Legal
Privacy Policy
Last updated: April 2026
Who we are
Veln.ai is operated by Veln.ai, powered by Amplitude Ventures, based in Stavanger, Norway. When we say “we”, “us”, or “our”, we mean Veln.ai. When we say “you” or “your”, we mean you as a user of Veln.ai.
What we collect
We collect the minimum data needed to provide the service: email address (for authentication), company information you enter (your answers, documents, pitch deck content), and basic usage data (page views, feature usage). We do not sell your data to third parties.
How we use your data
Your company data is used solely to generate your investor materials (pitch decks, documents, data room). We send your answers to AI providers (OpenAI) to generate content. We do not use your data to train AI models. Usage data helps us improve the product.
Data storage
Your data is stored in Supabase (hosted in EU) with row-level security. Documents and exports are stored in Supabase Storage. Embeddings are stored in Pinecone. All data is encrypted in transit (TLS) and at rest.
Third-party services
We use: Supabase (database and auth), OpenAI (AI content generation), Pinecone (vector search), Stripe (payments), Google Tag Manager (consent-gated marketing analytics), and PostHog (product analytics, EU region). Each service processes only the minimum data needed for its function.
Product analytics (PostHog)
We track a deliberately small set of explicit product events so we can see where founders get stuck. The events we capture: session start, sign-up start, sign-up completion, truth drafted, truth approved, composer generated, document downloaded, document shared, upgrade clicked, upgrade completed, message sent, nudge sent, deadline created, admin invite sent, and org tier provisioned.
We do notuse session replay, DOM recording, heatmaps, or autocapture (which would record every click). We do not send IP addresses — they are anonymised before events leave your browser. Event data is stored on PostHog’s EU infrastructure. If you reject cookies on the banner, PostHog is never initialised and no product-analytics events are captured. You can export or delete all PostHog data associated with your account by emailing us.
Your rights
You can export all your data at any time from within the app. You can delete your account and all associated data by contacting us. Under GDPR, you have the right to access, correct, delete, and port your data.
Cookies
We use essential cookies for authentication and, when you accept the cookie banner, minimal cookies from Google Tag Manager (marketing measurement) and PostHog (product analytics). Rejecting the banner keeps every non-essential cookie disabled.
Contact
For privacy questions, contact hello@veln.ai.