Privacy Policy

1. Information we collect

Veloci collects information you provide directly, including:

• Account details (name, email, business name)
• Restaurant configuration and menu data
• Order history and transaction records
• Billing information (processed securely via Stripe)
• Support communications

2. How we use your information

We use your information to:

• Provide and maintain the Veloci platform
• Process orders via phone, web, SMS, and WhatsApp
• Power the dashboard, kitchen display, and driver tracking
• Detect fraud and improve platform security
• Send service updates and billing notifications

3. Data sharing

We do not sell your personal data. Information is shared only with infrastructure partners (cloud hosting, payment processing, messaging providers) that are required to deliver the service.

4. GDPR Rights (EU Residents)

If you are located in the European Economic Area, you have the following rights:

• Right of access: Request a copy of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data ("right to be forgotten")
• Right to data portability: Request your data in a machine-readable format
• Right to object: Object to processing based on legitimate interest
• Right to restrict processing: Request limitation of how we use your data

To exercise these rights, contact us at privacy@veloci.online.

5. Ghana Data Protection Rights (Ghana Residents)

If you are located in Ghana, your data is processed in accordance with the Data Protection Act 2012 (Act 843). Veloci B.V. is registered with the Ghana Data Protection Commission (DPC).

DPC Registration No.: [Pending — registration in progress]

• Right of access: Request a copy of your personal data (response within 21 days)
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data where no legal retention obligation applies
• Right to object: Object to processing of your personal data

To exercise these rights or to contact the Ghana DPC: privacy@veloci.online or the Ghana Data Protection Commission at info@dataprotection.org.gh.

7. Legal Basis for Processing

We process your data based on contractual necessity (to provide our services), legitimate interest (to improve our platform), and consent (for marketing communications).

8. Data Transfers

Your data may be processed outside the EEA by our service providers (Supabase, Stripe, Vercel). These transfers are protected by Standard Contractual Clauses.

9. Data Retention

We retain account and profile data for as long as your account is active. After account deletion, personal identifiers are removed within 30 days. Order and transaction records are retained in anonymised form for 7 years to comply with Dutch and Ghanaian tax and financial record-keeping obligations.

10. Contact

For privacy questions, email us at privacy@veloci.online