Privacy Policy
Last updated: October 31, 2026
VelonixxAI ("VelonixxAI", "we", "us") is operated by Yalla Veera Venkata Chandi Mukesh, an individual based in Hyderabad, Telangana, India. Contact: Mukesh@velonixxai.com.
VelonixxAI is a business-to-business (B2B) prospect research tool. Our customers search for businesses (for example "dentists in Calgary") and we return publicly available business information with an AI-written summary and fit score. This policy explains what we collect about two groups of people:
- Our customers (people who create a VelonixxAI account), and
- Businesses and professionals who appear in search results ("listed businesses").
1. Information about listed businesses
What we collect
Business information about the business and the people who run it:
- Business name, category, address, phone number, website, opening hours, Google rating and review count;
- Email addresses published on the business's own website, or in its public business profile;
- Public social media and business profile links (LinkedIn, Instagram, Facebook, Google Maps);
- Names and job titles of people publicly listed as part of the business (for example "Jane Doe, Founder" on a company's About page or a public LinkedIn profile title);
- Work contact details of decision makers (owners, founders, partners, executives): their name, job title, public LinkedIn profile link and work email address at their company, which we obtain from business-data providers when a customer searches for LinkedIn decision makers or uses "Find decision makers" (see below). A work email may not be published on the company's own website;
- A short description of the business taken from its public website.
We do not collect personal home addresses, personal (non-work) email addresses or phone numbers on purpose, private or personal social accounts, sensitive information (health, religion, etc.), or information behind a login. University and government email addresses are never saved as someone's work email.
How we collect it
- Search results: we use a search API (Serper) to read Google search and Google Maps results. For LinkedIn, Instagram and Facebook we only use the short public snippet that appears in Google search results. We never log in to, or open pages on, LinkedIn, Instagram or Facebook.
- Company websites: we visit a few pages of the business's own public website (for example its contact page) to find business contact details. Our crawler identifies itself as VelonixxAIBot and respects each site's robots.txt; sites that ask bots not to visit are skipped.
- AI processing: we send the public business information to an AI model (Anthropic's Claude, accessed through OpenRouter) to write a summary and a fit score for our customer.
- Business-data providers (work emails): to find a decision maker's work email we send their company's website domain, their name and their public LinkedIn profile link to business-data providers (accessed through treg.to), which return the work email if they have it. To find who runs a company, we send its website domain and get back names, job titles and public LinkedIn profile links. We keep each result so the same person or company isn't looked up again for a while (see section 4).
- Email checks: for every email we check that the address is well-formed and that its domain accepts email (a DNS lookup). For work emails found through business-data providers, an email-verification provider also checks that the mailbox exists, by asking the mail server without sending an email. We never send emails to the people listed.
- Your own connected tools: if a customer connects their own email finder or verifier (for example Hunter, MillionVerifier or Anymailfinder), we send the lead's website domain or email address to that provider, under the customer's own account with them.
Why we use it, and on what basis
We provide this information to our customers so they can find and contact relevant businesses, and the people who run them, about business products and services related to their role. We use business contact information only, not personal contact details. Where the EU or UK GDPR applies, we rely on our and our customers' legitimate interest in business-to-business communication. Under India's Digital Personal Data Protection Act, 2023, we rely on information made publicly available by the business or professional and on business contact details used for business purposes, and we honour removal requests as described below. Where a law gives you more rights over your work contact details (for example in California or the EU), you can use them as described in section 5.
Our customers decide how they use the information and are responsible for complying with anti-spam and privacy laws such as CASL (Canada), CAN-SPAM (US) and GDPR (EU/UK). Our Terms of Service require it.
Removal and opt-out
You can ask us to remove your business's information at velonixxai.com/opt-out or by emailing Mukesh@velonixxai.com. We check each request (so nobody can remove a business that isn't theirs), then:
- delete the information from every customer's account, including work emails and decision-maker details we found through providers, and the saved lookup results for that company or person, and
- add the website domain, email addresses and profile links to a suppression list so they are not collected or looked up again by future searches.
A person can also ask us to remove just their own work email and name, without removing their whole business.
We keep only the minimum needed for that list (the domain, email address or profile link) for as long as we operate the service, because deleting it would let the information be collected again. We respond within 30 days.
2. Information about our customers
- Account: name and email address, handled by our sign-in provider Clerk;
- Usage: searches you run, leads in your account, credit balance and history;
- Payments: handled by our payment provider, which may act as our reseller (merchant of record). We do not see or store full card numbers;
- Technical: IP address and browser information in server logs, for security and debugging;
- Product analytics: which pages are visited and a few steps such as signing up, starting a search, exporting and paying (with no names, emails or search words), counted by PostHog without cookies or anything stored in your browser, so we can see where the product is hard to use;
- Error reports: when something breaks, technical details of the error are sent to Sentry so we can fix it, with email addresses removed;
- Waitlist: if you join our waitlist, your email address and which page you joined from, used only to tell you when VelonixxAI opens.
We use this to run the service, keep your account secure, apply your plan and credits, provide support, and meet legal and tax obligations. We do not sell customer information.
3. Service providers we share information with
| Provider | Purpose | Location |
|---|---|---|
| Clerk | Sign-in and account security | USA |
| Railway | Website, application servers and background jobs | Singapore |
| Neon | Database | Cloud (provider's region) |
| Serper | Google search and Maps results | USA |
| OpenRouter / Anthropic | AI summaries and scores | USA |
| treg.to and the business-data providers it connects to (such as Blitz, QuickEnrich, Tomba, AI Ark) | Finding decision makers and their work emails | USA and other countries |
| Email-verification providers (such as TryKitt or MillionVerifier) | Checking that a found work email's mailbox exists | USA and other countries |
| Hunter, MillionVerifier, Anymailfinder (only if a customer connects their own account) | The customer's own email finding and checks | USA and other countries |
| Our payment provider | Payments, invoices, sales tax | Named at checkout |
| PostHog | Product analytics, without cookies | USA |
| Sentry | Error reports (email addresses removed) | USA |
These providers process information for us under their own terms and only for these purposes. Information may be processed outside your country, including in the United States.
4. How long we keep information
- Leads stay in a customer's account until the customer deletes them or closes the account; then they are deleted within 7 days. Backups are kept for up to 30 days.
- Work-email lookup results (a person's or company's found work email, or that nothing was found) are kept for up to 180 days so they aren't looked up again, then refreshed or deleted. "Nothing found" results are kept for 30 days.
- Customer account information is kept while the account is open and for up to 8 years after it closes, for billing, tax and legal records.
- Suppression-list entries are kept as explained in section 1.
5. Your rights
Depending on where you live, you may have the right to access, correct or delete your information, object to its use, or complain to a regulator (in India, the Data Protection Board of India; in the EU or UK, your local data protection authority). Contact Mukesh@velonixxai.com; we reply within 30 days. Listed businesses can also use the opt-out page.
6. Grievance Officer
If you have a concern about how we handle personal information, contact our Grievance Officer: Yalla Veera Venkata Chandi Mukesh, Mukesh@velonixxai.com. We acknowledge complaints within 7 days and aim to resolve them within 30 days.
7. Security
We use encrypted connections (HTTPS), access controls, and separate each customer's data in our database. No system is perfectly secure; we will notify affected people and regulators of a breach where the law requires it.
8. Children
VelonixxAI is a business tool and is not intended for anyone under 18.
9. Changes
We will post changes here and update the date above. Significant changes will be announced to customers by email or in the app.
10. Contact
Yalla Veera Venkata Chandi Mukesh, Hyderabad, Telangana, India · Mukesh@velonixxai.com