Privacy Policy

Last updated: September 7, 2026

This policy explains how Veloxa collects, uses, and protects data when you use the appointment management platform, public booking pages, notifications, and WhatsApp Business connection through Meta.

Data we collect

We may process account and business data such as name, email address, phone number, business name, address, working hours, services, and staff. We also process customer and booking data entered by the business, including customer name, phone number, email address, booking time, booking status, and notes.

When a business connects WhatsApp Business, we may store the WhatsApp Business Account ID, Phone Number ID, connection status, display name, connected phone number, and connection or sync timestamps. Meta platform secrets are treated as environment configuration and are not ordinary tenant profile data.

How we use data

Campaign links use a random session identifier to measure visits and booking starts and attribute bookings within a seven-day window in the same session. Campaign tables do not store raw IP addresses or device fingerprints. Campaign reports do not, by themselves, establish incremental sales or collected payments. Marketing contact review is limited to customers who consented, with suppression requests respected.

We use data to operate the platform, manage appointments, send booking confirmations and reminders, send return-visit reminders, prepare business reports, provide support, improve the service, prevent abuse, and protect accounts.

WhatsApp and Meta

If a business enables WhatsApp, authorized connection data is used to send service-related messages such as booking confirmations, reminders, and updates selected by the business. The business is responsible for customer consent and compliance with WhatsApp Business and Meta policies, including avoiding unsolicited messages.

Sharing and subprocessors

We may share the minimum necessary data with hosting, email, notification, Meta/WhatsApp, payment, analytics, and security providers, only to operate the service, comply with law, or protect the platform.

Retention and deletion

We retain data while an account is active and as needed for security, accounting, dispute resolution, and legal obligations. Data deletion can be requested through the Data Deletion Instructions page.

Security

We use access controls, session protection, transport encryption, and operational safeguards to reduce risk. No digital service is completely risk-free, but we take data protection seriously.

Contact

For privacy requests or questions, contact support@veloxaapp.com.

Company information