Privacy Policy

Effective date: July 25, 2026  ·  Last updated: August 15, 2026

Velance Inc., a Nevada corporation ("Velance," "we," "us," or "our") provides a customer relationship management platform for automotive dealerships, including our website at velancecrm.com, our web application, and our mobile application (collectively, the "Service"). This Privacy Policy explains how we collect, use, share, and protect information in connection with the Service.

Quick summary. Dealerships are our customers. The dealership controls the personal information of its leads and customers; Velance processes that information on the dealership's behalf. We do not sell personal information. We do not train AI models on customer-identifiable conversation content. We use industry-standard security measures, including encryption in transit and at rest, row-level isolation between dealerships, and 72-hour breach notification.

1. Who This Policy Covers

This Policy applies to:

2. Our Role: Data Controller and Data Processor

For information about Dealership Personnel, Website Visitors, and Demo Visitors, Velance acts as a data controller. We determine the purposes and means of processing for account, prospect, support, security, and billing purposes.

For information about Dealership Customers and Leads, Velance acts as a data processor (or "service provider" under California law). The dealership is the controller. We process this information only on the dealership's instructions and to provide and improve the Service. If you are a consumer and want to exercise privacy rights with respect to data the dealership holds about you, please contact the dealership directly. Where required, we will assist them in responding to your request.

3. Information We Collect

Information you provide

Information collected automatically

Information from third parties

4. How We Use Information

5. Demo Workspaces and Prospective Customers

A Velance demo is a temporary, isolated workspace loaded with sample dealership records. We do not copy a paying dealership's live customers, attachments, inventory, or deals into a public demo.

We use Demo Visitor information to create and secure the workspace, verify access by email code, send requested access and expiry notices, diagnose problems, prevent abuse, understand which product areas are useful, and respond when a visitor asks to speak with Velance. Demo interaction events use product-page, feature, role, and timing labels; our client-side funnel events do not include names, email addresses, phone numbers, notes, access codes, or private demo tokens.

The person who creates a demo may invite up to three additional evaluators into that same sample dealership. An invitee must prove control of the invited email address with a short-lived, single-use code. Each accepted invite receives a separate demo-only account, and the demo owner can see or revoke the invitation. Do not invite someone unless you are authorized to use their work email for this evaluation.

Demo-ready, access-code, invitation, and expiry messages are operational emails tied to a demo you or a colleague requested. They do not subscribe the recipient to a marketing list. A preference to stop optional demo follow-up does not block a one-time access or security code that the recipient requests.

6. Artificial Intelligence and Machine Learning

The Service uses third-party AI models (currently Anthropic Claude, OpenAI GPT, and Google Gemini) to draft messages, summarize conversations, recommend follow-ups, and answer dealership-staff questions. We design our use of AI to protect dealership and consumer information.

7. SMS and Text Messaging

The Service enables dealerships to send and receive SMS messages with their leads and customers. The dealership is responsible for obtaining all required consents under the Telephone Consumer Protection Act (TCPA), state law, and applicable carrier requirements before initiating SMS communications, and for honoring opt-out requests promptly. Velance assists by processing keywords such as STOP, STOPALL, UNSUBSCRIBE, CANCEL, END, and QUIT, and by maintaining suppression records.

We do not share, sell, rent, or disclose mobile opt-in consent or SMS consent data to third parties or affiliates for their marketing or promotional purposes. SMS consent is used solely for communications between the dealership and its leads and customers through the Service.

Message and data rates may apply for recipients. Reply HELP for help, STOP to unsubscribe.

8. How We Share Information

We do not sell personal information for monetary consideration. We share information only as follows:

9. Data Retention

Retention depends on whether information belongs to a dealership subscription or a temporary demo. Specific defaults:

CategoryDefault Retention
Active lead, customer, and deal recordsFor the term of the dealership's subscription
SMS and email message content24 months from delivery
Server and security logs90 days
Backup snapshots35 days rolling
Account and billing records7 years (tax and audit)
Data following dealership offboardingDeleted within 30 days, except as required by law
Demo workspace, visitor profile, usage events, and invitationsDemo access ends 14 days after creation. The workspace is scheduled for deletion after a further 30-day support and security period.
Demo access and invitation code challengesShort-lived for authentication and generally pruned within 48 hours after they expire or are no longer needed.
Demo support snapshot and incident recordsUntil 90 days after the demo expires. These records contain the visitor identity and bounded diagnostic context needed to reproduce a reported problem; they do not contain a reusable password, access code, or private demo token.
Explicit demo contact requestsOne year from the latest request so our team can follow up and keep a record of the requested sales conversation.
Email-provider delivery eventsEvent detail for 90 days. Recipient delivery or suppression status is stored as a keyed digest rather than a raw email address and retained until it is resolved or deleted following a verified request.

10. Security and Breach Notification

We implement administrative, technical, and physical safeguards designed to protect information, including:

Breach notification. If we discover a security incident affecting personal information, we will notify affected dealerships without undue delay and, in any event, within 72 hours of confirmation, with the information available at that time. We will assist dealerships in their downstream notification obligations to consumers as required by applicable law.

11. Your Rights

Subject to applicable law, you may have rights to:

Dealership Personnel, Website Visitors, and Demo Visitors may exercise these rights by contacting privacy@velancecrm.com. A Demo Visitor should write from the email used for the demo and may ask us to close the demo, remove a pending invitation, or delete prospect information, subject to records we must retain by law. We will respond within 45 days, with one 45-day extension where reasonably necessary.

If you are a Dealership Customer or Lead, please contact the dealership that holds your information; we will support the dealership in honoring your request.

12. California Privacy Rights (CCPA / CPRA)

This section provides additional disclosures required for California residents. Velance does not sell personal information for monetary consideration. If a Website Visitor or Demo Visitor explicitly opts in, our use of advertising measurement technology on public marketing and demo pages may be considered "sharing" for cross-context behavioral advertising under California law. Optional analytics and advertising measurement are off by default, and we honor both a visitor's rejection and a recognized Global Privacy Control signal. The categories of personal information we collect, the sources, and the purposes are summarized below.

Category (Cal. Civ. Code §1798.140)CollectedDisclosed for Business Purpose
A. IdentifiersYesYes — to subprocessors, dealership integrations
B. Customer recordsYesYes — to subprocessors
C. Protected classificationsNoNo
D. Commercial information (vehicles of interest, deal data)YesYes — to subprocessors, dealership integrations
E. Biometric informationNoNo
F. Internet/network activityYesYes — to analytics subprocessor
G. Geolocation (approximate, IP-based)YesYes — to subprocessors
H. Sensory dataNoNot collected
I. Professional/employment informationYesYes — to subprocessors
J. Education informationNoNo
K. Inferences (lead score, conversion likelihood)YesYes — to dealership users
L. Sensitive personal informationNoNot collected

Right to Limit Use of Sensitive Personal Information. We do not use sensitive personal information for purposes other than those necessary to provide the Service.

Non-Discrimination. We will not discriminate against you for exercising your rights.

To exercise California rights, email privacy@velancecrm.com or use the form at velancecrm.com/do-not-sell. Authorized agents may submit requests with verifiable authorization.

13. Mobile Application — Apple App Store Disclosures

The Velance mobile application is distributed through the Apple App Store. The data-collection categories disclosed in our App Store privacy nutrition label correspond to the categories described in this Policy. We do not engage in cross-app or cross-website tracking and will not request App Tracking Transparency authorization.

Specific iOS permissions and their purpose:

You may revoke notification permission at any time in iOS Settings. If we add features in future versions that require additional permissions, we will request them at the point of use, update this Policy, and update the App Store privacy disclosure accordingly.

14. Mobile Application — Google Play Disclosures

The Velance CRM mobile app is distributed through Google Play. The data categories disclosed in our Google Play Data Safety section correspond to the categories described in this Policy. The app is free to download, requires an existing dealership-provisioned login, does not sell user data, and does not share data for advertising. Specific Android permissions and their purpose:

You may revoke notification permission at any time in Android Settings. If we add features in future versions that require additional permissions, we will request them at the point of use, update this Policy, and update the Google Play Data Safety disclosure accordingly.

15. Cookies and Similar Technologies

We use a small number of cookies and similar technologies. They fall into three categories:

You may reject optional analytics and advertising in the cookie notice or withdraw consent at any time on our Do Not Sell or Share page. We honor recognized Global Privacy Control signals as a rejection of optional tracking. Rejecting optional technologies does not disable authentication, security, or other strictly necessary storage. You may also control cookies through your browser settings; disabling strictly necessary cookies will prevent authentication.

16. Children

The Service is intended for business use by dealership personnel aged 18 and over. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will delete it.

17. International Users

The Service is operated from and intended for users in the United States. Information is processed and stored in the United States. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, which may have different data-protection laws than your jurisdiction.

18. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced through the Service and by email to dealership administrators at least 30 days before they take effect, except where a shorter period is required by law. The "Effective date" above will be updated each time.

19. Contact

For questions, complaints, or to exercise a right, contact us at:

Velance Inc.
732 S 6th St Ste N
Las Vegas, NV 89101