Privacy Policy

1. Introduction

Veleria ("we", "us", "our") operates veleria.com.au and provides business management software platforms and custom software development services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in compliance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Information We Collect

Personal Information

• Name, email address, phone number, and business details
• ABN and business registration information
• Payment information (processed securely via Stripe)
• Customer and client data you upload to our business platforms
• Staff and employee data managed through our rostering and scheduling tools
• NDIS participant information managed through VelCare (for disability service providers)

Usage Data

• IP address, browser type, device information
• Pages visited, features used, time spent on platform
• Platform interaction logs for performance improvement

3. How We Use Your Information

• To provide and maintain our business management software platforms
• To process payments and generate invoices
• To manage staff scheduling, rostering, and compliance tracking
• To facilitate NDIS billing and participant management through VelCare
• To send service updates, support messages, and account notifications
• To improve our platform using anonymised usage data
• To send marketing communications (you can opt out anytime)

4. AI Data Processing

• AI features process data in real-time within our secure Australian infrastructure
• Your business data is never used to train AI models that serve other customers
• AI interaction logs can be deleted at your request
• Business platform data is isolated per organisation with strict access controls

5. Data Storage & Security

Your data is stored on secure, enterprise-grade Australian infrastructure with:

• AES-256 encryption for data at rest
• TLS 1.3 encryption for data in transit
• Australian data hosting for data sovereignty compliance
• Role-based access controls with principle of least privilege
• Regular security assessments and vulnerability monitoring
• Multi-factor authentication support for all accounts
• Daily automated backups with 30-day retention

6. Your Rights Under Australian Law

Under the Privacy Act 1988, you have the right to:

• Access your personal information held by us
• Request correction of inaccurate information
• Request deletion of your data
• Export your data in a portable format
• Opt out of marketing communications
• Lodge a complaint with the OAIC

To exercise these rights, contact us at contact@veleria.com.au. We will respond within 30 days.

7. Third-Party Services

We use trusted third-party services:

• Stripe: Payment processing (PCI DSS Level 1 compliant)
• Supabase: Database hosting and authentication (Australian servers)
• Vercel: Application hosting and deployment
• Google Calendar API: Calendar synchronisation for scheduling features
• Xero / MYOB: Accounting software integration
• Gmail SMTP: Transactional email delivery

8. Data Sharing

We do not sell your personal information. We may share data only:

• With your explicit consent
• With third-party service providers who assist in operating our platform (under strict data processing agreements)
• When required by Australian law, regulation, or legal process
• To protect the rights, property, or safety of Veleria, our users, or the public

9. Overseas Disclosure

Some third-party providers may process data outside Australia. We ensure all recipients comply with the Australian Privacy Principles or equivalent privacy protections. Primary data storage remains on Australian servers.

10. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. Upon account cancellation, business data is retained for 30 days before permanent deletion. You may request immediate deletion at any time by contacting our support team.

11. Children's Privacy

Our business software services are not intended for individuals under 18. We do not knowingly collect information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email at least 14 days before they take effect. The "Last updated" date at the top of this page indicates when this policy was last revised.

13. Contact Us

If you have questions about this Privacy Policy or our data practices:

Email: contact@veleria.com.au

Phone: 0478 333 107

Address: Melbourne, Victoria, Australia

If not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au