Privacy Policy
1. General; Information We Collect
1.1 Scope
These Privacy Policy provisions (“Policy”) apply to all personal data that Velto Technologies Ltd. with registered number 2189318 and registered address: Ground Floor, O'Neal Building, 57 Main Street, Road Town, Tortola VG 1110, PO Box 3169 PMB 425, British Virgin Islands,, and its affiliates (“Velto,” “we,” “us,” or “our”) collect, receive, or process in connection with your access to or use of any Velto Wallet Services, including:
- The Velto website at https://velto.com and associated subdomains (“Site”)
- Velto iOS and Android mobile applications (together, the “App”)
- Web-based interfaces, widgets, plugins, and APIs (collectively with the Site and App, the “Services”)
- Pre-launch whitelist registration, email communications, and any new features we introduce
- Velto provides non-custodial web3 tools and interfaces. Users remain in full control of their private keys and assets at all times, and Velto does not collect or store user identity documentation or transaction histories.
1.2 Legal Bases for Processing (where applicable)
When you are located in a jurisdiction that requires a legal basis for data processing (e.g., the European Economic Area under the GDPR), we rely on one or more of the following:
- Consent: You have given clear consent for us to process your personal data for one or more specified purposes.
- Contractual Necessity: Processing is required to perform our contract with you—e.g., to deliver the Services you request.
- Legal Obligation: Processing is necessary to comply with non-financial legal requirements applicable to Velto (for example, data-security, consumer-protection, or tax-reporting obligations).
- Velto Technologies Ltd is not a Virtual Asset Service Provider (VASP) and therefore is not subject to anti-money-laundering (AML), know-your-customer (KYC), or transaction-monitoring regulations.
- Legitimate Interests: Processing is necessary for our legitimate interests (such as Service improvements, fraud prevention, or security) and those interests are not overridden by your rights.
1.3 Categories of Information We Collect
Velto collects or receives personal data in the following categories:
(a) Information You Provide Voluntarily
- Contact Details: Email address, name, phone number (for whitelist registration, support, marketing opt-ins)
- Account Credentials: Username, password (securely hashed), and wallet public addresses
- Communications Content: Customer-support inquiries, feedback, survey responses, and any User Content you submit
(b) Information Collected Automatically
- Usage Data: Pages and features accessed, click paths, form submissions, error and crash logs
- Device & Technical Data: IP address; device model and operating system; browser type and version; unique device identifiers; mobile carrier; screen resolution
- Analytics & Tracking: Cookies, local storage, pixel tags, SDKs, and similar technologies used by us or our analytics partners
(c) Information from Third-Party Sources
- Service Providers: Data from email-delivery vendors, analytics platforms, identity-verification or compliance vendors
- Public Blockchain Data: Publicly available on-chain data (such as wallet addresses, timestamps, and transaction amounts) that are automatically read from the blockchain when you use Velto’s interface. This information is not stored by Velto in any user-identifiable way and is used solely to display your wallet activity or execute your chosen actions. Velto does not record, track, or analyze blockchain transactions for compliance or profiling purposes.
1.4 Sensitive Data
We do not intentionally collect “special categories” of sensitive personal data (such as health, race, religion, or biometric data). If you proactively include such information in any free-form fields (e.g., support tickets), we may retain it only to the extent required to respond to your request, then delete it in accordance with our retention schedule.
1.5 Minors
Our Services are not directed to individuals under 18 (or the age of majority in your jurisdiction). We do not knowingly solicit or collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact privacy@velto.com so we can delete it promptly.
1.6 Retention Overview
We retain each category of personal data only as long as necessary to fulfill the purpose for which it was collected or as required by law, then securely delete or anonymize it in accordance with Section 5 (Data Retention) below. Continuous or periodic data purge processes ensure stale or unnecessary data is removed.
2. How We Use the Information We Collect
Velto uses the personal data we collect to operate, secure, and enhance our Services, to communicate with you, and to comply with legal requirements. Specifically:
2.1 Provision and Improvement of Services
- To deliver and maintain core functionality (e.g., Swap execution, Price Feeds, Trending Tokens, Portfolio Overview, Whitelist notifications) and to process transactions on the Solana blockchain.
- To analyze usage patterns and performance metrics for service optimization, feature development, and debugging.
- All blockchain interactions through the Velto wallet occur directly between your self-custodied wallet and the blockchain network. Velto does not hold, access, or manage user funds or private keys.
- To personalize your experience, such as fiat-currency display preferences and curated token lists.
2.2 Communication and Support
- To send transactional messages—such as Whitelist confirmations, product updates, release notes, system alerts, and security advisories.
- To provide customer support, respond to inquiries, and manage your account or App-store transactions.
- To conduct surveys and solicit feedback to guide product roadmap decisions and improve user satisfaction.
2.3 Security, Fraud Prevention, and Compliance
- To detect, investigate, and prevent fraud, abuse, spam, or other malicious or prohibited activities, including monitoring for unusual login attempts, access patterns, or security anomalies within Velto’s own systems.
- To enforce our Terms and Conditions, investigate violations, and defend against legal claims.
- To ensure security and prevent misuse of the Services, including detecting spam, fraud, or unauthorized activity. Velto does not perform AML, KYC, or sanctions screening, as such requirements do not apply to its non-custodial operations.
2.4 Analytics and Research
- To perform aggregate and anonymized analytics via cookies, SDKs, and event-logging for product metrics, usage trends, and capacity planning.
- To conduct internal research and statistical analyses to improve security protocols, routing algorithms, and market-making integrations.
2.5 Legal Obligations and Legitimate Interests
- To comply with subpoenas, court orders, governmental investigations, and other legal processes, and to respond to requests from law-enforcement or regulatory authorities.
- To protect our rights, enforce our agreements, and defend against third-party claims or litigation.
- To maintain business continuity, conduct audits, and ensure the integrity of our Services and infrastructure under our legitimate commercial interests.
2.6 Marketing and Promotional Communications (Opt-In)
- With your consent, to send marketing emails about new features, promotions, or events. You may unsubscribe at any time via links in the email or by contacting whitelist@velto.com.
Your continued use of Velto wallet and associated services and promotions indicates your acceptance of these data-use practices. Where required, we will seek additional consent or comply with opt-out requests in accordance with applicable data-protection laws.
3. How We Share the Information We Collect
We do not sell or rent your personal data. We share the information we collect only in the limited circumstances described below:
3.1 Service
We engage trusted third-party vendors and contractors to perform services on our behalf, including:
- Email delivery and messaging services for Whitelist confirmations and marketing communications;
- Analytics and performance-monitoring platforms to understand usage and improve the Services;
- Technical and security vendors that help us maintain the functionality and safety of the Services (for example, performance monitoring, email delivery, and error logging).
3.2 Third-Party Integrations
When you use features that connect to external blockchain applications or data feeds—such as decentralized exchanges, market-making services, or price-feed oracles—we share only the minimum information required (e.g., your public wallet address or transaction parameters) to facilitate the transaction or retrieve pricing. We do not disclose your name, email, or IP address to these third parties without your consent.
3.3 Affiliates and Corporate Transactions
We may share information with our affiliates and subsidiaries for purposes consistent with this Policy. In the event of a merger, acquisition, reorganization, or sale of assets, user data may be transferred as part of that transaction. Any successor entity will be bound by the terms of this Policy or will notify you of changes.
3.4 Legal Compliance and Protection of Rights
We may disclose personal data if required to do so by law, subpoena, court order, or regulatory authority, or where we have a good-faith belief that disclosure is necessary to:
- Comply with legal obligations or cooperate with law enforcement;
- Protect and defend the rights, property, or safety of Velto, our users, or the public;
- Investigate or prevent fraud, security breaches, or technical issues.
3.5 Aggregate and De-identified Data
We may share or publish aggregated, anonymized data that does not identify you personally—such as total transaction volumes, most popular tokens, or usage statistics—for research, marketing, or industry-benchmarking purposes.
3.6 Your Choices
Where required by applicable law, we will obtain your consent before sharing personal data beyond the categories described above. You may opt out of marketing-related data sharing by following the unsubscribe instructions in our emails or by contacting privacy@velto.com. Continual use of the Services after receiving notice of data-sharing changes constitutes your consent to those changes.
4. Our Use of Cookies and Other Tracking Mechanisms
4.1 Cookies and Similar Technologies
We and our service providers use cookies, web beacons, pixel tags, SDKs, storage, and similar tracking technologies (collectively, “Tracking Technologies”) to collect and store information when you visit or interact with our Site, App, or Services.
4.2 Types of Cookies
a. Strictly Necessary Cookies:
- Enable core functionality (e.g., login session, security, load balancing).
- Cannot be disabled without impairing the Services.
b. Performance and Analytics Cookies:
- Collect aggregated information about page visits, feature usage, errors, and performance.
- Help us optimize speed, troubleshoot issues, and improve the user experience.
c. Functionality Cookies:
- Remember preferences and settings (e.g., language, fiat-currency choice, slippage tolerance).
- Enhance and personalize your experience.
d. Advertising and Marketing Cookies (Opt-In):
- Track interaction with marketing emails, in-app promotions, and referral programs.
- Enable us to measure the effectiveness of campaigns and deliver tailored offers.
- Activated only if you consent via our cookie-banner or settings panel.
4.3 Purposes of Tracking Technologies
- Authenticate users and maintain session state.
- Analyze usage patterns, feature adoption, and system performance.
- Personalize content, recommendations, and interface settings.
- Prevent, detect, and investigate fraud, security threats, and abuse.
- Measure and monitor marketing campaigns and channels.
Tracking technologies are used only for technical, analytics, and usability purposes and are never applied for financial profiling, behavioral marketing, or AML/KYC purposes.
4.4 Third-Party Tracking
We may allow third-party service providers—such as analytics platforms, advertising networks, and social-media widgets—to set cookies or similar technologies on your device. These third-parties’ use of Tracking Technologies is governed by their own privacy policies. We do not control their practices and encourage you to review their disclosures.
4.5 Managing and Opting Out
You can manage, block, or delete cookies and other Tracking Technologies at any time by:
- Adjusting your browser settings (e.g., refuse all or certain cookies, clear existing cookies).
- Using in-app or on-site cookie-banner controls to toggle non-essential cookies and marketing trackers.
- Installing device-level or browser-level plugins or extensions (e.g., “Do Not Track” browser settings).
Disabling performance or functionality cookies may degrade your experience or prevent use of certain features. Disabling advertising cookies will not affect core Services.
4.6 Retention of Tracking Data
We retain cookie-generated and tracking log data only as long as necessary for the purposes described above, typically up to 24 months, unless a longer retention period is required by law or for security investigations. After that, we anonymize or delete such data.
4.7 Updates to This Section
We may update our cookie and tracking-technology practices from time to time. Material changes will be reflected by a new “Effective Date” at the top of this Policy and notice in our cookie-banner or privacy center. Continued use of the Services after updates constitutes acceptance of the revised practices.
5. Third-Party Links
5.1 Links to External Sites and Services
The Services may contain links to websites, applications, widgets, plugins, or other online resources operated by unaffiliated third parties (“Third-Party Links”). Third-Party Links include, for example, links to decentralized exchanges, market-maker platforms, analytics providers, social-media sites, and payment processors.
5.2 No Endorsement or Control
We do not control, operate, or endorse any Third-Party Links. Third-Party Links are provided solely for your convenience and informational purposes. Velto is not responsible for the content, security, or availability of any external site or service, nor for any losses or damages you may incur by relying on or interacting with them.
5.3 Data Sharing via Third-Party Links
When you click or connect to a Third-Party Link, you may be redirected or prompted to share certain information (e.g., your public wallet address, transaction details, or referral parameters) directly with that third party. Such information sharing is governed by the privacy policy and terms of use of the third-party provider. Velto is not responsible for how third parties collect, store, use, or disclose your data. When you initiate blockchain transactions through Velto, these are executed directly on public decentralized networks. Such on-chain data are publicly visible and are not controlled or modified by Velto.
5.4 No Warranty; Release
TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, VELTO EXPRESSLY DISCLAIMS ANY LIABILITY FOR THIRD-PARTY LINKS, INCLUDING FOR:
a. THE ACCURACY, COMPLETENESS, OR TIMELINESS OF CONTENT ON THIRD-PARTY SITES;
b. ANY SECURITY VULNERABILITIES, MALWARE, OR OTHER HARMFUL CODE CONTAINED IN OR DELIVERED BY THIRD-PARTY SITES;
c. ANY TRANSACTIONS OR INTERACTIONS YOU CONDUCT VIA THIRD-PARTY LINKS; AND
d. ANY THIRD-PARTY PRODUCTS OR SERVICES OFFERED THROUGH THIRD-PARTY LINKS.
You release and hold harmless Velto and its officers, directors, employees, agents, and affiliates from any claims, losses, or damages arising from or related to your access to or use of any Third-Party Links.
5.5 Verification and Caution
Before providing any personal information or authorizing transactions through a Third-Party Link, you should verify the URL or app source, review the third party’s privacy policy and terms, and ensure you trust the provider. If you encounter any suspicious or malicious third-party content, please notify us at support@velto.com.
6. Personal Information Choices
6.1 Opt-Out of Marketing Communications
You may opt out of receiving promotional emails, newsletters, and other marketing communications at any time by:
. Clicking the “unsubscribe” link provided in each email;
b. Updating your preferences in your account settings; or
c. Sending a written request to privacy@velto.com.
Opting out of marketing communications will not prevent transactional or service-related messages (e.g., whitelist confirmations, security alerts).
6.2 Cookie and Tracking Controls
6.2.1 Browser Settings
You can manage or block cookies and similar tracking technologies at the browser level by adjusting your browser preferences. Disabling strictly necessary cookies may impair core functionality.
6.2.2 In-App/Cookie Banner Controls
Within the Velto wallet interface or via our cookie banner, you may:
a. Toggle off Performance & Analytics cookies;
b. Decline Advertising & Marketing cookies; and
c. Review details about each cookie category.
Changes take effect upon saving your preferences.
6.3 Device-Level Permissions
On mobile devices, you control app permissions (e.g., notifications, camera, local storage) through your device’s settings. Revoking essential permissions may limit or disable certain features of the App.
6.4 Data Access, Correction, and Deletion
Subject to applicable law, you have the right to:
a. Access the personal data we hold about you;
b. Request correction of inaccurate or incomplete information; and
c. Request deletion of personal data (where deletion will not interfere with legal or contractual obligations).
To exercise any of these rights, submit a request to privacy@velto.com. We will acknowledge your request within 10 business days and complete it within 30 days, unless a longer period is required by law. Please note that blockchain transactions are permanent and cannot be altered or deleted by Velto. Requests for deletion therefore apply only to off-chain data (for example, account information or contact details stored on Velto systems).
6.5 Data Portability
Where legally required, you may request a machine-readable copy of your personal data for transmission to another provider. Submit your request to privacy@velto.com; we will respond within 30 days.
6.6 Withdrawing Consent
Where processing is based on your consent, you may withdraw consent at any time by contacting privacy@velto.com or using the withdrawal mechanism provided at the time of consent. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
6.7 Supervisory Authority
If you reside in a jurisdiction with a data-protection authority (e.g., the EEA), you have the right to lodge a complaint with your local regulator if you believe our processing violates applicable law. A list of EEA supervisory authorities can be found at https://edpb.europa.eu/about-edpb/board/members_en.
6.8 Effect of Choices on Services
Exercising any of the above choices may limit or disable certain features of the Services. We will inform you if essential functionality is affected and provide instructions to restore service by re-enabling the relevant settings.
7. Changes to This Privacy Policy
Governing Law: This Policy is governed by the applicable laws of the British Virgin Islands and applies to Velto Technologies Ltd, incorporated in the BVI.
8. Right to Modify
We reserve the right to amend or update this Privacy Policy at any time, for any reason, and without prior—except where notice is required by law. Material changes (e.g., new data-processing purposes, changes in data-sharing practices) will be highlighted with a new “Effective Date” at the top and, where feasible, accompanied by prominent notice (e.g., banner on the Site or in-app notification).
8.2 Notice of Changes
We will provide notice of material changes by at least one of the following methods:
a. Posting the updated Privacy Policy on https://velto.com/privacy with the revised “Effective Date.”
b. Sending an email to the address you provided.
c. Displaying an in-app or on-site banner prompting you to review and accept the new Policy.
8.3 Effective Date and Acceptance
Each updated Policy will specify an “Effective Date.” Your continued use of the Services after the Effective Date constitutes your acceptance of the revised Privacy Policy. If you do not agree, you must immediately cease using the Services and may request deletion of your personal data as described in Section 6.