PRIVACY POLICY

Last updated: January 27, 2026

This Privacy Policy explains how The Velvet Junction (“The Velvet Junction,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you visit or use our website, products, and services (collectively, the “Services”).

By accessing or using the Services, you agree to this Privacy Policy.

1) Who we are

The Velvet Junction
Address Location: Texas, United States
Contact: [email protected]

2) Who this applies to

This Privacy Policy applies to visitors, users, and others who access or use our Services globally.

Adults only (18+): Our Services are intended only for adults (18+). We use an age gate and do not knowingly allow minors to use the Services.

3) Information we collect

A) Information you provide

We may collect information you provide directly, including:

Account information: email address, username (if applicable), and related account details
Authentication information: if you sign in with Google/Gmail authentication, we receive limited information needed to create/login to your account (such as a unique identifier and basic profile information depending on your Google settings)
Communications: information you include in messages to us (support requests, feedback, etc.)
Marketing preferences: email/SMS opt-in and communication choices

B) Call recordings and transcripts

To operate the Services, calls may be recorded and transcribed using a third-party provider operating on a secure network. We may receive and store:

audio recordings
transcripts
metadata such as date/time, duration, and technical identifiers

C) Information collected automatically (cookies and similar tech)

We may automatically collect:

IP address, device type, browser type, operating system
usage data (pages viewed, clicks, referring/exit pages, approximate location)
cookie identifiers and ad/analytics signals

We use GA4 (Google Analytics 4), Meta Pixel, and cookies to help understand usage and measure advertising performance.

D) Payments

We use Stripe for payment processing. We do not store your full payment card details. Payment information is processed through Stripe’s secure portal and systems. We may receive limited payment-related data such as confirmation that a payment occurred and transaction identifiers.

E) Inferences and safety/security signals (recommended addition)

We may generate inferences from usage data (for example, to improve service performance, prevent fraud, or maintain platform safety). We may also collect signals related to security, fraud prevention, and abuse detection.

4) Sensitive information

We do not intentionally request sensitive personal information. However, because the Services include recorded calls and transcripts, you may choose to share information during use that could be considered sensitive in some regions.

Please do not share sensitive information if you do not want it recorded or transcribed.

5) How we use information

We use personal information to:

Provide, operate, and maintain the Services (including authentication, call features, and account management)
Record and transcribe calls to enable core functionality, quality assurance, dispute handling, and security monitoring
Process payments and prevent fraud
Respond to enquiries and provide customer support
Improve and personalise user experience and platform performance
Conduct analytics, troubleshooting, and service optimisation
Send administrative communications (e.g., policy updates, account notices)
Send email and SMS marketing communications only if you opt in, and allow opt-out at any time
Comply with legal obligations and enforce our Terms

6) Cookies, analytics, and advertising

We use cookies and similar technologies (e.g., pixels, local storage) for:

essential site functionality
analytics and performance (e.g., GA4)
advertising measurement and retargeting (e.g., Meta Pixel)

You can manage cookies in your browser settings. Some features may not function properly if cookies are disabled.

Do Not Track: Some browsers offer “Do Not Track” signals. Because there is no consistent industry standard, we may not respond to all such signals.

7) Marketing (Email + SMS)

If you opt in, we may send marketing messages via email or SMS.

Email: You can unsubscribe anytime using the link in the email.
SMS: You can opt out by following the instructions in the message (e.g., STOP) or contacting us.

Message and data rates may apply depending on your carrier.

8) How we share information

We may share personal information with:

Service providers that help us run the Services (including hosting, analytics, authentication, communications tools, transcription/voice providers, customer support tools, and security services)
Payment processing providers (Stripe)
Cloud and infrastructure providers (including AWS)
Platform providers (including GoHighLevel (GHL), MongoDB)
Professional advisers (legal, accounting, compliance)
Authorities or third parties when required by law, or to protect rights, safety, and security
A buyer or successor in a merger, acquisition, reorganisation, or sale of assets

We do not sell personal information for money.
We may share data with advertising/analytics partners in ways that may be considered “sharing” under certain privacy laws for targeted advertising measurement.

9) Data storage and international transfers

Our systems and service providers may store and process data in the United States and other countries.

You understand that your information may be transferred internationally and handled under the laws of those locations. We take reasonable measures to protect information in accordance with this Policy.

10) Data retention

We retain personal information for as long as reasonably necessary to:

provide the Services
maintain accurate records
comply with legal obligations
resolve disputes
enforce agreements
ensure platform security and prevent fraud

We may retain call recordings/transcripts for a period that supports operational needs, safety/security, dispute resolution, and legal compliance. We may also retain de-identified or aggregated data for analytics and improvement.

11) Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. However, no system is perfectly secure, and we cannot guarantee absolute security.

12) Your rights and choices

Depending on where you live, you may have rights to:

request access to the personal information we hold about you
request correction of inaccurate information
request deletion (subject to exceptions such as legal compliance, security, fraud prevention, and dispute handling)
opt out of marketing at any time

To make a request, contact us at [email protected]. We may need to verify your identity.

13) US State Privacy Notice (California and other US states)

If you are a resident of California or certain other US states, you may have additional rights regarding your personal information.

A) Categories of personal information collected

In the last 12 months, we may have collected the following categories:

Identifiers (e.g., email address, IP address, device identifiers)
Internet/Network activity (e.g., browsing interactions, page views, cookie/pixel data)
Geolocation data (approximate location derived from IP)
Audio information (call recordings) and related transcripts
Account information (authentication identifiers and account details)
Inferences drawn from usage data for performance, safety, and fraud prevention

B) Purposes of collection

We collect and use these categories for the purposes described in “How we use information,” including providing the Services, security, analytics, advertising measurement, and customer support.

C) Sources

We collect information from you, your devices, and our service providers (e.g., analytics, payment processors, infrastructure providers).

D) Sharing, “sale,” and targeted advertising

We do not sell personal information for money.
However, we may share certain identifiers and online activity information with advertising and analytics partners (such as Meta and Google Analytics) for measurement and targeted advertising. Under some laws, this may be considered “sharing” for targeted advertising.

Opt-out of targeted advertising/sharing: You can opt out by:

adjusting cookie preferences (where available),
using browser privacy controls, and/or
contacting us at [email protected] with the subject line “Privacy Opt-Out.”

E) Your rights

Depending on your state, you may have the right to:

Know/Access the personal information we collected about you
Delete personal information (subject to exceptions)
Correct inaccurate personal information
Opt out of targeted advertising / “sharing”
Non-discrimination for exercising your rights

We will verify your identity before fulfilling requests.

F) Authorized agents (California)

California residents may use an authorized agent to submit requests. We may require proof of authorization and identity verification.

14) EEA/UK/Switzerland Notice (GDPR / UK GDPR)

If you are located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, the following applies.

A) Data controller

The data controller is The Velvet Junction (Texas, USA). Contact: [email protected].

B) Legal bases for processing

We process personal information under the following legal bases:

Contract: to provide the Services you request (e.g., account access, call features, billing)
Legitimate interests: to secure, improve, and operate our Services; prevent fraud; and conduct analytics
Consent: where required (e.g., certain cookies/marketing, where applicable)
Legal obligation: where processing is required to comply with law

You may withdraw consent at any time where processing is based on consent (this does not affect prior processing).

C) Your rights

You may have the right to:

access your personal data
correct inaccurate data
request deletion
restrict or object to processing
data portability
lodge a complaint with your local supervisory authority

To exercise rights, contact [email protected].

D) International transfers

Because we are based in the US and use US-based providers, your data may be transferred outside the EEA/UK/Switzerland. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) and take additional measures as appropriate.

15) Children (18+ only)

The Services are not intended for anyone under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us information, contact us and we will take reasonable steps to delete it.

16) Third-party links

The Services may include links to third-party websites or services. We are not responsible for their privacy practices. Review their policies before providing information.

17) Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted with a new “Last updated” date. Continued use of the Services after changes means you accept the updated policy.