Privacy Policy

Vellym, UAB is the data controller responsible for the personal data described in this policy. If you have any questions about this policy or how we handle your data, contact us at privacy@vellym.com.

We collect the following categories of personal data:

• Account data — name, email address, and password (stored as a salted hash, never in plain text) when you sign up.
• Project content — the product briefs, brand assets (logos, screenshots), and any text you provide to direct or give feedback on a video.
• Usage data — pages visited, features used, and actions taken within the Service, collected to keep it running reliably and to improve it.
• Billing data — where applicable, payment details are collected and processed directly by our payment processor; we do not store full card numbers ourselves.
• Technical data — IP address, browser type, and device information, collected automatically for security and diagnostic purposes.

We use the data described above to:

• Provide, operate, and maintain the Service, including generating the videos you direct.
• Authenticate your account and keep it secure.
• Communicate with you about your account, changes to the Service, or support requests.
• Monitor and improve the Service’s performance and reliability.
• Comply with our legal obligations, including tax and accounting requirements.

Under the GDPR, we rely on the following legal bases to process your personal data:

• Contract — processing necessary to provide the Service you’ve signed up for.
• Legitimate interests — for security, fraud prevention, and improving the Service, balanced against your rights.
• Consent — where you’ve explicitly agreed, for example to receive marketing communications.
• Legal obligation — where processing is required to comply with applicable law.

We do not sell your personal data. We share data only with service providers who process it on our behalf under contract, strictly to operate the Service — for example, cloud hosting and object storage providers, our database and authentication provider, and our payment processor. Each is bound by data processing agreements consistent with GDPR requirements (see our Data Processing Agreement for details).

We may also disclose data where required by law, or to protect the rights, property, or safety of Vellym, UAB, our users, or others.

We retain personal data for as long as your account is active, or as needed to provide the Service. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we’re required to retain it for legal, tax, or accounting purposes.

Under the GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request erasure of your data (“the right to be forgotten”).
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with the State Data Protection Inspectorate of the Republic of Lithuania (Valstybinė duomenų apsaugos inspekcija), or your local supervisory authority.

To exercise any of these rights, contact us at privacy@vellym.com.

We use essential cookies required for the Service to function, such as keeping you signed in. Where we use any non-essential cookies (for example, analytics), we will ask for your consent before doing so, in line with applicable law.

Where a service provider we use processes data outside the European Economic Area, we ensure an adequate level of protection is in place, such as the European Commission’s Standard Contractual Clauses.

We apply reasonable technical and organizational measures to protect your data, including encryption in transit, access controls, and per-project data isolation. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

The Service is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this policy from time to time. If we make material changes, we will notify you by email or through the Service before the changes take effect. The “Last updated” date at the top of this page reflects the most recent revision.

If you have any questions about this Privacy Policy or how we handle your data, reach us at privacy@vellym.com, or by post at [registered office address], Lithuania.