Privacy

Draft. To be reviewed before Velio is open to the public.

What Velio can't read

Your lists, profile names, PINs and keys are encrypted on your devices before they're sent. Velio can't read them, and neither can anyone who gets a copy of its databases. See how Velio protects your lists.

What Velio holds

• Your email address, when you made the account and accepted the terms, the salt and settings your password is turned into keys with, and a hash of your sign-in key.
• Your sessions in browsers, and your TVs' names and when they last synced.
• How many profiles and lists you have, and when they changed.
• If you made a recovery key: a copy of your keys sealed under it, and a hash of its sign-in key.
• If you send a notice: what you write in the form, kept as a record of the notice and what was done.

How long

• An account never confirmed is deleted after 7 days.
• Deleting your account deletes all of it at once.
• A closed account's data is deleted 30 days after it's closed. Its email address, the dates and the reason are kept, so it can't simply be made again.
• Request logs, which can include IP addresses, are kept for at most 7 days.
• Backups that Cloudflare keeps for recovering the databases can hold deleted data for up to 30 days more.

Who handles it

Velio runs on Cloudflare, which hosts the service and its databases, sends its email, and runs the check that you're a person on the sign-up, reset and report forms. Email is sent only for your account: confirming it, resetting it, and telling you if it's closed. Nothing is sold or used for ads.