Політика конфіденційності

This Privacy Policy explains how Velway LLC, doing business as Velway AI ("Velway AI", "we", "us", or "our"), collects, uses, discloses, and protects personal information when you visit https://velway.ai, contact us, submit a form, request information about our services, or otherwise interact with us in a business context.

1. Who We Are

Data controller / business: "Velway" LIMITED LIABILITY COMPANY.
Doing business as: Velway AI.
Registered address: Khoryva 32, Kyiv 04071, Ukraine.
Privacy contact: privacy@velway.ai.

2. Personal Information We Collect

We may collect the following categories of personal information, depending on how you interact with us:

Information you provide directly

• Business identity and contact information, such as name, business email address, phone number, company name, role, and job title.
• Information you submit through contact forms, consultation requests, email, or other communications with us.
• Information you provide during business discussions, discovery calls, events, or other professional interactions.

Information collected automatically

• Device and technical data, such as browser type, device type, operating system, language, and approximate location derived from IP address.
• Website usage and event data, such as pages viewed, session activity, referral source, clicks, scrolling, and interactions with website elements.
• Cookie and similar technology identifiers, where permitted by applicable law and your consent preferences.

Information from other business sources

Where permitted by applicable law, we may receive professional contact information from referrals, business partners, event organisers, public professional profiles, or other publicly available business sources. When applicable, we provide privacy information in accordance with the relevant legal requirements.

Please do not submit sensitive personal information, special-category data, or confidential client data through general website forms unless we specifically request it and an appropriate legal and security framework is in place.

3. How We Use Personal Information and Our Legal Bases

We use personal information only for defined business purposes. Where the GDPR or UK GDPR applies, the table below also identifies the legal bases we may rely on.

Where we rely on legitimate interests, those interests may include operating and protecting our business, responding to business inquiries, developing professional relationships, improving our services, preventing misuse, and maintaining the security of our website and systems. We balance those interests against the rights and interests of the individuals concerned.

4. Website Analytics and Tracking Technologies

We currently use Google Analytics 4 (GA4) to understand how visitors use our website and to measure website performance. GA4 may collect information such as session statistics, approximate geolocation, browser and device information, page views, and interaction events. GA4 uses first-party identifiers such as the _ga cookie when analytics storage is permitted.

Google Tag Manager is used to manage and deploy website tags. Tag Manager itself is a tag-management system; the information collected depends on the tags that are configured through it.

Where required by applicable law, non-essential analytics or advertising technologies will be activated only after the required consent has been obtained. For details about cookies, their purposes, and how to manage your choices, please see our Cookie Policy.

Our current GA4 configuration retains user- and event-level data for up to 14 months. Google may retain aggregated reporting data according to its own product settings and policies.

5. CRM, Forms, and Business Communications

We may use HubSpot or similar CRM and form-management tools to process website inquiries, manage professional contacts, organise sales and marketing activities, and maintain records of communications. When a form is made available on our website, the information requested will be limited to what is reasonably necessary for the relevant business purpose.

If you contact us by email or through a form, we may retain the communication and related business contact information for follow-up, relationship management, recordkeeping, and compliance purposes.

6. Marketing Communications

We may send business-to-business marketing communications where permitted by applicable law. You can opt out of marketing emails at any time by using the unsubscribe mechanism in the message, where available, or by contacting us at privacy@velway.ai.

Opting out of marketing does not prevent us from sending necessary service, security, legal, or transactional communications.

7. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients when reasonably necessary:

• Website hosting, cloud infrastructure, security, and IT service providers.
• Analytics and tag-management providers, including Google, subject to applicable consent requirements.
• CRM, form, communications, and scheduling providers, including HubSpot where used.
• Professional advisers, including legal, accounting, tax, insurance, and compliance advisers.
• Business partners or contractors where necessary to perform a requested service and subject to appropriate confidentiality and data-protection obligations.
• Governmental, regulatory, law-enforcement, or judicial authorities where disclosure is legally required or necessary to protect legal rights.
• A buyer, investor, successor, or other relevant party in connection with a merger, acquisition, financing, restructuring, or sale of all or part of our business, subject to appropriate safeguards.

We do not sell personal information for monetary consideration. If our future use of advertising technologies is treated as a "sale", "sharing", or targeted advertising under an applicable U.S. state privacy law, we will provide the notices and opt-out mechanisms required by that law.

8. International Data Transfers

Velway AI operates internationally. Personal information may therefore be processed in countries other than the country in which it was collected, including the United States and countries where our service providers operate.

Where the GDPR or UK GDPR applies and personal information is transferred internationally, we use legally recognised safeguards as required, which may include adequacy decisions, Standard Contractual Clauses, the UK International Data Transfer Agreement or UK Addendum, or another lawful transfer mechanism. Information about applicable safeguards may be requested at privacy@velway.ai.

9. Data Retention

We keep personal information only for as long as reasonably necessary for the purposes described in this Policy. The period depends on the type of information, the nature of our relationship with you, legal and contractual requirements, security needs, and whether the information is needed to establish, exercise, or defend legal claims.

Examples of the criteria we apply include:

• Business inquiry and CRM records: retained while the relationship or legitimate follow-up remains active, and for an appropriate period afterwards for business, compliance, and dispute-resolution purposes.
• Contract and service records: retained for the term of the relationship and for the period required by applicable legal, accounting, tax, or limitation rules.
• Website analytics: user- and event-level GA4 data is currently configured for a retention period of up to 14 months.
• Consent and preference records: retained as necessary to demonstrate and respect your choices.

10. Your Privacy Rights

EEA and UK

If the GDPR or UK GDPR applies to you, you may have rights including access, rectification, erasure, restriction of processing, data portability, objection to certain processing, and withdrawal of consent where processing is based on consent. You also have the right to object to direct marketing at any time.

You may also lodge a complaint with the data-protection supervisory authority in your country. We encourage you to contact us first so we can try to resolve the issue.

United States

Depending on your state of residence and whether the relevant law applies to Velway AI, you may have rights to request access to, correction of, deletion of, or portability of personal information, and to opt out of certain sales, sharing, targeted advertising, or profiling. You may also have the right not to be discriminated against for exercising your privacy rights.

California residents may have rights under the California Consumer Privacy Act, as amended, if and to the extent that the law applies to Velway AI. We will provide any notices, request methods, and opt-out mechanisms required by applicable law.

How to exercise your rights

To submit a privacy request, contact us at privacy@velway.ai. Please describe your request and provide enough information for us to identify the relevant records. We may need to verify your identity before completing certain requests. An authorised agent may submit a request where permitted by applicable law, subject to appropriate verification.

11. Automated Decision-Making

We do not currently use personal information collected through this website to make solely automated decisions that produce legal or similarly significant effects on individuals. If this changes, we will update this Policy and provide any disclosures or rights required by applicable law.

12. Security

We use reasonable administrative, technical, and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure. However, no method of internet transmission or electronic storage can be guaranteed to be completely secure.

13. Children's Privacy

Our website and services are intended for business and professional users and are not directed to children. We do not knowingly collect personal information from children through the website. If you believe a child has provided personal information to us, please contact privacy@velway.ai.

14. Third-Party Websites and Services

Our website may contain links to third-party websites, platforms, or services. Their privacy practices are governed by their own policies. We are not responsible for the content, security, or privacy practices of third parties that we do not control.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, technologies, services, or legal requirements. The updated version will be posted on this page with a revised "Last updated" date. Where required by law, we will provide additional notice or obtain consent for material changes.

16. Contact Us

For questions about this Privacy Policy or our privacy practices, or to exercise a privacy right, contact:

Velway LLC
Khoryva 32, Kyiv 04071, Ukraine
privacy@velway.ai