Data processing policy and privacy notice

Legal framework

Velyti processes personal data under article 15 of the Colombian Constitution, Ley 1581 de 2012 and its regulations (Decreto 1377 de 2013, compiled in Decreto 1074 de 2015).

What this policy covers

The personal data Velyti decides on as controller: people who visit velyti.com, request a demo or write to us, the contacts of the dealerships that use Velyti, and the users of the platform (their name, username, email and activity in their account).

The data a dealership records in the platform about its own clients, attorneys and staff belongs to that dealership, which is its controller. Velyti processes it only on the dealership's behalf, as processor, and requests about that data should go to the dealership; we help it answer them.

Data we collect

Through the demo request form on velyti.com:

• Name, dealership, city, phone and email.
• The plan you are interested in, the size of your stock and any message you write.
• The authorization you give, with its date and the language of the page.

velyti.com does not use advertising or analytics cookies. It keeps your language in a cookie and your light or dark theme in your browser, and the hosting provider records technical access data (such as the IP address) to operate and protect the site.

We do not ask for sensitive data and the site is not directed to minors.

Purposes

We use the data only to:

• Answer your request and arrange the demo.
• Create your company and its users in Velyti if you decide to use it, and manage the trial, the subscription and support.
• Send you service messages about your account (invitations, password resets, billing reminders).
• Meet legal obligations and defend Velyti in legal proceedings.

We do not sell personal data or share it for third-party advertising.

Your rights

As the data subject you may, under article 8 of Ley 1581 de 2012:

• Know, update and rectify your personal data, including partial, inaccurate or misleading data.
• Request proof of the authorization you gave.
• Be informed, on request, of how your data has been used.
• File complaints with the Superintendencia de Industria y Comercio (SIC), after first contacting Velyti.
• Revoke the authorization and ask for your data to be deleted when the processing does not respect constitutional and legal principles, rights and guarantees.
• Access the personal data we process free of charge.

Who handles requests and how

Inquiries, claims and requests are handled by Velyti's support team at support@velyti.com, or by phone at +57 314 813 5687. Write from the email you gave us, or prove your identity or your representation, and say what you are asking for.

• Inquiries (knowing what data we hold and how we use it) are answered within 10 working days of receipt. If that is not possible we will tell you why and when, within 5 more working days.
• Claims (to correct, update or delete data, revoke the authorization, or report a breach) are resolved within 15 working days from the day after receipt; if not possible, we will tell you why and when, within 8 more working days.
• If a claim is incomplete we will ask you to complete it within 5 days; if two months pass without an answer, it is considered withdrawn. While a claim is open, the data is marked “claim in progress”.
• Before going to the SIC you must first file your inquiry or claim with Velyti.

Processors and international transmission

To run velyti.com and send email we use providers that process data on our behalf and under our instructions: Vercel (website hosting) and Resend (email delivery), with servers in the United States. The platform also uses providers in the United States for its database, servers and file storage.

The United States is among the countries the SIC recognizes as offering an adequate level of data protection (Circular Externa 005 de 2017).

Security

Access to data is restricted to the people who need it. Connections are encrypted, each company's data in the platform is isolated from the others, files are stored encrypted, and support access to a company's account requires its time-limited authorization and is logged.

Retention

Demo request data is kept while we are in contact about Velyti and for up to two years after the last contact, then deleted, unless you become a customer or the law requires us to keep it longer. Customer data is kept while the subscription lasts and as long as legal obligations require.

Effective date and changes

This policy is in force from October 11, 2026. We will announce any substantial change on this page, and by email to the people it affects, before applying it.