Privacypolicy.

01Who handles your data

Data controller: Velncore (Artificial Velncore Intelligence), Vilnius, Lithuania.

Contact for privacy matters: email info@velncore.tech, tel. +370 602 74580.

This policy applies to website visitors and to people who place an order or contact us. The conversations that an assistant embedded on a client’s website has with that website’s visitors are handled by us as a data processor under a contract with the client, and the client’s own privacy policy applies to them.

02What data we process and why

We process data only for the following purposes:

• Order form: business name, field of activity, email, phone, website address and whatever you enter to have the assistant prepared (services, opening hours, questions, settings, links). Purpose – to accept and fulfil the order and to contact you about it. Basis – steps prior to entering into a contract and performance of a contract (GDPR Art. 6(1)(b)).
• Correspondence by email, phone or Instagram: name, contact details, the content of the message. Purpose – to answer your questions. Basis – your request and our legitimate interest in communicating with customers (Art. 6(1)(f)).
• Technical data: when you open the website, the hosting server automatically records the IP address, time, browser type and the pages opened (server logs). Purpose – the operation and security of the website. Basis – legitimate interest (Art. 6(1)(f)).
• Spam protection: the order system keeps a hash of the sender’s IP address for 10 minutes so that one address cannot send too many orders, and before an order is sent the browser solves a small computing task (no cookies, no third parties). Basis – legitimate interest.
• Invoices and accounting (if a contract is made): company details and payment data. Basis – legal obligation (Art. 6(1)(c)).

03Cookies and tracking

The website does not use cookies, analytics, advertising or social media tracking tools, so we do not show a consent banner.

Links to Instagram lead to an external website, which is governed by its own privacy policy.

04Who we share data with

We do not sell data or use it for advertising. It may be accessible only to the following service providers, as far as needed to provide the service:

• the provider that hosts the website and the order system (Hostinger);
• the email service provider (Hostinger) through which we receive orders, send order confirmations and correspond;
• the AI model provider (OpenAI) – only as far as needed to prepare and run the assistant you ordered (for example, to process the content of the knowledge base);
• accounting or legal service providers, when needed to perform a contract or meet legal requirements.

If data is transferred outside the European Economic Area, we apply the safeguards required by the GDPR (for example, the European Commission’s standard contractual clauses or an adequacy decision).

05How long we keep data

• data of orders and enquiries that were not completed – up to 12 months from the last contact;
• data of completed orders – for the term of the contract and 3 years after it ends (for possible legal claims);
• accounting documents – for the period required by law;
• server logs – for a short period set by the hosting provider; order-limiting data – 10 minutes.

When the period ends we delete the data or irreversibly anonymise it.

06Your rights

You have the right to:

• access your data and receive a copy of it;
• have inaccurate data corrected or incomplete data completed;
• ask for your data to be erased or its processing restricted;
• object to processing based on legitimate interest;
• receive the data you provided in a structured, commonly used format;
• withdraw consent at any time (this does not affect processing carried out before withdrawal).

To exercise your rights, write to info@velncore.tech. We will reply within 30 days.

If you believe your rights have been violated, you can lodge a complaint with the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt).

07Providing data and decisions

The required fields of the order form must be filled in so that we can accept the order; the other fields are optional. We do not make automated decisions that would have legal effects on you.

08Security

We apply reasonable technical and organisational measures: the connection to the website is encrypted (HTTPS), orders are stored in a closed order system, and only authorised persons have access.

09Changes

We may update this policy. The latest version is always published on this page together with the date of the update.