Privacy Policy

1. Introduction

Veles IT Solutions LLC ("Veles IT Solutions," "Company," "we," "our," or "us"), together with its affiliate Veles Software LTD, provides enterprise IT consulting services and software-enabled offerings, including Panorama AI, MPA Tools, and related solutions.

We are committed to protecting personal information and handling it responsibly in accordance with applicable United States federal and state privacy laws, including where applicable the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), the Florida Digital Bill of Rights (FDBR), and other relevant regulations.

This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you visit our website or interact with our services.

For website visitors and marketing interactions on the Veles IT Solutions website, Veles IT Solutions LLC acts as a data controller.

For client tenant data processed through affiliated software offerings and managed services delivered by Veles IT Solutions LLC and Veles Software LTD, we act as a data processor or service provider under applicable law. Such processing is governed by separate contractual agreements, including Data Processing Addenda where applicable.

2. Information We Collect

A. Information You Provide Directly

We may collect:

• Name
• Company name
• Business email address
• Phone number
• Job title
• Information submitted through forms, demo requests, downloads, or communications

We do not intentionally collect sensitive personal information through our website.

B. Technical / Automatically Collected Information

When you visit our website, we may collect:

• IP address
• Browser type and version
• Device type and operating system
• Usage data such as pages visited, time spent, clicks, and referring URLs
• Cookies and similar tracking technologies

C. SaaS-Related Data

Our software solutions, including Panorama AI, process tenant configuration settings, operational metadata, and usage information necessary to deliver and improve services.

Panorama AI is designed as a read-only operational intelligence system. It does not modify customer environments, execute scripts, or change configurations. It analyzes authorized tenant data to generate structured insight.

We do not access underlying customer content data without explicit authorization.

AI-driven features provide analytical insight and recommendations but do not make automated decisions that produce legal or similarly significant effects without human involvement.

Detailed SaaS processing activities are governed by client-specific service agreements or Data Processing Addenda.

3. Consent

Where required by law, we obtain consent for the collection, use, and disclosure of personal information.

Consent may be:

• Express, such as when you submit a form
• Implied, such as through your continued use of our website

You may withdraw consent at any time by contacting us, subject to legal or contractual limitations.

4. How We Use Information

We use personal information to:

• Respond to inquiries and provide consulting services
• Deliver and improve SaaS functionality
• Provide product updates and security notices
• Improve website performance and user experience
• Maintain security and prevent fraud
• Comply with legal and regulatory obligations

We do not sell personal data.

We do not share personal information for cross-context behavioral advertising.

5. Data Sharing

We may share personal information with:

• Service providers such as hosting providers, CRM platforms, analytics tools, and cloud infrastructure providers, who are contractually obligated to safeguard the data
• Professional advisers including legal, accounting, or compliance consultants
• Successors in the event of a merger, acquisition, or sale of assets
• Government or regulatory authorities when required by law or to protect our rights, property, or safety

We require service providers that process personal information on our behalf to agree to appropriate confidentiality and data protection obligations.

6. Services, Software Processing, Subprocessors, and Customer Data

When we process client tenant data, customer personal information, or operational data through consulting, managed services, software products, or software-enabled offerings, we do so according to the applicable customer agreement, customer instructions, and any Data Processing Addendum.

We may use service providers and subprocessors for hosting, cloud infrastructure, security, support, analytics, communications, and product operations. We require them to process personal information only for authorized purposes and to maintain appropriate safeguards.

Customer tenant data is not used to train public or general-purpose AI models unless an authorized customer agreement expressly permits it.

Upon termination or customer request, we will delete or return customer personal information as required by the applicable agreement, Data Processing Addendum, or law, subject to backup, security, legal, and audit retention obligations.

7. International Data Transfers

Some operations or service providers may involve processing outside the United States, including in Canada or other jurisdictions.

Where required by applicable law, including the General Data Protection Regulation (GDPR) where it applies, we implement appropriate safeguards such as Standard Contractual Clauses or equivalent legal mechanisms to protect personal information transferred internationally.

8. Data Retention

We retain personal information only for as long as necessary to:

• Fulfill the purposes for which it was collected
• Comply with legal, tax, and regulatory obligations
• Maintain audit and security records
• Resolve disputes and enforce agreements

When information is no longer required, we securely delete or anonymize it.

9. Security and Security Incidents

We implement appropriate administrative, technical, and organizational safeguards designed for enterprise environments, including:

• Access controls
• Encryption where appropriate
• Secure cloud infrastructure
• Periodic security reviews

However, no system can be guaranteed to be completely secure.

If we become aware of a confirmed security incident involving personal information we process, we will investigate and provide notices as required by applicable law or the applicable customer agreement. The timing, content, and recipients of notices may be governed by a Data Processing Addendum or other written agreement.

10. Your Rights

Depending on your jurisdiction and applicable law, you may have the right to:

• Access personal information we hold about you
• Request correction of inaccurate information
• Request deletion, subject to legal exceptions
• Opt out of sale or sharing (we do not sell personal data)
• Withdraw consent
• Receive information about categories of data collected and disclosed

For California residents, we will respond to verified requests within 45 days as required by law.

To exercise your rights, contact: info@velesitsolutions.com

We may verify your identity before processing certain requests.

You may also have the right to lodge a complaint with your state Attorney General or applicable supervisory authority.

11. Cookies and Tracking Technologies

We use essential cookies to ensure proper website functionality.

We may also use analytics cookies to understand traffic patterns and improve performance.

Where required by law, we provide appropriate notice and choices for non-essential cookies and similar tracking technologies.

You may manage cookies through your browser settings.

Our website does not respond to browser “Do Not Track” signals.

12. Children’s Privacy

Our website and services are intended for business and professional audiences.

They are not directed to children under 13 years of age, or 16 where applicable by law.

We do not knowingly collect personal information from children. If we become aware that we have collected such information, we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy periodically.

Material changes will be posted on this page with a revised effective date.

Where appropriate, we may notify users by email or through service notifications.

Continued use of our website or services after updates constitutes acceptance of the revised policy.

14. Governing Law

This Privacy Policy shall be governed by the laws of the State of Florida, United States, without regard to conflict of law principles.

Any disputes arising under this policy shall be subject to the exclusive jurisdiction of the state or federal courts located in Florida.

15. Contact Information

Privacy Inquiries: info@velesitsolutions.com