Legal

Privacy Policy

Your privacy matters. This policy explains how Velorik handles your data when you use our platform and services.

Data Controller

Velorik, registered in The Netherlands under KVK number 42026404, is the data controller responsible for your personal data. Velorik is committed to compliance with the General Data Protection Regulation (GDPR) and applicable Dutch data protection law.

This policy is effective as of April 2026 and will be updated as Velorik's services evolve.

Information We Collect

We collect information you provide when creating an account, such as your name, email address, and organization details. We also collect usage data including API call logs and platform interaction metrics to improve our services.

Legal Basis for Processing

Under the GDPR, we process your personal data based on the following legal grounds: performance of a contract (to provide our platform services), legitimate interests (to improve and secure our services), compliance with legal obligations (fiscal and tax reporting requirements), and your consent where applicable.

How We Use It

Your information is used to operate and maintain the Velorik platform, process transactions, enforce compliance requirements, and communicate important service updates. We do not sell your personal data to third parties.

Data Security

Velorik employs industry-standard encryption, access controls, and monitoring to protect your data. All API traffic is transmitted over TLS, and sensitive credentials are stored using secure hashing algorithms.

International Data Transfers

Where personal data is transferred outside the European Economic Area, Velorik ensures appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

Data Retention

We retain your data for as long as your account is active or as needed to provide our services. Fiscal transaction records may be retained longer to satisfy regulatory requirements.

Your Rights Under GDPR

Under the GDPR, you have the right to access, rectify, erase, restrict processing of, and port your personal data. You also have the right to object to processing and to withdraw consent at any time. To exercise these rights, contact us using the details below and we will respond within 30 days. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Contact Us

If you have questions about this privacy policy or your personal data, please reach out to us at privacy@velorik.io.