Privacy Policy
This policy explains what personal data Vellum Architecture ("Vellum", "we") collects through this marketing website, why, and the rights you have over it. It covers this website only — data you enter inside the Vellum application is governed by your firm's subscription agreement.
Who we are
Vellum Architecture is a project-management platform for architecture firms, operated from Lisbon and Porto, Portugal. For any privacy question, contact us at [email protected].
What we collect
Contact submissions. When you use the contact form, we collect the name, work email, firm name, and message you provide, so we can reply.
Analytics. If you accept, we use Google Analytics to collect aggregated, pseudonymous usage data (pages viewed, approximate region, device type). Google Analytics only loads after you click Accept in the cookie notice.
We do not collect payment details on this website — plan checkout and billing happen inside the application through Stripe.
Legal basis
We process contact-form data to respond to your request (steps prior to a contract, and our legitimate interest in replying). Analytics is processed only with your consent, which you may withdraw at any time.
Processors we use
Cloudflare — content delivery network and security in front of the website. It sets a technical cookie, __cf_bm, to tell visits apart from automated traffic.
DigitalOcean — website hosting; processes standard server logs.
Google — email: contact-form messages reach us by email, through Google Workspace.
Google Analytics — website analytics, only after you consent.
These providers process data on our behalf under their own data-processing terms.
Retention
We keep contact submissions only as long as needed to handle your enquiry and any follow-up, then delete or anonymise them. Analytics data is retained according to our Google Analytics configuration.
Your rights
Under the GDPR you can request access to, correction of, or deletion of your personal data, object to processing, or request portability. To exercise any of these, email [email protected]. You may also lodge a complaint with the Portuguese data-protection authority (CNPD).
Cookies
On your first visit, a notice asks whether you accept analytics cookies, with two equal buttons: Accept and Decline. No analytics script loads before you click Accept, and declining changes nothing about your visit.
Your choice is kept in your browser's local storage. You can change it at any time under "Cookie preferences" in the site footer; if you withdraw consent, we delete this site's Google Analytics cookies (_ga).
Whatever you choose, Cloudflare sets the technical cookie __cf_bm, which is needed to protect the site from automated traffic. It isn't used for analytics or advertising, and it expires after 30 minutes.
We review this document whenever the site changes. Questions: [email protected].