Privacy Policy

1. Introduction

Welcome to Velovate, a cycling platform operated by Sassy Dog Enterprises LLC ("we," "us," or "our"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, including our website, mobile applications, and related services (collectively, the "Services").

Please read this Privacy Policy carefully. By using our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Services.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Name, email address, password, profile photo, and biographical information
• Team Information: Team names, descriptions, member roles, and organizational details
• Activity Data: Ride details, GPS tracks, distance, duration, elevation, and performance metrics
• Fundraising Data: Campaign details, donation information (processed by third-party payment processors)
• Communications: Messages sent through our platform, support requests, and feedback
• Payment Information: Billing details for premium subscriptions (processed securely by third-party payment processors)

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent on platform, click patterns
• Device Information: Device type, operating system, browser type, IP address, unique device identifiers
• Location Data: GPS coordinates during ride tracking (only when you explicitly enable location services)
• Cookies and Similar Technologies: See Section 9 for details

2.3 Information from Third Parties

• Authentication Services: When you sign in using third-party services (e.g., Google, Apple), we receive basic profile information
• Fitness Platforms: Activity data from connected services like Strava or Garmin (with your permission)
• Social Media: Public profile information if you connect your social media accounts

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Provision

• Create and manage your account
• Provide and maintain our Services
• Process your ride tracking and activity data
• Enable team collaboration and communication
• Facilitate fundraising campaigns and events

3.2 Communication

• Send you service-related notifications and updates
• Respond to your inquiries and support requests
• Send newsletters and marketing communications (with your consent)
• Notify you about team activities, rides, and fundraising updates

3.3 Improvement and Analytics

• Analyze usage patterns to improve our Services
• Conduct research and development
• Debug and fix technical issues
• Personalize your experience

3.4 Safety and Security

• Detect and prevent fraud, spam, and abuse
• Enforce our Terms of Service
• Protect the rights and safety of our users
• Comply with legal obligations

3.5 Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your data based on:

• Contract: Processing necessary to provide our Services
• Consent: You have given clear consent for specific purposes
• Legitimate Interests: Processing necessary for our legitimate business interests
• Legal Obligation: Processing required by law

4. Text Message Communications

Velovate may send you text (SMS) messages as part of our Services. This section describes how we handle SMS communications and your phone number data.

4.1 What SMS Is Used For

We may send you text messages for the following purposes:

• Ride reminders and alerts
• Safety notifications and emergency alerts
• Team updates and communications
• Fundraising campaign updates
• Account security notifications

4.2 SMS Delivery Provider

We use Twilio Inc. as our third-party SMS delivery provider. Your phone number is shared with Twilio solely for the purpose of delivering text messages on our behalf. Twilio's use of your information is governed by their privacy policy.

4.3 Phone Number Handling

• Your phone number is stored in encrypted form
• Your phone number is retained while your account is active
• Your phone number is deleted within 30 days of account deletion

4.4 Opting Out of SMS

4.5 Message Frequency and Rates

Message frequency varies based on your notification preferences and activity on the platform. Standard message and data rates from your wireless carrier may apply. Velovate does not charge for SMS messages, but your carrier's rates apply.

4.6 SMS Consent Is Not Required

Consent to receive SMS messages is not a condition of using Velovate. All notifications are also available via email and in-app notifications.

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

5.1 With Your Consent

We share information when you explicitly consent, such as when you share a ride with your team or make your profile public.

5.2 Service Providers

We share information with third-party vendors who perform services on our behalf:

• Cloud hosting providers (e.g., Microsoft Azure, Cloudflare)
• Payment processors for premium subscriptions
• Analytics services
• Email and communication services
• Customer support tools

5.3 Team Members

When you join a team, certain information (name, profile photo, ride data) may be visible to other team members based on team privacy settings.

5.4 Legal Requirements

We may disclose information if required by law or if we believe it is necessary to:

• Comply with legal obligations, court orders, or government requests
• Enforce our Terms of Service or other agreements
• Protect the rights, property, or safety of Velovate, our users, or others
• Detect, prevent, or address fraud or security issues

5.5 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

6. Data Retention

We retain your personal information for as long as necessary to provide our Services and fulfill the purposes outlined in this Privacy Policy. Specific retention periods include:

• Account Data: Retained while your account is active and for up to 90 days after deletion
• Activity Data: Retained indefinitely unless you request deletion
• Usage Logs: Retained for up to 24 months
• Payment Records: Retained for 7 years for tax and accounting purposes

You may request deletion of your data at any time. Some information may be retained in backup systems for up to 90 days after deletion requests.

7. Your Rights and Choices

You have the following rights regarding your personal information:

7.1 Access and Portability

You can access and download your personal data through your account settings or by contacting us.

7.2 Correction

You can update or correct your account information at any time through your profile settings.

7.3 Deletion

You can request deletion of your account and associated data. Note that some information may be retained as described in Section 6.

7.4 Marketing Opt-Out

You can unsubscribe from marketing emails using the unsubscribe link in our emails or through your account preferences.

7.5 Location Services

You can disable location tracking at any time through your device settings or app preferences.

7.6 Cookie Management

You can manage cookie preferences through your browser settings. See Section 10 for more details.

8. GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

8.1 Right to Access

You have the right to request confirmation of whether we process your personal data and to access that data.

8.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data.

8.3 Right to Erasure ("Right to be Forgotten")

You have the right to request deletion of your personal data in certain circumstances.

8.4 Right to Restriction of Processing

You have the right to request that we restrict processing of your personal data in certain situations.

8.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format.

8.6 Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing.

8.7 Right to Withdraw Consent

Where we process your data based on consent, you have the right to withdraw that consent at any time.

8.8 Right to Lodge a Complaint

You have the right to lodge a complaint with your local data protection authority.

9. California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

9.1 Right to Know

You have the right to request information about the personal data we have collected about you in the past 12 months.

9.2 Right to Delete

You have the right to request deletion of your personal data, subject to certain exceptions.

9.3 Right to Opt-Out

We do not sell personal information. If our practices change, we will update this policy and provide an opt-out mechanism.

9.4 Right to Non-Discrimination

We will not discriminate against you for exercising your CCPA rights.

9.5 Authorized Agent

You may designate an authorized agent to make requests on your behalf.

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

10.1 Essential Cookies

Required for the Services to function properly (e.g., authentication, security).

10.2 Analytics Cookies

Help us understand how users interact with our Services (e.g., Google Analytics).

10.3 Preference Cookies

Remember your settings and preferences.

10.4 Marketing Cookies

Used to deliver relevant advertisements (only with your consent).

10.5 Managing Cookies

You can control cookies through your browser settings. Note that disabling certain cookies may limit your ability to use some features of our Services.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and penetration testing
• Access controls and authentication mechanisms
• Employee training on data protection
• Incident response procedures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security.

12. Children's Privacy

Our Services are not intended for children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children under these ages. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@velovate.app, and we will delete such information.

13. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from your country's laws.

When we transfer personal data from the EEA to other countries, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Privacy Shield certification (where applicable)

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will notify you by:

• Posting the updated policy on our website
• Updating the "Last Updated" date at the top of this policy
• Sending you an email notification (for significant changes)

Your continued use of our Services after the effective date of the updated policy constitutes acceptance of the changes.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: