Privacy
Privacy policy
Last updated 3 November 2026
This policy explains what personal data Velvet collects on velvet.design and in the Velvet app at app.velvet.design, why, and what you can ask us to do with it.
Who we are
Velvet AI LLC (in formation) ("Velvet", "we", "us") makes the website and app described here. For anything about this policy or your data, write to [email protected].
This website
velvet.design sets no cookies and runs no analytics or advertising trackers. It is served by Cloudflare, which processes technical request data such as IP addresses to deliver the site and protect it from abuse.
The app: what we collect
- Account details: your name and email address. If you sign in with Google, we receive your name, email address and profile picture from Google.
- What you give Velvet to work with: website addresses, files and brand material you upload or connect (for example from Figma, GitHub or Canva), the prompts you write, and the pages, films and visuals Velvet makes for you.
- Workspace information: the workspaces you belong to and the people you invite.
- Technical data: server logs such as IP address, browser type and the time of requests, used to run and secure the service.
Cookies in the app
The app uses only cookies it needs to work: one that keeps you signed in, and short-lived ones used during sign-in. We do not use advertising or analytics cookies.
How we use it
- To provide the service: reading your brand, building its standard, and making and checking work with it.
- To keep your account and workspaces secure.
- To answer you when you contact us.
We do not sell your personal data, and we do not use one customer's content to make work for another.
Who processes it for us
- Google Cloud hosts the app and its data.
- Cloudflare serves the website and handles our domain and email routing.
- AI model providers: to produce text, pages and pictures, the content needed for a request is sent to AI models through OpenRouter, which routes it to providers such as Anthropic, OpenAI and Moonshot AI.
- Google provides sign-in, if you choose it.
These providers may process data outside Switzerland and the European Economic Area, including in the United States.
How long we keep it
We keep your account and workspace content while your account is open. When you ask us to delete your account, we delete it and its content, except where we must keep something by law.
Your rights
You can ask us for a copy of your personal data, and ask us to correct or delete it, or to stop or limit how we use it. Write to [email protected]. You can also complain to your data protection authority: in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC).
Changes
If we change this policy, we will update the date at the top of this page.