veluralabs.com, owned by Finworth Technologies Private Limited ("we," "Velura Labs," "us," "our," or "Finworth Technologies"), has established this Privacy Policy ("Policy") for its platform and services, including software solutions, AI engineering, AI Voice Call Center, AI Data Tagging, document processing, and related maintenance and warranty services (collectively, the "Platform"). This Policy outlines our practices concerning the collection, use, and disclosure of Personal Information obtained from users of the Platform.
This Policy explains what we collect, why we collect it, who we share it with, and the choices available to you. Where we rely on your consent — for example, for analytics cookies — you may give or withhold it freely, and withdraw it at any time without affecting the lawfulness of processing carried out before you did. Withdrawing consent or exercising certain other rights may limit our ability to provide services, either partially or fully.
If you have questions or concerns about this Policy, or wish to exercise any of your rights, please contact us using the details in Section 12.
This Policy applies to:
We collect various types of information to provide our services. This includes "Personal Information" that can identify you as an individual, as well as non-personal data.
When you submit a contact form, a campaign landing-page form, or a request for a tool report, we record the following against that enquiry:
So we can tell which channels bring us enquiries, your browser stores a small record of how you arrived. This is first-party storage on your own device — it is never shared with another website and carries no advertising identifier.
Our website offers free diagnostic tools — including the Agent-Ready Score, App Health check, and Prompt Tester. When you use one:
Where you electronically sign a proposal, agreement, or amendment through our client portal, the law requires us to evidence who signed and when. For that purpose, and only for signature events, we capture and retain:
These details are written into the signature record and printed on the audit-trail page of the signed PDF, which is emailed to you and to us. The document is fingerprinted with SHA-256 and the fingerprint anchored to a public blockchain via OpenTimestamps, so that neither party can alter the document after signature. Because this is legal evidence of a transaction, it is retained for the life of the agreement and any applicable limitation period, and is not deleted on request.
Data is stored securely and retained as per legal, regulatory, and business requirements. In practice:
We collect information through the following methods:
Some features of veluralabs.com are provided by third parties whose code runs in your browser. When a page using one of these loads, that provider necessarily receives your IP address and basic request information:
We share Personal Information only with the following entities, under strict confidentiality obligations:
We do not sell Personal Information, and we do not share it for cross-context behavioural advertising, targeted advertising, or any similar purpose, as those terms are used under applicable privacy laws. We operate no advertising, remarketing, or conversion-tracking pixels on this website, and we do not disclose visitor or enquiry data to advertising networks, data brokers, or list vendors. The only parties who receive Personal Information are those described in this Section and the sub-processors named by category in Section 15, each of whom processes it on our behalf and on our instructions.
We use Personal Information for the following purposes:
Where the EU or UK General Data Protection Regulation applies to you, we rely on the legal bases set out below for the purposes listed above. Where the India DPDP Act applies, we process your Personal Information either with your consent or for a legitimate use permitted by that Act.
Where we rely on legitimate interests, we have considered whether those interests are overridden by your own rights and freedoms, and we will share that assessment on request. Where we rely on consent, you may withdraw it at any time without affecting processing already carried out. Where we act as a processor for a Customer, the legal basis for processing that material is the Customer's to establish, not ours — see Section 7.
Our role depends on whose data is involved, and it determines who is responsible for it:
In both roles we implement technical, physical, and administrative measures to protect against unauthorised access, loss, or damage.
Personal Information may be stored on cloud platforms (e.g., AWS, GCP, Azure) in regions such as the United States, India, or the European Union, with appropriate safeguards to comply with data protection laws.
Our website may contain links to third-party sites. Finworth Technologies is not responsible for their privacy practices. We recommend reviewing their privacy policies before providing any information.
You have the following rights regarding your Personal Information, subject to applicable data protection laws (e.g., GDPR, India DPDP Act). To exercise these rights, contact reach@veluralabs.com, or our Grievance Officer as named in Section 12.
No fees are charged for exercising these rights unless requests are excessive, in which case we may charge administrative costs or reject the request. We aim to respond to every request within 30 days, and will tell you if we need longer.
Our services are not intended for individuals under 18. We do not knowingly collect Personal Information from minors. If we become aware of such data collection without parental consent, we will delete it. Contact us at reach@veluralabs.comif you believe a minor's data has been collected.
We implement stringent technical, physical, and administrative measures to protect your data, hosted securely on AWS / GCP / Azure cloud services in regions such as the United States, India, and the European Union. Contact us for a copy of our security policies. We are not liable for breaches beyond our control.
If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of it — and we will report it to the Data Protection Board of India as required under the India DPDP Act. Where the breach is likely to result in a high risk to you, we will also notify you directly and without undue delay, describing what happened, which categories of data were involved, what we are doing about it, and what you can do to protect yourself. Where we act as a processor for a Customer, we will notify that Customer without undue delay after becoming aware of a breach affecting their data, so that they can meet their own notification obligations.
We may update this Policy periodically. Changes will be posted on this page, effective immediately upon posting. Where a change materially affects how we use Personal Information, we will take reasonable steps to bring it to your attention rather than relying on this page alone. Check this page regularly for updates.
For questions, concerns, or to exercise your data rights, contact us at reach@veluralabs.com or Finworth Technologies Private Limited, 2/354 Jankipuram Extension, Lucknow 226021, India.
In accordance with the Digital Personal Data Protection Act, 2023, the following officer is responsible for addressing grievances about our handling of your Personal Information:
Please mark your message for the attention of the Grievance Officer. We will acknowledge your grievance and respond substantively within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India or, where applicable, to your local supervisory authority.
This Policy is governed by the laws of India, with exclusive jurisdiction in the courts of Lucknow, Uttar Pradesh. Disputes will be resolved through arbitration in Lucknow per the Arbitration and Conciliation Act, 1996. Nothing in this Section limits any right you have to complain to a data protection authority in your own country, or to any remedy available to you under the data protection law that applies to you.
Customer data — including documents, call recordings and transcripts, prompts and completions, embeddings, fine-tuning datasets, and any other data submitted to or processed by our services — is not used to train, fine-tune, or otherwise improve any general-purpose model that benefits other customers. Aggregated, anonymised operational metrics (e.g., latency distributions, throughput, error rates) may be retained for capacity planning and service improvement, but no personally identifiable or customer-specific content is incorporated into shared models.
Where customer-specific fine-tunes or model adaptations are produced as part of an engagement, the resulting weights, adapters, and datasets are owned by the customer and isolated to the customer's designated environment.
To deliver our services we engage authorised sub-processors who process Personal Information on our behalf under written agreements requiring at least equivalent data-protection obligations. Current categories of sub-processors include:
For the named, up-to-date list of sub-processors and their processing locations, contact reach@veluralabs.com. We will provide reasonable advance notice of material additions to this list. Customers may object to a new sub-processor in writing; if the objection cannot be resolved, the customer may terminate the affected service for convenience.