Privacy Policy

Last updated: August 2026

VELURA is built privacy-first. This policy explains how your data is handled.

Data storage — local-first

The default deployment of VELURA runs entirely in your browser. Your scripts, voiceovers, thumbnails, videos, schedules, revenue and affiliate data are stored locally on your device using browser storage (localStorage). There is no VELURA server in the default (static) deployment — nothing you create is transmitted to us.

AI providers (optional)

VELURA works fully offline with a built-in script engine. If you choose to add an AI provider in Settings, your provider base URL and API key are stored on your device only, and requests go directly from your browser to that provider. We never see or store your key or your prompts. You can clear this at any time in Settings.

Cookies

The static app uses no tracking or advertising cookies. Theme preference and a “PWA install dismissed” flag are stored locally. The optional Better Auth upgrade uses a strictly-necessary session cookie (velura.*) for authentication only.

Analytics

The default deployment does not include third-party analytics. We do not track your behavior across sites.

Your rights (GDPR / CCPA)

• Access & portability: export your entire workspace as JSON from Settings → Data & privacy.
• Erasure: reset your workspace from Settings → Data & privacy, or clear site data in your browser.
• No selling: we do not sell or share your data — there is no data pipeline.

Children

VELURA is intended for creators and is not directed at children under 13. We do not knowingly collect data from children.

International transfers

Because the default app is local-first, your data does not leave your device. Optional AI provider requests are governed by that provider’s privacy policy.

Changes

This policy may be updated; material changes will be noted in the repository.

Contact

Open an issue on the GitHub repository for privacy questions.