Privacy Policy

Last updated: May 6, 2026

This Privacy Policy describes the policies and procedures of Vela Dynamics, Inc ("we", "us", or "our") regarding the collection, use, and disclosure of your information when you use VelaStack (the "Service"), and tells you about your privacy rights and how applicable law protects you.

We use your personal data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

• Account means a unique account created for you to access our Service or parts of our Service.

• Affiliate means an entity that controls, is controlled by, or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest, or other securities entitled to vote for election of directors or other managing authority.

• Business (referred to as either "the Company", "We", "Us", or "Our" in this Agreement) refers to Vela Dynamics, Inc, 131 Continental Dr Suite 305 Newark, DE, 19713 US.

• Consumer for the purposes of U.S. state privacy laws, means a natural person who is a resident of a U.S. state with a comprehensive consumer privacy law.

• Cookies are small files that are placed on your computer, mobile device, or any other device by a website, containing details of your browsing history on that website among many other uses.

• Country refers to: Delaware, United States.

• Device means any device that can access the Service, such as a computer, a cellphone, or a digital tablet.

• Personal Data or Personal Information is any information that relates to an identified or identifiable individual, including any information that identifies, relates to, describes, or is reasonably capable of being associated with you.

• Sale for the purposes of California, Colorado, Connecticut, Utah, and Virginia consumer privacy laws, means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic means, a Consumer's Personal Information by the Business to a third party for valuable consideration.

• Share for the purposes of the California Privacy Rights Act ("CPRA"), means sharing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a Consumer's Personal Information by the Business to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration.

• Sensitive Personal Information has the meaning given in applicable U.S. state privacy laws (including the CPRA) and may include, where collected, government-issued identifiers, account log-in credentials, precise geolocation, racial or ethnic origin, religious beliefs, contents of communications, genetic data, biometric data, health information, and information concerning sex life or sexual orientation.

• Service refers to VelaStack, accessible from https://velastack.dev.

• Service Provider means any natural or legal person who processes the data on behalf of the Company, including third-party companies or individuals employed by the Company to facilitate the Service.

• Third-party Social Media Service refers to any website or any social network website through which a user can log in or create an account to use the Service.

• Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).

• You means the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Personal Information We Collect

In the past twelve (12) months, we may have collected the following categories of personal information:

• A. Identifiers — A real name, alias, postal address, unique personal identifier, online identifier, IP address, email address, account name, or similar identifiers. Collected: Yes.

• B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) — A name, signature, address, telephone number, education, employment, employment history, financial information, or similar information. Some personal information included in this category may overlap with other categories. Collected: Yes.

• C. Protected classification characteristics under California or federal law — Age, race, color, ancestry, national origin, citizenship, religion, marital status, sex (including gender identity, gender expression), sexual orientation, veteran or military status, genetic information, or disability. Collected: No.

• D. Commercial information — Records and history of products or services purchased or considered. Collected: Yes.

• E. Biometric information — Genetic, physiological, behavioral, and biological characteristics. Collected: No.

• F. Internet or other similar network activity — Browsing history, search history, interaction with our Service, advertisements, or other websites. Collected: Yes.

• G. Geolocation data — Approximate physical location. Collected: No.

• H. Sensory data — Audio, electronic, visual, thermal, olfactory, or similar information. Collected: No.

• I. Professional or employment-related information — Current or past job history or performance evaluations. Collected: No.

• J. Non-public education information — Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, schedules, identification codes, financial information, or disciplinary records. Collected: No.

• K. Inferences drawn from other personal information — Profile reflecting a person’s preferences, characteristics, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. Collected: Yes.

Personal Data

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. Personally identifiable information may include, but is not limited to:

• Email address
• First name and last name
• Phone number

Usage Data

Usage Data is collected automatically when using the Service. It may include information such as your device’s Internet Protocol address (e.g. IP address), browser type and version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers, and other diagnostic data.

When you access the Service by or through a mobile device, we may collect certain information automatically, including, but not limited to, the type of mobile device you use, your mobile device’s unique ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browser you use, unique device identifiers, and other diagnostic data.

Sources of Personal Information

We collect personal information from the following categories of sources:

• Directly from you when you provide information to us, for example by creating an account, completing a form, contacting us, or making a purchase.
• Automatically as you navigate through the Service, including through cookies, log files, and similar tracking technologies.
• From third parties, such as analytics providers, advertising networks, payment processors, and Third-party Social Media Services that you use to log in.
• From publicly available sources, such as public records, public profile information, and public databases.
• From service providers and business partners that help us operate or improve the Service.

How We Use Your Personal Information

The Company may use Personal Data for the following purposes:

• To provide and maintain our Service, including to monitor the usage of our Service and to detect, prevent, and address technical issues.
• To manage your Account: to manage your registration as a user of the Service. The Personal Data you provide can give you access to different functionalities of the Service available to you as a registered user.
• For the performance of a contract: the development, compliance, and undertaking of the purchase contract for products, items, or services you have purchased or of any other contract with us through the Service.
• To contact you: to contact you by email, telephone calls, SMS, or other equivalent forms of electronic communication, such as a mobile application’s push notifications, regarding updates or informative communications related to the functionalities, products, or contracted services, including the security updates, when necessary or reasonable for their implementation.
• To provide you with news, special offers, and general information about goods, services, and events that we offer, unless you have opted not to receive such information.
• To manage your requests: to attend to and manage your requests to us.
• For business transfers: we may use your information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceedings, in which Personal Data held by us about our Service users is among the assets transferred.
• For analytics and improvement: for data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns, and improving our Service, products, services, marketing, and your experience.
• For security and fraud prevention: to protect the rights, property, or safety of the Company, our users, or others, including detecting, preventing, and responding to fraud, abuse, security risks, and technical issues.
• To comply with legal obligations: to comply with applicable laws, lawful requests, court orders, and legal processes.

If you make purchases, we may process payments via the following providers, who handle your payment information in accordance with their own privacy policies:

• Stripe

Legal Bases for Processing (EEA, UK, Switzerland)

If you are a resident of the European Economic Area ("EEA"), the United Kingdom, or Switzerland, our legal basis for collecting and using the personal information described in this Privacy Policy depends on the personal information we collect and the specific context in which we collect it. We may process your personal information because:

• Performance of a contract: processing is necessary to perform a contract with you or to take steps at your request before entering into a contract (Article 6(1)(b) GDPR).

• Legitimate interests: processing is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests (Article 6(1)(f) GDPR). Our legitimate interests include securing the Service, preventing fraud, improving the Service, and direct marketing where permitted.

• Compliance with legal obligation: processing is necessary for compliance with a legal obligation to which we are subject (Article 6(1)(c) GDPR).

• Consent: we have your consent to do so for a specific purpose (Article 6(1)(a) GDPR). You may withdraw consent at any time by contacting us.

• Vital interests: processing is necessary to protect your vital interests or those of another natural person (Article 6(1)(d) GDPR).

• Public interest: processing is necessary for the performance of a task carried out in the public interest (Article 6(1)(e) GDPR).

How We Share or Disclose Personal Information

We may share your personal information in the following situations and with the following categories of recipients:

• With Service Providers: to monitor and analyze the use of our Service, host the Service, process payments, send emails, provide customer support, and contact you. These providers have access to your Personal Information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
• For business transfers: we may share or transfer your Personal Information in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of our business to another company.
• With Affiliates: we may share your information with our affiliates, in which case we will require those affiliates to honor this Privacy Policy.
• With business partners: we may share your information with our business partners to offer you certain products, services, or promotions.
• With other users: when you share personal information or otherwise interact in public areas with other users, such information may be viewed by all users and may be publicly distributed outside.
• For legal reasons: we may disclose your information where we believe in good faith that it is necessary to comply with a legal obligation, to protect our rights or property, to prevent fraud or harm, or to enforce our terms.
• With your consent: for any other purpose with your consent.

Sale or Sharing of Personal Information; Targeted Advertising

We do not "sell" your personal information for monetary consideration. We do not "share" your personal information for cross-context behavioral advertising as those terms are defined under the California Privacy Rights Act ("CPRA") or comparable U.S. state privacy laws. We do not knowingly sell or share personal information of consumers under 16 years of age.

Your right to opt out. You have the right to opt out of the sale or sharing of your personal information at any time. To exercise this right, you may use the controls described in the "Tracking Technologies and Cookies" section, change the privacy settings in your browser or mobile device, contact us using the methods listed in the "Contact Us" section, or send an opt-out preference signal — we honor the Global Privacy Control ("GPC") signal as a request to opt out of sale and sharing for the browser or device on which the signal is detected.

Tracking Technologies and Cookies

We use Cookies and similar tracking technologies (such as web beacons, pixels, tags, scripts, and software development kits) to track the activity on our Service and hold certain information.

Cookies can be "Persistent" or "Session" Cookies. Persistent Cookies remain on your personal computer or mobile device when you go offline, while Session Cookies are deleted as soon as you close your web browser.

Categories of Cookies We Use

• Strictly Necessary Cookies. These are required for the operation of the Service and to provide functionalities you request, such as logging in or accessing secure areas. The Service cannot function properly without them.
• Performance / Analytics Cookies. These cookies allow us to count visits and traffic sources so we can measure and improve the performance of the Service.
• Functional Cookies. These cookies enable enhanced functionality and personalization, such as remembering your preferences.
• Targeting / Advertising Cookies. These cookies may be set through our Service by our advertising partners to build a profile of your interests and show you relevant advertisements on other sites.
• Cookies Policy / Notice Acceptance Cookies. These cookies identify whether users have accepted the use of cookies on the Service.

We currently use the following analytics and tracking tools:

• Plausible

Your Choices About Cookies

You can instruct your browser to refuse all Cookies or to indicate when a Cookie is being sent. If you do not accept Cookies, you may not be able to use some parts of our Service. You can also manage your cookie preferences through any cookie banner or preference center we provide.

Do Not Track and Global Privacy Control

Some browsers transmit "Do Not Track" ("DNT") or Global Privacy Control ("GPC") signals. There is currently no industry standard for responding to DNT signals, but we honor GPC signals as an opt-out of the sale or sharing of personal information for the browser or device on which the signal is detected, as required by applicable law.

Email Communications

We may send transactional, account-related, and (where you have opted in) marketing emails using the following platforms, who process email information on our behalf as service providers:

• VelaStack

You may unsubscribe from marketing emails at any time using the unsubscribe link included in those emails. Even if you unsubscribe from marketing emails, we may still send you transactional or account-related emails (for example, to confirm a purchase or notify you of changes to the Service).

Retention of Your Personal Information

The Company will retain your Personal Information as long as is necessary to provide the Service and fulfil the purposes outlined in this Privacy Policy, and to comply with our legal obligations, resolve disputes, and enforce our agreements. We will retain and use your Personal Information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our agreements and policies.

The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer periods.

When we no longer have a legitimate business need to process your Personal Information, we will either delete or anonymize it or, if this is not possible (for example, because your Personal Information has been stored in backup archives), we will securely store your Personal Information and isolate it from any further processing until deletion is possible.

International Data Transfers

Your information, including personal data, may be processed at our operating offices and in any other places where the parties involved in the processing are located. This means that this information may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

If we transfer personal information from the European Economic Area, the United Kingdom, or Switzerland to a country that has not been determined by the European Commission or the relevant authority to provide an adequate level of protection, we rely on appropriate safeguards. These safeguards include the European Commission’s Standard Contractual Clauses (and the UK International Data Transfer Addendum, where applicable), supplementary technical and organizational measures, and, where appropriate, your explicit consent.

Your submission of personal information represents your agreement to that transfer. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and applicable law.

Data Security

The security of your Personal Information is important to us, and we use commercially reasonable administrative, technical, and organizational measures designed to protect Personal Information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.

Automated Decision-Making

We do not use your Personal Information to make decisions based solely on automated processing — including profiling — that produce legal effects concerning you or similarly significantly affect you, except as may be necessary for entering into or performing a contract with you, where authorized by applicable law, or where you have given your explicit consent. If we ever do, we will provide meaningful information about the logic involved and the significance and envisaged consequences of such processing, and you may request human review of any such decision.

Your Privacy Rights

This section describes your privacy rights under applicable laws and how to exercise them. Even if a particular section does not apply to you, you may always contact us using the methods in the "Contact Us" section to ask about your privacy choices.

Children’s Privacy

Our Service is not directed to children under the age of 13 (or such higher age threshold as required by applicable law, including 16 for residents of certain jurisdictions). We do not knowingly collect Personal Information from children under 13. If you are a parent or guardian and you become aware that your child has provided us with Personal Information without your consent, please contact us so that we can take appropriate action. If we become aware that we have collected Personal Information from a child under 13 without verification of parental consent, we will take steps to remove that information from our servers.

For users in the European Economic Area, the United Kingdom, or other jurisdictions where consent from a parent or legal guardian is required for the processing of personal data of minors, we will not knowingly collect or process such data without the appropriate consent.

Links to Other Websites

Our Service may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the privacy policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this Privacy Policy. Where required by law, we will provide a more prominent notice or seek your consent. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, you can contact us:

• By email: hello@velastack.dev