GEVURA Home

Privacy Policy

Last updated: 2026-06-01

Who we are

Gevura is operated by Veloro Studio, based in Wyoming, United States. We act as the data controller for the personal data described below. You can reach us at support@getgevura.com.

What data we collect

  • Account info: name, email, password (hashed), timezone
  • Product data: goals, deadlines, progress updates, time logs, reminder preferences
  • Payment status: subscription tier, trial state, renewal date (we do not store card details)
  • Profile photo (optional): stored in a private bucket and only accessible to you, authorised admins, and — if you opt in to a public profile — via short-lived signed links that expire after one hour
  • Technical: IP address, device/browser, log data needed to operate the service

Why we collect it

To provide the service (accounts, goal tracking, reports), send the reminders you configure, process payments and manage your subscription, prevent fraud and abuse, and improve the product. Legal bases include performance of our contract with you, your consent, our legitimate interests, and legal obligations.

Payments

Payments are processed by our payment provider who acts as the payment processor. We never store your card details.

Who we share data with

  • Service providers / subprocessors (hosting, database, email delivery, analytics)
  • Our payment provider, for processing payments and subscriptions
  • Professional advisers (legal, accounting) when needed
  • Authorities where required by law

Data retention

We retain your data for as long as your account is active. You may request deletion at any time by emailing support@getgevura.com. After deletion, residual copies may persist in backups for a limited period before being overwritten.

Sub-processors

To deliver our service, Gevura (operated by Veloro Studio) relies on Lovable's platform infrastructure, which in turn uses the following third-party sub-processors who may process your personal data:

Infrastructure & Hosting

  • Amazon Web Services (AWS) — customer applications, databases, file storage (US) — aws.amazon.com
  • Google Cloud Platform — customer applications and databases (EU) — cloud.google.com
  • Vercel — deployment backend (US) — vercel.com
  • Supabase — customer databases and user authentication (EU) — supabase.com
  • Modal — sandbox provisioning (US) — modal.com

AI & Code Generation

  • Anthropic (Claude) — AI interactions and code generation (US) — anthropic.com
  • OpenAI — AI interactions and code generation (US) — openai.com
  • Google Gemini — AI prompts and responses (US) — gemini.google.com

Analytics & Monitoring

Payments

Communications

  • Resend — transactional email delivery (US) — resend.com
  • Customer.io — customer engagement (US) — customer.io

Security

Authentication

Each sub-processor is bound by data processing agreements and appropriate safeguards.

Our full sub-processor list is reviewed annually. For the current list or to object to a sub-processor, contact support@getgevura.com.

Your rights

Subject to applicable law, you have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing. To exercise any of these rights, email support@getgevura.com.

Security

We apply appropriate technical and organisational measures — encrypted transport, access controls, hashed passwords — to protect your data. No system is perfectly secure; please use a strong unique password.

Cookies

We use essential cookies only — they are required to keep you signed in and to operate the service. We do not use advertising or third-party tracking cookies.

Contact

Questions or requests: support@getgevura.com.