Privacy Policy
This Privacy Policy explains how Veyra Apps collects, uses, shares and protects personal data when people visit the website, contact the company or use the current support channels.
Who is responsible for your personal data?
The data controller for the processing described in this policy is:
- Legal name
- [[LEGAL NAME OF THE CONTROLLER]]
- Trading name
- Veyra Apps
- Business address
- [[PUBLIC BUSINESS OR PROFESSIONAL ADDRESS]]
- Country of establishment
- Spain
- Privacy contact
- hello@veyraapps.com
- Website
- veyraapps.com
Replace the legal-name and public-address placeholders with verified controller details. These values should match the Legal Notice.
What this policy currently covers
This policy applies when personal data is processed through the current public Veyra Apps website and its communication channels, including:
- Company, partnership, affiliate and media enquiries submitted through the Company Contact page.
- General product-support requests.
- Bug reports and related technical information.
- Feature requests and product feedback.
- Essential website operation, security controls, anti-abuse measures and server logs.
- Direct email correspondence initiated through the public contact addresses.
The website does not currently offer public customer accounts, paid checkout, subscriptions or hosted project storage. This policy will be updated before those activities begin.
What information may be collected
Identification and contact data
Name, email address and any organisation or role information voluntarily included in a message.
Message and request data
Subject, message, enquiry category, product context and any information needed to understand the request.
Technical support data
Affected product or area, relevant URLs, reproduction steps, expected and actual behaviour, software versions and environment information.
Technical and security data
IP address, user agent, access time, requested resources, security events and information generated by servers, firewalls or anti-abuse controls.
Veyra does not ask users to submit passwords, private API keys, licence secrets, financial credentials, special-category data or confidential customer information through public forms. Users should remove or redact such information before sending a request.
Why information is used
| Processing activity | Purpose | Legal basis |
|---|---|---|
| Company enquiries | To review and respond to company, partnership, affiliate, press or other business-related messages. | Steps requested before entering into a possible relationship and/or Veyra’s legitimate interest in managing business communications. |
| Product support | To understand the request, provide guidance and maintain a record of the support conversation. | Performance of, or steps connected with, the user’s request and Veyra’s legitimate interest in supporting its products. |
| Bug reports | To reproduce, investigate, prioritise and resolve reported technical problems. | Veyra’s legitimate interest in maintaining the reliability, security and quality of its products. |
| Feature requests | To evaluate product feedback, understand workflow needs and inform product research. | Veyra’s legitimate interest in improving and developing its products. |
| Security and abuse prevention | To protect the website, forms, infrastructure and users against spam, misuse, fraud and technical attacks. | Veyra’s legitimate interest in operating a secure service and, where applicable, compliance with legal obligations. |
| Non-essential cookies or analytics | To measure use of the website or enable optional third-party functionality. | User consent where required. These technologies must not be activated before the corresponding consent is obtained. |
Where processing is based on legitimate interests, Veyra considers the relationship with the user, the limited nature of the data, the purpose of the request and the safeguards available to the individual.
What happens if required fields are not provided?
Fields marked as required are necessary to identify the request, communicate with the sender and understand the issue or proposal. Veyra may be unable to review or respond when required information is missing, inaccurate or insufficient.
Optional fields should only be completed when they are relevant to the request.
Who may receive or access the data?
Veyra does not sell personal data. Information may be accessible to service providers that support the website and communications, acting under their own legal responsibilities or under instructions from Veyra, depending on the service.
| Service category | Current provider | Purpose |
|---|---|---|
| Website hosting and infrastructure | [[HOSTING PROVIDER, LEGAL ENTITY AND COUNTRY]] | Hosting the website, databases, logs, backups and related technical services. |
| Email and communications | [[EMAIL PROVIDER, LEGAL ENTITY AND COUNTRY]] | Delivering form submissions and managing replies and correspondence. |
| Security, CDN or performance | [[SECURITY / CDN / CACHE PROVIDER OR “NOT CURRENTLY USED”]] | Protecting, delivering and optimising the website and detecting abusive activity. |
| Consent and cookie management | [[CONSENT MANAGEMENT PROVIDER OR “NOT CURRENTLY USED”]] | Recording and respecting cookie preferences where applicable. |
| Analytics | [[ANALYTICS PROVIDER OR “NOT CURRENTLY ACTIVE”]] | Optional measurement of website use after valid consent where required. |
Data may also be disclosed where required by law, a competent authority, a court order or the establishment, exercise or defence of legal claims.
Data processed outside the European Economic Area
Some service providers may process data outside the European Economic Area. Where this occurs, Veyra will rely on an applicable adequacy decision, approved contractual safeguards or another lawful transfer mechanism.
Replace this note after confirming the legal entities, locations and safeguards used by the hosting, email, security and analytics providers: [[INTERNATIONAL TRANSFER DETAILS OR “NO INTERNATIONAL TRANSFERS IDENTIFIED”]].
How long information is kept
Personal data is retained only for as long as it is reasonably needed for the relevant purpose and any applicable legal, security or claims-related requirements.
| Data or activity | Planned retention period |
|---|---|
| Company enquiries and correspondence | [[RETENTION PERIOD, FOR EXAMPLE 12–24 MONTHS AFTER THE LAST INTERACTION]] |
| Support requests | [[RETENTION PERIOD AFTER THE REQUEST IS CLOSED]] |
| Bug reports and feature requests | [[RETENTION PERIOD OR CRITERIA FOR PRODUCT-RESEARCH RECORDS]] |
| Security and server logs | [[LOG RETENTION PERIOD, FOR EXAMPLE 30–90 DAYS UNLESS AN INCIDENT REQUIRES LONGER RETENTION]] |
| Backups | [[BACKUP ROTATION AND DELETION PERIOD]] |
Information may be restricted and retained for longer where necessary to comply with legal obligations or establish, exercise or defend legal claims.
How information is protected
Veyra applies technical and organisational measures intended to protect personal data against unauthorised access, alteration, disclosure, loss or destruction. These measures may include access controls, encrypted connections, software updates, anti-abuse controls, logging, backups and restricted administrative access.
No method of transmission or storage can guarantee absolute security. Users should avoid including unnecessary confidential information in public forms and should report suspected security issues through the Security and Vulnerability Disclosure Policy.
Rights available under data-protection law
Depending on the circumstances, individuals may exercise the following rights:
- Access personal data and obtain information about how it is processed.
- Correct inaccurate or incomplete data.
- Request deletion where the applicable legal conditions are met.
- Request restriction of processing.
- Object to processing based on legitimate interests.
- Request data portability where applicable.
- Withdraw consent where processing relies on consent, without affecting earlier lawful processing.
- Not be subject to a decision based solely on automated processing where the legal conditions apply.
Requests may be sent to hello@veyraapps.com. Veyra may request additional information where reasonably necessary to verify the identity of the requester and protect personal data from unauthorised disclosure.
Individuals also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) or another competent supervisory authority.
Services are not directed specifically to children
Veyra’s current website, software-development content and support channels are not specifically directed to children. A parent or legal guardian should contact Veyra if they believe a child has submitted personal data without appropriate authorisation.
Changes to this Privacy Policy
This policy may be updated when the website, products, service providers, data flows or applicable requirements change. The current version will remain available on this page with its effective date and last-updated date.
Material changes affecting existing users may also be communicated through the website, email or an account notice when those channels are available and appropriate.
Privacy questions and requests
Questions about this Privacy Policy or requests concerning personal data can be sent to:
- Email: hello@veyraapps.com
- Controller: [[LEGAL NAME OF THE CONTROLLER]]
- Address: [[PUBLIC BUSINESS OR PROFESSIONAL ADDRESS]]