Privacy Policy

This Privacy Policy describes how Velveteen Technologies Inc. ("we", "us", "our") collects, uses, and protects information through VLVTN (vlvtn.link).

1. Information We Collect

Account Information

When you create an account, we collect your email address, display name, and optionally a profile avatar. If you sign in with Google, we receive your name and email from Google's OAuth service.

Smartlink Content

Content you upload including artwork images, background images, avatars, download files, and text (titles, descriptions, streaming URLs).

Analytics Data

When visitors view your smartlinks, we collect anonymized analytics including: page views, link clicks, referring URLs, approximate geographic location (country/region derived from IP), device type, and browser. We do not store raw IP addresses in our analytics database.

Meta Pixel Data

If you configure a Meta Pixel on your smartlinks, conversion events are sent to Meta via their Conversions API. This data is governed by Meta's privacy policies. We encrypt your Meta access tokens at rest using AES-256-CBC encryption.

2. How We Use Your Information

• To provide and operate the smartlink service
• To display analytics about your smartlinks' performance
• To authenticate your identity and secure your account
• To send service-related communications (account verification, security alerts)
• To improve the service and fix issues

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

3. Data Storage & Security

Account data and smartlink metadata are stored in Supabase (PostgreSQL) with row-level security policies. Image uploads are stored on DigitalOcean Spaces (S3-compatible) with CDN distribution. Download files are stored in private Supabase Storage buckets with time-limited signed URLs.

We use industry-standard security measures including encrypted connections (TLS), encrypted credentials at rest, and secure authentication (including passkey/WebAuthn support).

4. Cookies

We use essential cookies for authentication session management. We do not use advertising or tracking cookies. If you configure a Meta Pixel on your smartlinks, Meta may set cookies on your visitors' devices in accordance with their own policies.

5. Data Retention

We retain your account data and smartlink content for as long as your account is active. Analytics data is retained indefinitely in aggregate form. If you delete your account, we will delete your personal data within 30 days, though anonymized analytics may be retained.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your smartlink data

To exercise these rights, contact us at the address below.

7. Children's Privacy

VLVTN is not intended for use by children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on the service.

9. Contact

For privacy inquiries or to exercise your data rights, contact:
Velveteen Technologies Inc.
Email: privacy@velveteen.ca

Last updated: March 2026