Data processing terms
Last change: 24 October 2026
These terms are part of the terms of service. They apply to the personal data that a business ("you") keeps in the apps of its Veqlon. For that data, you decide, and Gyanesh Kumar Pandey, proprietor, Lucknow, India ("we"), processes it for you. They are written to meet the GDPR of the European Union and the Digital Personal Data Protection Act of India.
1. What we process
- Purpose: to provide Veqlon to you: to keep, show, change, back up and export the data of your apps, and to run the features that your people use.
- People concerned: your staff and other users of your apps, and the people whose data you enter (for example your clients and suppliers).
- Types of data: what you put into your apps, for example names, contact details, work records, files and photos; the accounts of your users; the location of a phone for actions that need it; and, when you use the face check, reference photos, face prints and pictures of failed checks (biometric data).
- Duration: while you use Veqlon, and up to 90 days after the end; backups 30 days more.
2. Our duties
- We process the data only on your instructions. Your instructions are these terms and the way you use Veqlon.
- Only people who need it for their work can access the data, and they must keep it confidential.
- We keep the data safe: a separate copy and database for each business, encrypted connections, passwords as secure hashes, records of each change, blocking of repeated wrong passwords, and backups every night.
- We help you to answer requests of the people concerned (for example to see or delete their data). Most requests you can answer yourself in Veqlon: export, edit, delete, and the deletion of face data.
- If personal data is lost or exposed by a fault on our side, we tell you without undue delay, and if possible within 72 hours after we know it.
- At the end, we delete the data as described above. You can export it before.
- On request, we give you the information that you need to show that these terms are kept.
3. Service providers (sub-processors)
You agree that we use these providers. We tell you by email at least 30 days before we add or change a provider; you can object, and stop if we cannot agree.
| Provider | Task | Place |
|---|---|---|
| Hetzner Online GmbH | Server and database | Finland (EU) |
| Cloudflare, Inc. | Secure connection, file and backup storage (R2) | Files and backups in the EU |
| OpenAI | AI features, only when a user starts them | USA |
| Resend | Emails of the platform | EU (Ireland) |
4. Your duties
- You need a legal basis for the data that you keep, and you inform the people concerned.
- Location and face check: you decide which apps use them. You inform your staff, get their consent where the law requires it (Veqlon shows a consent text before the reference photo), and offer another way to people who do not consent.
- You decide which users may see which data, with the roles in your apps.
- You do not use the AI features for data that must not leave the EU or India, unless you accept the transfer described above.