Privacy Policy
1. Who we are
Velintis ("we", "us", "our") is an AI-powered M&A synergy intelligence platform. We process documents uploaded by our clients and their counterparties to identify and quantify merger synergies.
For enquiries about this policy, contact us at: contact@velintis.com
2. What data we collect
We collect the following categories of data:
- Account information: Name, email address, and organisation name provided when accessing the platform.
- Uploaded documents: Files uploaded to the platform for analysis, including PDFs, spreadsheets, and word processing documents. These may contain commercially sensitive business information.
- Usage data: Log data including IP addresses, browser type, pages visited, and timestamps. Used for security monitoring and platform improvement.
- Contact form submissions: Name, email, organisation, and message submitted via our contact form.
3. How we use your data
We use your data solely for the following purposes:
- +To provide the synergy analysis service you have engaged us for
- +To communicate with you about your engagement
- +To respond to enquiries submitted via our contact form
- +To maintain the security and integrity of the platform
- +To comply with legal obligations
We do not sell, rent, or share your data with third parties for marketing purposes.
4. How we store and protect your data
Uploaded documents are stored in AWS S3 (Mumbai region, ap-south-1) with AES-256 server-side encryption. All data in transit is encrypted using TLS 1.3. Each engagement has its own isolated storage path — no cross-client access is possible at the storage layer.
Access to your data is restricted to your designated advisor and the Velintis platform using scoped IAM credentials. No Velintis employee accesses your documents unless explicitly required and agreed with you.
5. Data retention and deletion
Uploaded documents are retained in our systems for the duration of your engagement and deleted within 30 days of engagement closure, or immediately on your written request.
Account information and engagement records are retained for up to 12 months following the end of an engagement for legal and audit purposes, then permanently deleted.
6. Third-party subprocessors
We use the following third-party services to process data on our behalf:
- +AWS S3 (Amazon Web Services) — file storage
- +Anthropic Claude — AI document analysis (enterprise API, no training retention)
- +Vercel — application hosting
- +Aiven — database hosting
- +Clerk — user authentication
All subprocessors are bound by data processing agreements and are required to maintain appropriate security standards.
7. AI processing
Documents are analysed using Anthropic Claude via their enterprise API. Anthropic does not use content submitted via the enterprise API to train their AI models. Documents are processed in isolated API sessions and are not retained by Anthropic after the API call completes.
8. Your rights
You have the right to:
- +Access the personal data we hold about you
- +Request correction of inaccurate data
- +Request deletion of your data
- +Object to processing of your data
- +Request restriction of processing
- +Data portability
To exercise any of these rights, contact us at contact@velintis.com. We will respond within 30 days.
9. Cookies
We use only essential cookies required for authentication and session management. We do not use tracking, advertising, or analytics cookies.
10. Changes to this policy
We may update this policy from time to time. Material changes will be communicated to active clients by email. The current version is always available at velintis.com/privacy.
This is a draft policy pending legal review. It should not be relied upon as final legal documentation until reviewed and approved by qualified legal counsel.