Privacy policy

Services ExamBoot Inc. — a company incorporated in Canada (No. 1693549-4), registered office: 1321, rue des Céramistes, Québec (Québec) G3K 0R2, Canada.

For any question or request about your data: contact@velynix.app

• Account: email, name, profile picture (if you sign in with Google), chosen language.
• Content: your idea, blueprint, ventures, folders and tasks, the content you generate, your conversations with the assistant.
• Usage: activity log, usage counters, weekly digest opens (first-party pixel, no third party).
• Billing: handled by Stripe — no card data ever passes through our servers.
• Connections you enable: third-party access tokens, encrypted at rest.

• Providing the service (analysis, action plan, tasks, content): performance of the contract.
• Billing subscriptions: performance of the contract and accounting obligations.
• Securing the service and preventing abuse (quotas, activity log): legitimate interest.
• Emailing you (daily reminder, weekly digest): legitimate interest, with one-click opt-out.

• Hostinger (application and database hosting, United States – Boston 2 region)
• Anthropic (AI generation — your data is not used to train the models)
• Stripe (payments and billing)
• Resend (transactional emails, reminders and digest)
• Google (OAuth sign-in; Google Calendar, Gmail and Search Console if you enable them)
• Inngest (background job execution)
• Hunter.io (published professional contact details, through your own Hunter.io account, if you enable outbound prospecting)
• DataForSEO (search volumes, through your own credentials, if you configure them)
• Higgsfield (image and video generation, if you use it in the content studio)
• Telegram (phone reminders, if you link the bot)

Some of these processors are established outside Canada and the European Union, notably in the United States. Transfers rely on the contractual safeguards offered by those providers.

If you enable contact sourcing and email sequences (Pro features), Velynix processes personal data of third-party professionals on your behalf. Roles are as follows:

• You are the controller and the sender: you decide who to contact, and emails go out from YOUR mailbox (your domain, your reputation).
• Services ExamBoot Inc. is your processor (GDPR art. 28): the tool stores contacts and orchestrates sending, on your instructions.
• Hunter.io supplies published professional contact details through your own account; Gmail sends from your mailbox.

Legal basis relied upon: legitimate interest for B2B prospecting, where the message concerns the person's professional role. Every imported contact is traceable (source, date, criteria). Every message carries the sender's identification, a working unsubscribe link and — on first contact — the origin of the data (GDPR art. 14). Unsubscribing is immediate, global, and the address is never contacted again.

These features require a processing agreement between you and Services ExamBoot Inc., and compliance with the applicable framework (GDPR, CASL in Canada). A detailed notice is available on request at contact@velynix.app.

TLS encryption in transit. Access tokens for the services you connect (Google Calendar, Gmail, social networks…) and the keys you entrust to us (Hunter.io, DataForSEO) are encrypted at rest with AES-256-GCM.

Access to your data is partitioned by workspace and verified server-side on every request. MCP server keys are never stored in clear text — only their hash is.

Your data is kept for as long as your account exists. Account deletion is immediate and effective: it removes all of your data, including integration tokens.

Accounting records related to subscriptions are retained by Stripe for the period required by law.

From Settings → Data and account: export all of your data (JSON) at any time, or permanently delete your account.

For any other request — access, rectification, objection, portability, restriction — write to contact@velynix.app. You may also contact the competent authority: the Commission d'accès à l'information du Québec, or the data protection authority of your country of residence.

Velynix only uses necessary cookies: authentication session, chosen language, active venture, and CSRF protection for OAuth connections.

No advertising cookies, no third-party trackers.

The daily reminder and the weekly digest can be switched off in one click under Notifications, or from the footer of every email.

Sign-in emails (magic link) are required for the service to work and cannot be disabled.