Privacy Policy

1. Introduction

Welcome to Velocity ("we," "our," or "us"). Velocity is an AI-powered architectural rendering platform that allows users to generate, customize, and enhance architectural visualizations using advanced artificial intelligence technology.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site or use our services.

2. Information We Collect

2.1 Personal Information You Provide

We collect information that you voluntarily provide to us when you:

• Create an account (email address, password, full name)
• Use Google OAuth authentication (Google ID, email, profile picture)
• Make payments (processed through Razorpay - we don't store payment details)
• Contact us for support or feedback

2.2 Information Automatically Collected

When you use Velocity, we automatically collect:

• Usage data (IP address, browser type, pages visited, time spent)
• Generation data (uploaded images, generated renderings, prompts, customization preferences)
• Cookies and authentication tokens (httpOnly cookies for session management)

2.3 AI Learning Data

To improve our AI models and provide better results, we collect quality ratings (1-5 stars), issue tags, and feedback you provide. High-quality generations (4-5 star ratings with quality score ≥80) are used as training examples to enhance future results.

3. How We Use Your Information

• Service Delivery: Create and manage your account, authenticate users, process payments, generate AI renderings
• Service Improvement: Improve AI quality through RAG (Retrieval-Augmented Generation), analyze usage patterns, debug issues
• Communication: Send transactional emails (account verification, payment confirmations), respond to support inquiries
• Legal & Security: Comply with legal obligations, prevent fraud and abuse, enforce Terms of Service

4. AI Model Training and Data Usage

Velocity uses a self-learning RAG system to continuously improve generation quality:

• Generations rated 4-5 stars with quality score ≥80 become reference examples
• These are converted into 768-dimensional vector embeddings using OpenAI's text-embedding-3-small model
• Future similar requests retrieve these examples to guide the AI

What's included in AI learning: Image metadata (building type, style, materials), user prompts, quality ratings. NOT included: Your personal information (name, email, payment data), images rated below 4 stars.

5. How We Share Your Information

We do NOT sell your personal information. We may share your information with:

Third-Party Service Providers:

• Google Cloud Platform: Google OAuth authentication
• OpenAI: Text embeddings for our RAG system
• Google AI (Gemini): Image generation capabilities
• MongoDB Atlas: Database and vector search
• Amazon Web Services (AWS S3): Image storage
• Razorpay: Payment processing

We may also disclose information if required by law, court orders, or to protect our legal rights and prevent fraud.

6. Data Storage and Security

We implement industry-standard security practices:

• Encryption: Passwords hashed with bcrypt (12 rounds), HTTPS/TLS for data in transit, encrypted storage on S3
• Access Control: JWT tokens with 7-day expiration, httpOnly cookies to prevent XSS attacks
• Authentication: Email verification via OTP, secure password requirements, OAuth 2.0 for Google
• Monitoring: Rate limiting (100 requests per 15 minutes), automated logging, regular security audits

Data Retention:

• Account data: Retained while your account is active
• Generated images: Retained for 90 days after generation
• High-quality training examples: Retained indefinitely (anonymized)
• Logs: Retained for 30 days
• Payment records: Retained for 7 years (legal requirement)

7. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access and Portability: Request a copy of your personal data and export your generated images
• Correction: Update your name, email, or profile information in account settings
• Deletion: Delete your account and request removal from AI training datasets
• Objection: Opt out of AI training data usage
• Withdrawal of Consent: Revoke consent for data processing at any time

To exercise these rights, contact us at [email protected]

8. Cookies and Tracking

We use cookies to maintain your login session and improve user experience:

• Essential Cookies: Authentication token (httpOnly, 7-day expiration) - required for service functionality
• Functional Cookies: Session preferences and UI customization

You can control cookies through your browser settings. Note: Disabling essential cookies will prevent you from using Velocity.

9. Children's Privacy

Velocity is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child, please contact us immediately at [email protected]

10. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under GDPR:

• Right to access your personal data
• Right to rectification of incorrect data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

Legal Basis: We process your data based on consent (account creation, ratings), contract fulfillment (providing services), and legitimate interest (improving AI models, preventing fraud).

11. CCPA Compliance (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request disclosure of personal information collected
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We do not sell personal information
• Right to Non-Discrimination: We will not discriminate for exercising your rights

Contact us at [email protected] to exercise your CCPA rights.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Significant changes will be communicated via email notification. Your continued use of Velocity after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices: