Privacy Policy
Last Updated: June 15, 2026
Table of Contents
1 Introduction
Welcome to Vela ordo AI ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI agent orchestration platform and related services (collectively, the "Services").
Company Information:
DataR Technology Co. Ltd.
Registered in Taiwan
Email: support@datar.ai
By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.
🌍 Global Service Notice
Our Services are available globally. We comply with GDPR (EU), CCPA (California, USA), and Taiwan's Personal Data Protection Act. Users in different jurisdictions have different rights—please see Section 6 for details.
2 Information We Collect
2.1 Information You Provide Directly
- Account Information: Email address, name, phone number (optional), and company name (for business accounts)
- Payment Information: Credit card details or cryptocurrency wallet addresses (processed securely by our payment processors)
- AI Agent Content: Agents you create, prompts, configurations, and related data
- Communications: Messages you send us via email, support tickets, or contact forms
2.2 Information Collected Automatically
- Device Information: Browser type, operating system, device type
- Usage Data: API usage logs, feature usage statistics, error logs
- Cookies: We use cookies for analytics and service functionality (see Section 7)
2.3 Information We Do NOT Collect
- We do NOT collect or store your ChatGPT conversation history
- We do NOT track your IP address for identification purposes
- We do NOT use your AI Agent content to train AI models
3 How We Use Your Information
We use the information we collect for the following purposes:
Service Delivery
To provide, maintain, and improve our AI agent platform
Security
To detect, prevent, and address fraud or security issues
Communication
To send you service updates, security alerts, and support messages
Billing
To process payments and manage your subscription
Analytics
To understand how users interact with our Services (aggregated data only)
Legal Compliance
To comply with legal obligations and protect our rights
🚫 What We DON'T Do
- We do NOT sell your personal data to third parties
- We do NOT use your data for advertising or marketing to third parties
- We do NOT share your AI Agent content with anyone without your consent
4 Data Sharing and Third Parties
We may share your information with the following categories of third parties:
Service Providers
We work with trusted third-party providers to operate our Services:
- Microsoft Azure: Cloud hosting (Asia-Pacific region)
- OpenAI, Anthropic, Google: AI model APIs
- HubSpot: CRM and marketing automation
- GitHub: Code repository and development tools
These providers are contractually obligated to protect your data and only use it for the services they provide to us.
Legal Requirements
We may disclose your information if required by law, court order, or government request, or to protect our rights and safety.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.
5 Data Storage and Security
5.1 Where We Store Your Data
Your data is primarily stored on Microsoft Azure servers located in the Asia-Pacific region. We use industry-standard security measures to protect your data.
5.2 Security Measures
5.3 Data Retention
We retain your personal data only for as long as necessary to provide our Services and comply with legal obligations:
- Active Accounts: Data retained while your account is active
- Deleted Accounts: Data deleted within 30 days after account deletion
- Legal Requirements: Some data may be retained longer if required by law
- Backup Systems: Data in backups deleted within 90 days
5.4 Zoom Integration
When you link your Zoom account, Vela ordo AI stores only your Zoom OAuth refresh token, encrypted at rest (AES-256-GCM), so that Vela can join meetings on your behalf. Per-meeting On-Behalf-Of (OBF) tokens are short-lived, single-use, and are never stored or logged. We request a single Zoom scope, user:read:token.
You can unlink at any time in the app—which revokes the authorization at Zoom and deletes the stored token—or remove the app from Zoom → Settings → Installed Apps. Contact support@datar.ai for data-deletion requests.
⚠️ Important Security Notice
While we implement strong security measures, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security, but we continuously work to improve our safeguards.
6 Your Rights
Depending on your location, you may have the following rights regarding your personal data:
Right to Access
Request a copy of the personal data we hold about you
Right to Rectification
Correct any inaccurate or incomplete data
Right to Deletion (Right to be Forgotten)
Request deletion of your personal data (subject to legal requirements)
Right to Data Portability
Export your data in a machine-readable format
Right to Object
Object to certain processing of your data (e.g., marketing)
Right to Restriction
Request restriction of processing under certain circumstances
How to Exercise Your Rights
To exercise any of these rights, please:
- Email us at support@datar.ai
- Or delete your account directly from your account settings (self-service)
We will respond to your request within 30 days (GDPR) or as required by applicable law.
Region-Specific Rights
🇪🇺 EU/EEA Residents (GDPR)
You have all the rights listed above. You also have the right to lodge a complaint with your local data protection authority.
🇺🇸 California Residents (CCPA)
You have the right to know what personal information is collected, to request deletion, and to opt-out of the "sale" of personal information (we do not sell your data).
🇹🇼 Taiwan Residents (Personal Data Protection Act)
You have the right to access, correct, delete, and restrict processing of your personal data under Taiwan's Personal Data Protection Act.
8 International Data Transfers
Our Services are global. Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place:
- Primary Storage: Microsoft Azure Asia-Pacific region
- EU Data: We comply with GDPR adequacy requirements
- Standard Contractual Clauses: Used for transfers to non-adequate countries
9 Children's Privacy
Our Services are available to users of all ages. However, we do not knowingly collect personal information from children under 13 without parental consent.
If we become aware that we have collected data from a child under 13 without parental consent, we will take steps to delete that information promptly.
Parents/Guardians: If you believe your child has provided us with personal information, please contact us at support@datar.ai
10 Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the new Privacy Policy on this page
- Updating the "Last Updated" date at the top
- Sending you an email notification (for significant changes)
Your continued use of our Services after changes become effective constitutes acceptance of the updated Privacy Policy.
11 Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Response Time: We aim to respond to all privacy-related inquiries within 30 days.
Ready to experience Vela ordo AI?
Back to Home