Privacy Policy

Effective date: 7 August 2026

This is a product-ready privacy policy draft for Veldt OS. It must be reviewed and adapted by the operating entity and a South African privacy professional before public launch, especially for recording consent, international transfers, direct marketing, and sector-specific obligations.

1. Who we are

Veldt OS is an operating system for organising knowledge and turning it into content. The service is operated by the Veldt OS business entity identified in the applicable order form or account records. Privacy questions can be sent to shifaan@veldtos.com.

2. Information we collect

• Account and organisation information, such as name, email address, role, company, country, time zone, profile image, and subscription details.
• Knowledge you provide, including audio, video, documents, transcripts, meeting notes, URLs, metadata, speaker labels, generated content, and edits.
• Connected-service information, such as provider account identifiers, OAuth tokens, permissions, and connection status. Payment card details are handled by the payment provider and are not stored by Veldt OS.
• Usage, diagnostic, security, device, cookie, analytics, and support information needed to operate and improve the service.

3. How we use information

We use information to provide the workspace, process and organise knowledge, generate requested content, preserve user-selected writing preferences, operate integrations, manage subscriptions, provide support, secure the service, measure product performance, prevent abuse, and comply with law. We do not sell customer content or use private customer content for unrelated advertising.

4. Recordings and people mentioned in content

You must have the rights and permissions required to upload recordings, transcripts, documents, voiceprints, personal information, and third-party material. For in-person meetings, board meetings, voice identification, or speaker labelling, you are responsible for obtaining appropriate notice and consent and for complying with applicable recording, biometric, employment, company, and privacy laws. Veldt OS should not be used to make consequential decisions about a person based only on a voice match.

5. Service providers

We use carefully selected providers to host, secure, process, deliver, and measure the service. Depending on the features enabled, these may include Supabase, Vercel, Resend, OpenAI, Google or Gemini services, Meta, LinkedIn, Zoom, Microsoft, WhatsApp, analytics providers, and payment providers. Providers may process information in countries outside South Africa under their own terms and privacy documentation.

6. Legal bases and marketing

We process information under the lawful basis available in the relevant jurisdiction, including performance of a contract, consent, legitimate interests, and legal obligations. Product and newsletter communications require appropriate consent where required. Every marketing email will include an unsubscribe method. Transactional messages, such as security and account notices, may still be sent when necessary to provide the service.

7. Retention, export, and deletion

We retain information while an account is active and for as long as reasonably necessary for the purposes described here, legal obligations, dispute resolution, security, backups, and legitimate business records. You can request export, correction, or deletion by contacting us or using available workspace controls. Deletion from active systems may not immediately remove encrypted backups or records we must retain by law.

8. Security

We use access controls, encryption in transit, provider security controls, logging, and least-privilege practices appropriate to the service. No online service can guarantee absolute security. Keep credentials private, review connected integrations, and tell us promptly about suspected unauthorised access.

9. Cookies and analytics

Veldt OS may use essential storage and cookies to keep the application working and may use analytics or advertising measurement tools when enabled. Where required, non-essential tools will be controlled by consent. You can manage browser storage and privacy controls, although disabling essential storage can affect the service.

10. Your rights

Subject to applicable law, you may request access to, correction of, deletion of, or restriction of processing of your personal information, object to certain processing, withdraw consent, and request portability. You may lodge a complaint with the relevant privacy regulator. South African users may contact the Information Regulator of South Africa.

11. Children and third-party services

The service is intended for businesses and adults and is not directed to children. Connected services are controlled by their respective providers. Their availability, permissions, and privacy practices are outside Veldt OS's control.

12. Changes and contact

We may update this policy as the service changes. The effective date above will be updated when material changes are made. Questions, requests, and privacy complaints can be sent to shifaan@veldtos.com.