1. What we collect
When you sign up we store your name, email, organisation name, and password (hashed). When you add staff we store their names, contact details, hourly rates, and shift history. We log IP addresses and basic device information to protect against abuse.
2. Why we collect it
We only hold what we need to run the service: rostering your team, sending operational emails, billing, and detecting abuse of our public endpoints.
3. How long we keep it
Live account data is retained while your account is active. Deleted accounts are purged from the primary database within 30 days; encrypted backups are rotated out within 90 days.
4. Your rights
You can access, correct, export, or delete your data at any time from the gear menu → Account settings. To request action on a staff member's behalf, email support@velgun.com.
5. Cookies and tracking
We use essential cookies to keep you signed in and protect against CSRF. A cookie-consent banner lands in the next release — analytics and marketing cookies are not currently deployed.
6. ICO registration
Velgun is registered with the UK Information Commissioner's Office (ICO). Registration number: [ICO REG NUMBER].
7. Contact
Privacy questions? Email privacy@velgun.com.