Privacy policy
Last change: 24 October 2026
1. Who is responsible
Veqlon is a service of Gyanesh Kumar Pandey, proprietor, C-2/202, Vishal Khand, Gomti Nagar, Lucknow, Uttar Pradesh 226010, India ("we"). Contact for privacy: [email protected], subject "Privacy".
There are two roles:
- We decide about the data of the website, of the sign-up, of the owner account and of the payments. This policy describes that data.
- Your business decides about the data in its apps: the records, the files, the accounts of the staff, the locations and the face check. For that data, we process it only for your business, as described in the data processing terms. If you work for a business that uses Veqlon, ask that business about your data first.
2. Which data we use, and why
| Data | Why | Legal basis |
|---|---|---|
| Sign-up: company name, address name, your name, your email, country | To make your Veqlon, to confirm your email, and to write to you about your account and your trial | Contract |
| The internet address (IP address) of a sign-up, and the result of the robot check | To stop abuse and automated sign-ups | Legitimate interest (security) |
| Plan, payments, invoices; the name, address and GSTIN that you give for invoices | To take payments and to keep the records that tax law requires | Contract; legal obligation |
| Emails that you send to us | To answer you | Contract; legitimate interest |
| Technical logs of the servers (time, address, errors) | To keep the service working and safe | Legitimate interest (security) |
We do not sell personal data. We do not use it for advertising. The website and Veqlon use no tracking or advertising cookies. Veqlon uses one necessary cookie to keep you signed in.
3. Data in the apps of your business
Your business decides what it keeps in Veqlon. Typical data: the names and sign-in names of the staff, the records of the apps, attached files and photos, and, when an app needs it:
- Location: the place of the phone when a person does an action that needs it, for example a check-in. The phone asks for permission.
- Face check: one reference photo and a face print (128 numbers) for each person who agrees, and small pictures of failed checks for 30 days. The phone of the person keeps the face print for checks without a connection, and deletes it at sign-out. The daily pictures of successful checks are not kept. Each person can delete their face data in Veqlon at any time.
4. Where the data is kept, and who helps us
The data of each business is on our server in the European Union. These service providers help us; each one gets only the data that its task needs:
| Provider | Task | Place |
|---|---|---|
| Hetzner Online GmbH | The server and its database | Finland (EU) |
| Cloudflare, Inc. | Secure connection to the server, domain names, robot check, storage of files and backups (R2) | Files and backups in the EU; the network is worldwide |
| Resend | Emails from Veqlon (confirmation, reminders) | Sent from the EU (Ireland); a company in the USA |
| OpenAI | The AI features, only when a person uses them: the text of the request and the records that the task needs | USA |
| Razorpay Software Pvt. Ltd. | Payments | India |
Some providers are outside the EU or outside India. For them, we rely on the data protection terms of those providers. Ask us for details.
5. How long we keep data
- Sign-up and account data: while your business uses Veqlon, and up to 90 days after the end.
- The data of a business: up to 90 days after the end of the trial or of the plan; the backups 30 days more.
- Invoices and payment records: as long as the tax laws require.
- Pictures of failed face checks: 30 days.
- Technical logs: usually not more than 30 days.
6. Security
- Each business has its own copy of Veqlon and its own database.
- All connections are encrypted (HTTPS). Passwords are stored only as secure hashes.
- Repeated wrong passwords are blocked. Every change in an app is recorded with the person and the time.
- Backups are made every night.
7. Your rights
You can ask to see your personal data, to correct it, to delete it, to limit its use, to get a copy in a common format, and to object to its use. You can withdraw a consent at any time; this does not change what was done before. Write to [email protected]. We answer within 30 days.
You can also complain to the data protection authority of your country. In India, this is the Data Protection Board of India; in the EU, the data protection authority of your country.
8. Children
Veqlon is for businesses. It is not for people under 18.
9. Changes
We can change this policy. We tell the owners of the businesses by email about important changes. The date at the top shows the last change.