Privacy Policy

1. Who we are

velure.agency is operated by ИП INOVA, which acts as the data controller for the personal data described in this policy. Velure is an online platform for designing and sharing digital invitations. This policy explains what personal data we collect, why and your rights under applicable data-protection laws including the EU/UK GDPR.

2. Data we collect

• Account data — email, name, password hash and authentication identifiers.
• Invitation content — text, photos, music selections, dates and locations you add to your invitations.
• RSVP data — names and responses submitted by guests of invitations you publish.
• Payment data — handled by Paddle, our payment provider. We receive transaction metadata (amount, status, invoice id) but not card numbers.
• Usage data — IP address, device, browser type and analytics events needed to operate and improve the Service.

3. How we use your data

• to provide and maintain the Service;
• to render and deliver your invitations to your guests;
• to process payments and prevent fraud;
• to send transactional emails (receipts, RSVP notifications);
• to comply with legal obligations.

4. Legal bases

We process personal data under one or more of: performance of a contract (operating your account and invitations), legitimate interests (security, product improvement), legal obligation (tax, accounting), and consent where required.

5. Sharing your data

We share data only with vendors that help us run the Service, under appropriate data-processing terms:

• Supabase — database, authentication and file storage;
• Paddle — payment processing and tax compliance;
• email and analytics providers, where used.

We do not sell your personal data. Invitation pages you publish are publicly accessible to anyone with the link.

6. International transfers

Some of our vendors operate outside your country. When personal data is transferred internationally, we rely on Standard Contractual Clauses or equivalent safeguards.

7. Retention

We keep account and invitation data while your account is active. You can delete your account at any time, after which we remove personal data within a reasonable period, except where we must retain it for legal or accounting reasons.

8. Your rights

Depending on your location you have the right to access, correct, delete, restrict or port your personal data, and to object to certain processing. Contact us to exercise these rights. You may also lodge a complaint with your local data-protection authority.

9. Cookies

We use cookies and similar technologies to keep you signed in, remember preferences and measure traffic. You can disable non-essential cookies in your browser settings.

10. Contact

For privacy requests please use our contact page.