Privacy policy
Last updated: 18 October 2026.
This privacy policy explains how velar.one handles personal data when you visit the website, contact us, sign up or use the service. In short: we collect only what we need to deliver your blog posts, we never sell data, and our own visitor statistics work without cookies.
Who is responsible
Huotari OÜ (registry code 16614218, VAT number EE102556708), Pronksi tn 3-24, 10124 Tallinn, Estonia. velar.one is a service of Velar Cloud, which is run by Huotari OÜ.
Questions about your data: support@velar.one.
What we collect and why
- Visiting the website: our own statistics count page views, the website that sent you (its domain only), device type and screen size, browser and operating system family, country, campaign tags in the link, how far you scroll, how long you actively read, which areas of a page are clicked (a coarse grid, no mouse movements) and, for forms, the names of the fields you used — never what you type. This uses no cookies and stores no IP addresses: visitors are counted with an anonymous code that changes every day, so visits can’t be linked across days. Basis: our legitimate interest in improving the website.
- Contact form: your name, email, company, website and message, so we can answer you. Basis: legitimate interest, or steps before a contract when you ask about buying.
- Free sample: your blog’s address, what it is about and your email, so we can make the sample and send it to you. We email you only about the sample you asked for — no marketing. Basis: steps before a contract, at your request.
- Sign-up form: your name, email, website, platform, plan, billing period and post languages, and the time you accepted the terms and asked us to start right away. Basis: steps before a contract, and proof of what you agreed to.
- Customers: your answers after payment — about your business, products, readers, tone of voice, topics, pages to link to and publishing days — and what we agree on the setup call. We use them to write and publish your posts. Basis: contract.
- Payments: Stripe handles payments and asks for your billing address and, for companies, the VAT ID. We receive your name, email, billing details, company, VAT ID and the status of your subscription — never your card details. Basis: contract and our legal duties in accounting and tax.
- Your customer account: your password only as a one-way hash that can’t be turned back into the password, when you last signed in, the topic ideas you send us and any break you take. Basis: contract.
- Emails: the order confirmation, messages about your service and replies to your questions. Basis: contract or legitimate interest. We send no newsletters without your consent.
- Pages that weren’t found: the missing address and the website that linked to it, so we can fix broken links — without IP addresses. Basis: legitimate interest.
Writing your posts with AI
Your posts and images are created with AI services. For that we send them what the writing needs: your business description, topics, readers, tone of voice and your other answers about the content. We never send your payment details, and we ask you not to put other people’s personal data in your answers.
The AI services work for us under data processing agreements. We only use services whose terms don’t allow them to train their models on the data we send.
Cookies
The website works without cookies, and our own statistics use none.
If we switch on Google Analytics or the Meta Pixel, a banner asks for your consent first, and they load only if you accept. Your choice is saved in your browser, and you can change it anytime with “Cookie settings” at the bottom of the page.
Stripe’s checkout page, the sign-in to your customer account and our team’s admin login use the cookies they need to work. The account cookie only keeps you signed in, for up to 30 days, and is never used for statistics or advertising.
Who we share data with
- Stripe (Stripe Payments Europe Ltd., Ireland) — payments and invoices
- Contabo GmbH, Germany — the servers that run this website and its database
- An email delivery service — sending our emails
- AI services — writing your posts and creating images
- Your own website platform — when we publish posts there for you
- Google and Meta — only if you accept their cookies
They process the data only for these purposes. If a provider processes data outside the EU/EEA, the transfer is protected by an EU adequacy decision (such as the EU–US Data Privacy Framework) or the European Commission’s standard contractual clauses. We never sell personal data. Ask us for the current list of providers anytime.
How long we keep data
- Raw visitor statistics: 90 days. After that only anonymous daily totals remain.
- Server logs: up to 14 days.
- Contact messages and sample requests: up to 24 months.
- Sign-ups that were never paid: up to 6 months.
- Customer answers and setup notes: while your subscription runs, and up to 3 months after it ends.
- Billing records such as invoices and payments: 7 years, as Estonian accounting law requires.
Your rights
You can ask to see your data, correct or delete it, restrict or object to its use, and receive it in a portable format. Where we rely on your consent, you can withdraw it at any time. Email support@velar.one — we answer within one month.
You can also complain to a data protection authority: in Estonia the Data Protection Inspectorate, or the authority where you live — in Finland the Data Protection Ombudsman.
Changes
We update this policy when our handling of data changes, and the date at the top shows the current version. Customers hear about important changes by email. See also our terms of service.