller is Velora Studio. You can reach us at hello@velorastudio.agency.

2. What we collect

Account data: your name, email, business name and the contents of your onboarding (business details, brand assets and project preferences).

Communications: messages and files you send through the client portal and support.

Billing data: plan and subscription status. Card payments are processed by Stripe — we never see or store your full card number.

Usage data: basic, privacy-friendly analytics about how the site and portal are used.

3. How we use it

To create and run your account, build and maintain your website, provide support, process billing, and improve our service. We do not sell your personal data.

4. Legal basis

We process your data to perform our contract with you (running your account and service), to comply with legal obligations (e.g. invoicing), and on the basis of your consent for optional analytics.

5. Processors we rely on

Supabase (authentication, database and file storage), Stripe (payments), Resend (transactional email), and a privacy-friendly analytics provider. Each only processes the data needed to provide its service, under its own terms.

6. Your rights

Under the GDPR and Spanish data-protection law (LOPDGDD) you can access, correct, export or delete your personal data, and object to or restrict certain processing. To exercise any of these, email hello@velorastudio.agency and we will respond within 30 days. You may also complain to the Spanish data-protection authority (AEPD).

7. Retention & security

We keep your data for as long as your account is active and as required to meet legal obligations, then delete or anonymise it. Access is restricted by role and protected by database row-level security.