Privacy Policy

Effective June 15, 2026

Template pending review by legal counsel. Replace the bracketed placeholders and confirm the disclosures match your actual data practices before launch.

This Privacy Policy explains how [Company legal name] (“Velocity,” “we,” “us”) collects, uses, and shares information in connection with the Velocity factoring-agent portal (the “Service”).

Information we collect

  • Account information — name, email, phone, title, role, and organization, provided by you or your administrator.
  • Commission & financial data — invoices, settlements, attributions, and payments synced from your factoring systems (e.g. WinFactor, FactorFox) to calculate and display commissions.
  • Usage & device data — log data, IP address, and error diagnostics used to operate and secure the Service.

How we use information

To provide the Service (commission tracking, reporting, and reconciliation), to authenticate users, to send transactional and notification emails you have not opted out of, to monitor reliability and security, and to comply with legal obligations.

Service providers (sub-processors)

We share information with vendors that process data on our behalf, including:

  • Supabase — database, authentication, and storage
  • Vercel — application hosting
  • Resend — transactional email delivery
  • Sentry — error monitoring

We do not sell personal information. We disclose information when required by law or to protect the rights and safety of users and the Service.

Security

Tenant data is isolated per organization with row-level security; source credentials are stored encrypted in a secrets vault; access is restricted by role. No method of transmission or storage is perfectly secure, but we maintain administrative, technical, and physical safeguards appropriate to the sensitivity of the data.

Data retention

We retain account and financial records for as long as your account is active and as required to meet legal, accounting, and audit obligations. When you delete your account we de-identify your personal details while retaining the financial and audit records the law requires us to keep.

Your rights

You can export a copy of your data and request deletion of your account from Settings → Data & privacy. Depending on your jurisdiction (e.g. GDPR, CCPA) you may have additional rights to access, correct, or restrict processing of your personal information; contact us to exercise them.

Changes

We may update this policy from time to time. Material changes will be communicated through the Service or by email, and the effective date above will be revised.

Contact

Questions or requests: privacy@velocityportal.io. Security reports: security@velocityportal.io.