Privacy Policy
Updated May 14, 2026
We at VellumUp ("we", "our", or "us") are committed to protecting your privacy. This policy explains how we collect, use, and safeguard your information when you use the VellumUp platform — an AI-powered SEO article generation service (the "Service"). By using the Service, you agree to the practices described below.
1. Information We Collect
To provide and continuously improve the Service, we collect the following categories of information:
Account & Personal Data
When you register, we collect your email address, full name, and authentication credentials (including via Google OAuth). If you purchase a paid plan, billing and payment details are handled exclusively through our secure third-party payment processors — we do not store raw card data.
User Content & Website Data
We collect the website URLs, article briefs, and other inputs you provide so we can analyze your site, generate brand-matched SEO articles, and store them on your behalf. This includes scraped content from your own websites used solely to understand your brand voice and topic context.
Usage & Technical Data
We automatically collect technical information such as IP addresses, browser type and version, pages visited, session duration, and device identifiers. This data is used to optimize performance, debug issues, and improve the Service.
2. How We Use Your Data
VellumUp uses the information collected for the following purposes:
- To generate AI-powered, brand-matched SEO articles based on your website and article briefs.
- To analyze your website's brand voice, internal link structure, and keyword opportunities.
- To manage your account, track AI usage quotas, and deliver customer support.
- To send transactional emails (e.g., account verification, billing receipts) and, with your consent, product updates.
- To detect, prevent, and address fraud, abuse, or violations of our Terms of Service.
3. Third-Party AI Providers
The Service relies on advanced AI language models to generate article content. Your inputs are processed by OpenAI on our behalf.
Data Processing
When you submit a website URL or article brief, the relevant content is transmitted to OpenAI's servers for processing. This is subject to OpenAI's privacy policy and data usage terms. We use API access under agreements that restrict OpenAI from using your data to train their models.
Your Responsibility
Please do not submit personally identifiable information about third parties, confidential business data, or any content you do not have the right to share. Content you submit may be processed by external AI infrastructure outside your jurisdiction.
4. Data Security
We implement industry-standard security measures and protection technologies to reasonably safeguard your data. The user understands and agrees that no digital environment is entirely impenetrable, and that VellumUp does not guarantee absolute security. The Service makes use of third-party infrastructure and models; accordingly, the user undertakes not to input highly sensitive information into the Service (such as direct credit card details, protected trade secrets, or medical information).
- All data is encrypted at rest and in transit (TLS).
- Access to your data is enforced through Row-Level Security (RLS) policies — you can only access your own content.
- API keys and secrets are stored as environment variables and never exposed to the client.
- We perform periodic security reviews and dependency audits.
Your Account Security
You are responsible for maintaining the confidentiality of your login credentials and any API keys. VellumUp shall not be liable, under any circumstances, for unauthorized access, data breaches, or any other damage arising from the user's failure to secure their access credentials, including the use of a weak password, sharing access details with third parties, or failing to log out on a shared device.
5. Data Retention and Deletion
We retain your data for as long as your account is active or as necessary to deliver the Service and meet legal obligations. Generated articles, website scans, and account details are kept until you delete your account.
Your Right to Delete
You may delete your account and all associated data — including generated articles and website analyses — at any time via Settings → Danger Zone, or by contacting our support team.
6. Disclosure of Data
We do not sell your personal data. We may share information only in the following circumstances:
- With sub-processors (Supabase for database hosting, OpenAI for AI generation, LemonSqueezy for payments) strictly for operating the Service.
- When required by law, court order, or a request from a competent governmental or regulatory authority.
- To protect the rights, property, or safety of VellumUp, its users, or the general public.
- In connection with a merger, acquisition, or sale of assets — in which case you will be notified before your data is transferred or becomes subject to a different privacy policy.
7. Cookies and Tracking Technologies
We use cookies and similar technologies to operate the Service. These fall into two categories:
Strictly Necessary Cookies
Files that are critical for data security, authenticating your identity (Login), and maintaining the stability of your account during browsing. These cookies are essential for the basic operation of the platform and cannot be disabled, as doing so would prevent you from using the Service.
Performance / Analytics Cookies
Files used for statistical analysis of the user experience and improving site performance. You may configure your browser to refuse these cookies.
8. Children's Privacy
The Service is intended for users aged 18 and older. We do not knowingly collect personal information from minors. If we discover that a minor has created an account, we will promptly delete the account and all associated data.
9. International Data Transfers
Your data may be stored and processed in the United States and other countries. Such transfers are carried out in accordance with approved legal mechanisms, including Standard Contractual Clauses (SCCs) approved by the European Commission, and are subject to data processing agreements with each third-party provider. By using the Service, you consent to such transfers.
10. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes by updating the effective date at the top of this page. For significant changes, we may also send an email notification. We encourage you to review this policy from time to time.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at: support@vellumup.com