Privacy Policy

Last updated: February 2026

Who We Are

Velocity is operated by HeyCrowd SAS ("Company", "we", "us", or "our"). Our website is located at https://www.getvelocity.co (the "Site"). This Privacy Policy explains how we collect, use, and protect your information when you use our Site and services (collectively, the "Service").

If you have any questions, please contact us at support@getvelocity.co.

Information We Collect

Information You Provide

We collect information you provide directly when you register, use the Service, or contact us:

  • Account information — name, email address, and profile information obtained through Asana sign-in.
  • Asana data — workspaces, projects, tasks, and related project management data you choose to connect to the Service.
  • Payment information — processed securely by Stripe. We do not store your credit card details; this information is provided directly to Stripe, whose use of your data is governed by their Privacy Policy . Stripe adheres to PCI-DSS standards for the secure handling of payment information.
  • Communications — any messages, feedback, or support requests you send us.

Information Collected Automatically

When you visit the Site, we automatically collect certain technical information:

  • Usage data — IP address, browser type and version, operating system, referring URLs, pages visited, time spent on pages, and other diagnostic data.
  • Cookies and tracking technologies — we use cookies, web beacons, and similar technologies to collect information and improve the Service. You can instruct your browser to refuse cookies, though some features may not work properly.

Social Login Data

We offer the ability to register and log in using your Asana account. When you do so, we receive your name, email address, and other profile information you have made public on Asana. We use this information only as described in this Privacy Policy.

How We Use Your Information

We use the information we collect for the following purposes:

  • Provide, operate, and maintain the Service
  • Process transactions and manage your subscription
  • Create and manage your account
  • Send you service-related communications (e.g., updates, security alerts, support messages)
  • Respond to your inquiries and provide customer support
  • Monitor and analyze usage trends to improve the Service
  • Detect, prevent, and address technical issues, fraud, or security threats
  • Comply with legal obligations and enforce our terms

We may also send you marketing communications if you have opted in. You can unsubscribe at any time by clicking the unsubscribe link in our emails or by contacting us.

Legal Basis for Processing (EEA/UK)

If you are in the European Economic Area or the United Kingdom, our legal basis for processing your data depends on the context:

  • Consent — where you have given us explicit permission (e.g., marketing emails).
  • Contract — where processing is necessary to fulfill our contract with you (e.g., providing the Service).
  • Legitimate interests — where processing is in our legitimate business interests and not overridden by your rights (e.g., analytics, fraud prevention).
  • Legal obligation — where we need to comply with applicable law.

Data Sharing

We do not sell your personal data. We may share information in the following circumstances:

  • Service providers — third parties who help us operate the Service, including hosting, analytics, email delivery, and payment processing. These providers are contractually bound to protect your data and may only use it on our behalf.
  • Legal requirements — when required by law, subpoena, court order, or governmental request, or to protect our rights, safety, or property.
  • Business transfers — in connection with a merger, acquisition, reorganization, or sale of assets, in which case your data may be transferred to the successor entity.

International Data Transfers

Your data may be transferred to and processed in countries other than your own (including the United States and the European Union). We take reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy regardless of where it is processed.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. After account deletion, we may retain certain data as required by law (e.g., tax, accounting) or to resolve disputes. Usage data is generally retained for a shorter period unless needed for security or legal purposes.

Data Security

We implement appropriate technical and organizational measures to protect your personal data. However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee its absolute security. You should only access the Service in a secure environment.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — request correction of inaccurate or incomplete data.
  • Erasure — request deletion of your personal data.
  • Restriction — request that we limit how we use your data.
  • Portability — receive your data in a structured, machine-readable format.
  • Objection — object to processing based on legitimate interests.
  • Withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at support@getvelocity.co. We will respond in accordance with applicable data protection laws.

If you are in the EEA and believe we are processing your data unlawfully, you may lodge a complaint with your local data protection authority.

California Residents

If you are a California resident, you have additional rights under the CCPA, including the right to know what personal data we collect and how it is used, the right to request deletion, and the right to opt out of the sale of your data. We do not sell personal data.

Do-Not-Track Signals

There is currently no uniform standard for recognizing Do-Not-Track browser signals. We do not currently respond to DNT signals.

Children

The Service is not intended for anyone under 18. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us at support@getvelocity.co and we will take steps to delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be indicated by updating the "Last updated" date at the top of this page. We encourage you to review this page periodically.

Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at support@getvelocity.co.