Privacy policy
Last updated: 2026-10-08
This policy covers vellio.io before launch: the waitlist and the analytics cookies. When vellio launches it is replaced by the policy for the whole service.
1. Who is responsible for your data
The controller of your personal data is Błażej Wróblewski, ul. Dworcowa 32, 43-262 Radostowice, Polska, who runs vellio.
NIP (Polish tax number): not yet assigned. REGON (Polish business register number): not yet assigned. The business is being registered; both numbers will be added here as soon as they are assigned.
For anything about your data, write to hello@vellio.io.
2. The waitlist
What we collect: your email address, the consent sentence you ticked, when you signed up, the language of the page, the page you signed up from, and your browser details (user agent).
Why: to confirm your signup by email, then send you news about vellio’s launch and early access. Nothing else, and we never give your address to anyone for their marketing.
Legal basis: your consent (GDPR art. 6(1)(a) and art. 398 of the Polish Electronic Communications Law). Giving your address is voluntary.
How long: your address is kept until you unsubscribe, and at most 6 months after vellio launches.
Unsubscribing: every email has an “Unsubscribe” link. Unsubscribing deletes your address entirely.
3. Cookies and analytics
The site stores a cookie with your language and, in your browser’s storage, your cookie choice. Both are needed for the site to work.
With your consent (the cookie banner) we use Google Analytics 4 to understand how visitors use the site. Without consent Google Analytics sets no cookies (Consent Mode, defaulting to denied). Legal basis: consent (GDPR art. 6(1)(a), art. 399 of the Polish Electronic Communications Law). Google Analytics cookies expire after at most 2 years, and analytics data is kept for at most 14 months. To withdraw consent, clear this site’s data in your browser and the banner appears again.
4. Who processes data for us
Providers who process data on our behalf: Supabase (database), Vercel (hosting), our email provider (Resend, moving to ZeptoMail’s EU data centre) and Google Ireland Limited (Google Analytics, only with your consent).
Some of them are based in the USA or may transfer data there. Such transfers rely on the European Commission’s decision on the EU-US Data Privacy Framework or on standard contractual clauses.
5. Your rights
You can ask to access, correct or delete your data, restrict its processing, receive it in a portable format, and withdraw consent at any time (which does not affect processing before that). Just write to the address above.
You can also complain to the Polish data protection authority, Prezes Urzędu Ochrony Danych Osobowych (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl).
We make no automated decisions about you and do no profiling.