Privacy Policy
Version 1.0 (October 2026). This draft is subject to formal legal review before public launch.
1. Introduction & Applicable Law
VELURA Unified Operations Platform ("we", "us", "our") is committed to safeguarding personal and business data. This Privacy Policy details how we collect, process, retain, and protect your information in full alignment with the Tanzania Personal Data Protection Act 2022 (PDPA).
2. Data Collected at Registration
When you register your company workspace, we collect:
- Administrator full name.
- Official work email address.
- Password (stored strictly as a cryptographic hash using bcrypt; never accessible in plain text).
- Company legal name, operational category (clearing, forwarding, fleet), and phone number.
- Tax Identification Number (TIN) or VRN when you complete your company profile.
- Security audit metadata: cryptographically salted IP hash, user agent hash, and login timestamps.
3. Purpose of Processing
We process your information exclusively to:
- Provision and operate your isolated company workspace.
- Authenticate authorized personnel and prevent credential stuffing or unauthorized access.
- Execute customs declarations, invoicing, fleet records, and private client cargo tracking.
- Deliver essential transactional notices and system security alerts.
4. Workspace Isolation & Data Ownership
Your business data belongs strictly to your company. Every workspace in VELURA is logically isolated: no other registered company or third party can access, view, or export your files, clients, or financial transactions.
5. Data Retention & Disposal
We maintain active company records for the duration of your workspace subscription. Unverified self-registered registrations that remain inactive are automatically purged after 7 days to preserve system hygiene and privacy.
6. Contact & Data Protection Officer
If you have questions regarding data privacy or wish to exercise your statutory rights under the Tanzania PDPA 2022, contact us at: support@velura.co.tz.