1. Introduction
Welcome to VeloCash ("we", "our", or "us"). We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and mobile application (collectively, the "Service").
By accessing or using the Service, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.
2. Information we collect
We may collect the following types of information:
2.1 Personal information
- Account data: name, email address, phone number, business name, and login credentials when you register or update your profile.
- Business data: business address, tax identification number, and other business-related details you provide.
- Transaction data: records of purchases, sales, expenses, invoices, and payments processed through the Service.
- Contact data: customer and supplier details you add to manage your business relationships.
2.2 Automatically collected information
- Device information: device type, operating system, unique device identifiers, and mobile network information.
- Usage data: pages visited, features used, access times, and referring URLs.
- Location data: approximate location based on IP address. Precise location only in the Velo Invoice mobile app, only when an employee records a step of a field visit (for example "on the way", "arrived", "done") and has granted permission: the position at that moment is saved with that step for the business. Location is never collected in the background and is never used to track anyone.
- Notification token: if you turn on notifications in the mobile app, the device’s push token, its platform, the app language and your notification choices are stored with your account so that we can send them.
- Camera & storage access: when granted permission in the mobile app, used for scanning barcodes, capturing product images, and storing or retrieving documents.
3. How we use your information
We use the information we collect to:
- Provide, operate, and maintain the Service.
- Process transactions and send related information (invoices, receipts, confirmations).
- Manage your account and provide customer support.
- Generate business reports and analytics for your use.
- Send administrative notifications (system updates, security alerts, policy changes).
- Comply with legal obligations, including tax reporting requirements.
- Detect, prevent, and address technical issues and fraudulent activity.
- Improve and personalise the Service.
4. Data sharing and disclosure
We do not sell your personal information. We may share your information only in these circumstances:
- Service providers: with third-party vendors who perform services on our behalf (hosting, payment processing, analytics), bound by confidentiality obligations.
- Legal compliance: when required by law, regulation, or legal process, including reporting to the Tax Authority.
- Business transfers: in connection with a merger, acquisition, or sale of assets, with appropriate notice.
- With your consent: when you explicitly authorise sharing with third parties.
5. Data storage and security
We implement industry-standard security measures to protect your data, including encryption in transit (TLS/SSL), secure server infrastructure, regular backups, and access controls. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.
Your data is stored on servers that may be located in different jurisdictions. By using the Service, you consent to the transfer of information to countries outside your country of residence, which may have different data protection rules.
6. Data retention
We retain your personal information for as long as your account is active or as needed to provide the Service. We also retain data as necessary to comply with legal obligations (such as tax record-keeping requirements), resolve disputes, and enforce our agreements. You may request deletion of your account and associated data by contacting us.
You can delete your account yourself, inside the mobile app (Menu → Delete account), or as described on our account deletion page. Your sign-in stops working at once. Your personal data is deleted within 30 days; records the law obliges a business to keep, such as tax invoices (seven years in Israel), are kept for that period only and then deleted.
7. Your rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your personal data.
- Object to or restrict certain processing activities.
- Data portability — receive your data in a machine-readable format.
- Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, please contact us using the details below.
8. Mobile application permissions
Our mobile application may request the following permissions:
- Camera: to scan barcodes and capture product images.
- Storage: to save and access documents, invoices, and exported files.
- Location (only while the app is in use): to save where a field-visit step was recorded, at the moment the employee taps it. Never in the background and never for tracking; if refused, the step is saved without it.
- Notifications: only if you turn them on in the app; you choose which events arrive and can set quiet hours.
- Internet access: required for syncing data with the server.
You can manage these permissions at any time through your device settings. Denying certain permissions may limit functionality of the app.
10. Third-party services
The Service may integrate with third-party services (for example payment gateways and tax authorities). These third parties have their own privacy policies, and we encourage you to review them. We are not responsible for the privacy practices of third-party services.
To find and fix faults, the mobile app sends crash reports to Sentry (Functional Software, Inc.). A report contains the device model, the app version, the screen where the fault happened and the business identifier. Personal details such as email addresses, phone numbers and identity numbers are removed before it is sent.
The Velo Invoice mobile app sends crash reports to Firebase Crashlytics (Google LLC), from store builds only. A report contains the error and where in the app it happened, the app version, the device model and operating-system version, and a Crashlytics installation identifier. No user identifier is attached, and email addresses and long numbers are removed from error messages before sending. Notifications to the mobile apps are delivered through Google Firebase Cloud Messaging and the Apple Push Notification service.
Reading documents with AI: when you choose to read a photo or PDF of a supplier invoice or an expense (the photo-reading feature), the file is sent to our server and processed on our behalf by Anthropic (Claude), an artificial-intelligence service, only to fill in the form for you. The app asks for your consent before the first reading. Nothing else is sent, and the file is not used to advertise to you. The same applies when you ask the Velo assistant (VeloAi) a question on the website.
11. Children's privacy
The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 16, we will take steps to delete such information promptly.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.
Questions about your data?
Contact us and we will get back to you.