01 Who we are
This policy explains what personal data Velox collects when you use this website, the customer panel or the software, why we collect it, and what you can do about it. It is written to meet the EU General Data Protection Regulation (GDPR).
For the purposes of the GDPR, the data controller is:
[legal name], [registered address], [company or tax registration number].
Contact for privacy matters: privacy@veloxmenu.cc.
We collect the minimum needed to sell you a licence, deliver it, stop it being shared, and support you. We do not sell your data, we do not use it for advertising, and we never see your card number.
02 What we collect
| Category | What it is | Where it comes from |
|---|---|---|
| Account | Email address, username, password hash, and your Discord ID if you link it | You, when you register |
| Licence | Licence key, product, expiry date, activation history | Generated by us |
| Device | A hardware identifier (HWID) derived from your computer's components | The software, on activation |
| Transaction | Order ID, amount, currency, payment method, status, and the processor's reference. For crypto, the wallet address that paid | Our payment processors |
| Technical | IP address, browser type, operating system, timestamps, pages requested | Automatically, in server logs |
| Content | Scripts and configs you save in the panel | You |
| Support | Messages you send us, and what they are about | You |
A HWID is personal data under the GDPR, because it can single out your device. We use it for one purpose only: binding a licence to one machine so that it cannot be shared. It is stored as a hash, we cannot reconstruct your hardware from it, and it is never shared with anyone.
We do not collect card numbers, CVVs or wallet private keys. Those go straight to the payment processor and never reach our servers.
We do not knowingly collect any special category data (health, beliefs, biometrics and so on). Please do not send us any.
03 Why we use it, and our legal basis
| Purpose | Data used | Legal basis |
|---|---|---|
| Create and run your account | Account | Performance of a contract |
| Process your order and deliver the licence | Account, Transaction | Performance of a contract |
| Bind a licence to a device and prevent sharing | Licence, Device | Legitimate interest in protecting our product from piracy |
| Store the scripts and configs you create | Content | Performance of a contract |
| Answer support requests | Support, Account | Performance of a contract |
| Keep the service secure and detect fraud or abuse | Technical, Transaction, Device | Legitimate interest in security |
| Keep accounting and tax records | Transaction | Legal obligation |
| Send product news, if you ask for it | Account | Consent, withdrawable at any time |
Where we rely on a legitimate interest, we have weighed it against your rights and freedoms and concluded it does not override them. You can object at any time — see Your rights.
05 International transfers
Some of our providers are outside the European Economic Area. Where data leaves the EEA we rely on an adequacy decision by the European Commission, or on Standard Contractual Clauses together with additional safeguards where they are needed. You can ask us for a copy of the safeguards that apply.
06 How long we keep it
| Data | Kept for |
|---|---|
| Account and licence | While your account is open, then 12 months after you close it |
| Scripts and configs | Until you delete them, or your account is closed |
| Transaction and invoices | As long as tax and accounting law requires, normally 5 to 10 years |
| Hardware identifiers | While the licence is active, then 12 months |
| Server and security logs | Up to 12 months |
| Support messages | 24 months after the conversation ends |
| Records of blocked or banned accounts | Up to 3 years, to enforce a ban |
When a period ends we delete the data or irreversibly anonymise it.
07 Your rights
If the GDPR applies to you, you have the right to:
- Access — get a copy of the personal data we hold about you;
- Rectification — have inaccurate or incomplete data corrected;
- Erasure — have your data deleted, where we have no overriding reason or legal duty to keep it;
- Restriction — have us pause processing while a dispute is resolved;
- Portability — receive the data you gave us in a machine-readable format, or have it sent to another provider;
- Object — object to processing based on our legitimate interests;
- Withdraw consent — at any time, where we relied on consent. This does not affect what was lawful before you withdrew it;
- Not be subject to a decision based solely on automated processing that significantly affects you.
To use any of these, email privacy@veloxmenu.cc. We answer within one month. We may ask you to confirm your identity first, so that we do not hand your data to someone else.
Our anti-sharing checks are automated: repeated activations from many different devices can suspend a licence automatically. If that happens to you, contact support — a person will review it and can reverse it.
You also have the right to complain to a supervisory authority. In Romania that is the ANSPDCP (dataprotection.ro). You may also complain to the authority where you live or work.
09 Security
Traffic is encrypted in transit with TLS. Passwords are stored only as salted hashes, never in a readable form. Access to production data is limited to the people who need it. Payment details never reach our infrastructure.
No system is perfectly secure. If a breach happens that is likely to put your rights at risk, we will notify the supervisory authority within 72 hours and tell you directly where the law requires it.
10 Children
The service is for adults. It is not directed at anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.
11 Changes to this policy
We may update this policy. The date at the top always shows the current version. If a change materially affects how we use your data, we will tell you by email or in the panel before it takes effect.
12 Contact
Privacy questions and requests: privacy@veloxmenu.cc. Everything else: support@veloxmenu.cc or our Discord.