Privacy Policy

Last updated January 01, 2024

This privacy notice for Velaflame ("we", "us", or "our"), describes how and why we might collect, store, use, and/or share ("process") your information when you use our services ("Services"), such as when you:

• Download and use our mobile application (Velaflame), or any other application of ours that links to this privacy notice
• Engage with us in other related ways, including any sales, marketing, or events. 

1. WHAT PERSONAL DATA IS COLLECTED BY VELAFLAME?

Personal Information Provided by You

When you install Velaflame, you will be asked to provide personal information.  All personal information that you provide to us must be true, complete, and accurate.  The personal information we collect may include the following:

• Email Address
• Username

Sensitive Information

We do not process sensitive information.

Usage Information

We collect data about activities you perform in Velaflame, like changing any setting of the controlled devices.

Application Data

We collect information like the configuration and state published by the controlled devices.

• Geolocation Information.  We may request access or permission to track location-based information from your mobile device, either continuously or while you are using our mobile application(s), to provide location-based services such as device provisioning.  This information is primarily needed to maintain the security and operation of our application(s).

2. PURPOSE FOR COLLECTION

• Provide functionality to control devices
• Customize your experience
• Troubleshoot and improve our service
• Provide secure access to your own devices only by your email address
• Enhance business opportunities

3. LAWFUL BASIS FOR PROCESSING PERSONAL DATA

We process your personal data for the purposes described in this Policy, based on the following legal grounds:

Your consent

With your consent or at your request, we collect and store your personal information within the scope of your consent/request. You can withdraw such consent at any time by contacting us.

Legitimate Interest

We process your information for our legitimate interests such as providing support for the products you use, operating our business, meeting our contractual obligations, and protect the security of our systems and our customers.

Compliance with legal obligation

We process your data when we have a legal obligation to do so, for example, if we are responding to a legal process or an enforceable governmental request.

If you are located in Canada, this section applies to you.

We may process your information if you have given us specific permission (i.e. Express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (i.e. Implied consent).

In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent, including for example:

• If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way
• For investigations and fraud detection and prevention
• For business transactions provided certain conditions are met
• If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim
• For identifying injured, ill, or deceased persons and communicating with next of kin
• If we have reasonable grounds to believe an individual has been, is or may be victim of financial abuse
• If it is reasonable to expect collection and use with consent would compromise the availability or the accuracy of the information and the collection is reasonable for purposes related to investigation a breach of an agreement or a contravention of the laws of Canada or a province
• If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records
• If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which the information was produced
• If the collection is solely for journalistic, artistic, or literary purposes
• If the information is publicly available and is specified by the regulations

4. WHERE WE STORE AND PROCESS DATA

We store and process all the relevant information in Amazon Web Services (AWS) servers in United States of America (us-east-1 region) only after explicit consent from individual who personal data is stored and processed.

5. DATA RETENTION

The data is retained as long as you are an active user on our system. We will notify you after the login is identified as dormant for “one year” and will delete the login and associate data after “ninety days” of notification.

6. DATA RELATED TO MINORS

We do not knowingly solicit data from or market to children under 18 years of age.  If you are under 18 years old or you are a minor pursuant to the laws and regulations of the place in which you reside, we recommend you to ask your parents or guardians to read this Policy and use our services or provide your information to us with the prior consent from your parents or guardians. If your guardians do not allow you to use our services or provide your information to us according to this Policy, please stop using our services immediately and give a notice on time so that we can react accordingly.  If you become aware of any data we may have collected from children under the age of 18, please contact us at info@velaflame.com

7. PRIVACY RIGHTS

In some regions (like Canada), you have certain rights under applicable data protection laws.  These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; (iv) if applicable, to data portability; and (v) not to be subject to automated decision-making.  In certain circumstances, you may also have the right to object to the processing of your personal information.  You can make such a request by contacting us by using the contact details provided in the section "PRIVACY CONTACT" below.

Account Information

If you would like to review or change the information in your account or terminate your account, you can log in to your account and update your user account.  Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases.  However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements.

We may disclose your personal information with our service providers pursuant to a written contract between us and each service provider.

We may use your personal information for our own business purposes, such as for undertaking internal research for technological development and demonstration.  This is not considered to be "selling" of your personal information.

We have not disclosed, sold, or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months.  We will not sell or share personal information in the future belonging to website visitors, users, and other consumers.

California Consumer Privacy Act (CCPA)

This section applies solely to residents of the State of California, in compliance with the California Consumer Privacy Act (CCPA).

Your CCPA Rights

As a California resident, you have the following rights under the CCPA:

• Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources from which we collected the information, the purposes for collecting it, and the third parties with whom we share your information.
• Right to Delete: You have the right to request the deletion of your personal information that we have collected from you, subject to certain exceptions.
• Right to Opt-Out: You have the right to opt-out of the sale of your personal information to third parties. We do not sell your personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights, such as denying services, charging different prices, or providing a different level or quality of services.

Exercising Your CCPA Rights

To exercise your CCPA rights, you can submit a verifiable consumer request by contacting us at [Your Contact Information]. We may need to request additional information to verify your identity and ensure the security of your personal information.

Authorized Agents

You may designate an authorized agent to make requests under the CCPA on your behalf. Your authorized agent must provide a power of attorney or written authorization and verify their own identity.

Response to Requests

We will respond to verifiable consumer requests within 45 days, but we may extend this period by an additional 45 days when necessary, providing notice and an explanation for the extension.

Contact Information

If you have any questions or concerns about our CCPA compliance or if you wish to exercise your CCPA rights, please contact us at info@velaflame.com.

8. UPDATES TO THIS NOTICE

This Privacy Notice is subject to change. This policy is provided to facilitate the rights of natural persons with regard to the processing of personal data under Directive 95/46/EC (General Data Protection Regulation), also known as the GDPR. We hope that the above content concerning services and this web site are as concise, transparent, and intelligible as possible.

9. PRIVACY CONTACT

If you need to get in touch about accessing your data stored on our servers, or for any another complaint or query, please reach out to us at info@velaflame.com.