Privacy policy

Last updated 17 October 2026

This policy explains what personal data we collect when you visit getveil.tech, buy Veil or use it. The data controller is ORAM LABS S.R.L., Constantin Nottara, Cluj-Napoca, Cluj, 400503, Romania. Contact: veil (at) oramlabs.com.

In short: the Veil app sends us nothing, and we keep only what we need to sell you a licence.

1. The Veil app

Veil runs on your computer. It has no telemetry and no analytics: it doesn't tell us how you use it or when it crashes. Your licence key is checked on your computer, without contacting us.

The text you send through Veil goes from your computer to the AI provider you chose, after sensitive values are replaced. We never receive it. The real values are kept in an encrypted vault on your computer. What the provider does with your requests is covered by its own privacy policy.

If you turn on name detection, Veil downloads its model and runtime once, from Hugging Face (huggingface.co) and the Python Package Index (pypi.org). Like any download, those sites see your IP address. Veil sends them nothing else.

2. Buying Veil

When you buy, we process:

• Your name, email address and billing address, which you enter at checkout. Stripe collects them, along with your payment details.
• Your card details, which only Stripe sees. We never receive them.
• The licence key, which contains your name, email address, the payment's ID and its date, so the app can show who it's licensed to.

We use this data to take your payment, deliver your licence key by email, handle refunds, answer support requests and keep the accounting and tax records the law requires. The legal bases are the performance of our contract with you and our legal obligations.

The records of your purchase stay in our Stripe account. Our licence server doesn't keep a copy: it reads the payment from Stripe when it makes your key, and notes there that the key was sent. We keep purchase records for as long as accounting and tax law require (in Romania, generally 10 years), and other purchase data no longer than needed for the purposes above.

3. Visiting getveil.tech

The site uses no cookies of its own, no analytics and no tracking scripts. Like any web server, ours records requests: your IP address, the page, the time and your browser's description. We use these logs only to keep the site working and secure, for example to limit repeated requests, which is our legitimate interest. They're kept for a short time and then overwritten.

The site is delivered through Cloudflare, which protects it against attacks and may set cookies that are strictly necessary for that. Checkout happens on Stripe's own pages, under Stripe's privacy policy.

4. Who processes your data for us

• Stripe: payments, receipts, tax calculation and our purchase records.
• Cloudflare: delivering and protecting the website.
• Our email provider: sending your licence key.
• Our hosting provider: running the server for the website and licence delivery.

Some of these companies process data outside the European Economic Area. Where they do, they use safeguards the GDPR allows, such as the European Commission's standard contractual clauses. We don't sell your data or share it for advertising.

5. Your rights

Under the GDPR you can ask us for a copy of your data, and to correct it, delete it, restrict its use or receive it in a portable format. You can also object to processing based on our legitimate interest. Some data, such as accounting records, we must keep even if you ask us to delete it. Write to veil (at) oramlabs.com; we'll answer within one month.

You can also complain to a data protection authority. In Romania that's the ANSPDCP (dataprotection.ro); you can also contact the authority where you live.

6. Changes

If we change this policy, we'll update the date at the top. If a change matters for data we already hold about you, we'll tell you by email.