Privacy Policy

1. Who we are

VelocityHero AB, a company incorporated in Sweden, is responsible for the processing described in this Privacy Policy where we act as controller. Contact: hello@velocityhero.com.

2. Data we process and where it comes from

Depending on how you use VelocityHero, we may process:

• Account details (name, email, authentication data)
• Organisation and project settings you configure
• Delivery signals from connected tools (for example Jira metadata and Slack check-in taps) — see our Trust Center
• Contact and sales enquiry details you submit
• Limited technical logs needed to operate and secure the service
• Optional website analytics data if you accept analytics cookies

Some project-related data is provided by your organisation or obtained from integrations your organisation connects to VelocityHero, such as Jira and Slack.

3. Why we process data and legal bases

We process account and service data as necessary to provide and administer VelocityHero and our contractual relationship with your organisation. We process security, operational and business-communications data based on our legitimate interests in operating, securing and improving our B2B service and responding to prospective and existing customers. Where required, we rely on consent, including for optional analytics cookies. We also process data where necessary to comply with legal obligations.

Where we rely on legitimate interests, those interests include keeping the Service secure and available, understanding and improving product reliability, preventing abuse, and communicating with business contacts about trials, support and commercial enquiries in a B2B context. You may object to processing based on legitimate interests as described under Your rights.

4. Controller and processor roles

For account and marketing-site data, VelocityHero typically acts as controller. For delivery signals and related project data processed on behalf of your organisation in the Service, VelocityHero typically acts as processor under our Data Processing Addendum.

5. Sharing and subprocessors

We use service providers to help us run VelocityHero (for example hosting, database, email, job orchestration, monitoring, optional message-wording assistance, and website analytics when you consent). A current list of subprocessors is available in our Subprocessor Register. We do not sell personal data.

6. Retention and security

We retain account and service data for as long as needed to provide the Service and administer our relationship with your organisation. After a trial ends, we typically retain organisation data for about thirty (30) days to support delayed procurement, then delete it unless you convert or request earlier deletion. Enquiry and business correspondence may be retained for a reasonable period for follow-up, record-keeping and legal purposes. Technical and security logs are retained only as long as reasonably necessary for security, troubleshooting and operational purposes. Where we process Personal Data on behalf of a customer, retention and deletion are also governed by the applicable DPA and customer agreement.

We apply encryption in transit and access controls. Technical product details (for example ephemeral Jira sync cache and Slack check-in retention) are described in the Trust Center.

7. Your rights

Depending on the processing and applicable law, you may have rights to access, correct or delete your Personal Data, restrict or object to processing, and receive certain data in portable form. Where processing is based on consent, you may withdraw that consent at any time without affecting earlier lawful processing.

You also have the right to lodge a complaint with a competent data protection authority. In Sweden, this is Integritetsskyddsmyndigheten (IMY).

To exercise these rights, contact hello@velocityhero.com.

8. International transfers

Some service providers may process Personal Data outside the EU/EEA. Where required, we use recognised transfer mechanisms such as adequacy decisions or the European Commission’s Standard Contractual Clauses, together with supplementary safeguards where appropriate. Information about relevant subprocessors and processing locations is available in our Subprocessor Register.

9. Cookies and analytics

We use cookies and similar technologies that are necessary to operate the website and, with your consent, optional analytics technologies such as Google Analytics 4. You can accept, reject or change optional analytics cookies through Cookie Preferences on the website.

10. Automated decision-making

VelocityHero analyses project delivery signals to generate scores, insights and recommendations. VelocityHero does not use Personal Data to make solely automated decisions about individuals that produce legal or similarly significant effects.

11. Updates

We may update this policy and will post the new version here. Material changes may be communicated in-product or by email when appropriate.