Last updated: July 11, 2026

Privacy Policy

Privacy is core to Velour. We are anonymous by design and collect the minimum needed to run the Service. This policy explains what we collect, how we use it, and the choices you have. Velour is for adults (18+) only.

What we collect

• Account: a handle you choose and a password — stored only as a secure hash. No email, phone number or real name is required. Your recovery code is stored only as a hash.
• Conversations & memory (Premium): to make companionship feel continuous, we store your chat history and a memory profile for your companion. Free accounts do not retain persistent memory.
• Payments: we store a payment reference and the plan/amount to fulfil your purchase. Crypto payments mean we never see or store card numbers. Where card payment is offered, card data is handled by the payment processor, not by us.
• Technical: a session cookie (to keep you signed in), an age-confirmation cookie, and minimal operational logs. For abuse prevention we may store hashed (not raw) IP addresses and payment references.

What we don't do

We do not require your real identity, we do not sell your data, and we do not run third-party advertising trackers. Chat content, recovery codes and passwords are never written to our logs.

How we use it

• To provide the Service — conversation, media, voice and (for Premium) memory and relationship continuity.
• To process payments and unlock what you buy.
• To prevent fraud, abuse and automated attacks, and to keep the Service secure.

Third parties who help run the Service

To generate responses and media, your inputs are sent to AI providers for processing (large-language-model, text-to-speech, speech-to-text and image-generation services). We also use a payment processor for crypto settlement, a content-delivery/network layer, and a hosting provider. These providers process data only to perform their function. We share the minimum necessary and do not sell personal data.

Cookies

We use a strictly-necessary session cookie (httpOnly) and an age-confirmation cookie. We do not use advertising or cross-site tracking cookies.

Retention & deletion

You can delete your account at any time from your account settings. Deletion is no-trace: it erases your account, conversations and memory (including memory vectors) and unlock records. For legal, tax and fraud-prevention reasons, de-identified payment/transaction records may be retained as required by law — these are not linked to your conversations.

Security

Traffic is encrypted in transit (HTTPS). Passwords and recovery codes are stored only as salted hashes. We apply rate limiting and abuse controls. No system is perfectly secure, but we design for data minimisation so there is little to expose.

Your rights

You may access the account information available in your settings and delete your account and data at any time. Because accounts are anonymous, we may be unable to act on requests we cannot tie to your authenticated account.

Age

The Service is for adults 18+ only. We do not knowingly collect data from anyone under 18.

Changes & contact

We may update this policy; the "Last updated" date reflects changes. Privacy questions: privacy@av-boss.com.