Privacy Policy
1. About Us
VeloBoard is operated by Vinu Narayanan, Palakkad, Kerala, India. Contact: winvishtech@gmail.com
2. Information We Collect
- Account: Name, email, password (bcrypt hashed — never plain text)
- Strava OAuth Tokens: Access/refresh tokens stored to maintain your Strava connection
- Strava Profile: Basic profile data (name, city, photo, weight) for dashboard display
- Payment Reference: UPI UTR number only — no card or bank details ever collected
- Goals & Challenges: Data you create within VeloBoard
- Server Logs: IP address, browser type — retained 30 days for security
3. What We Do NOT Store
- Your Strava password
- Your cycling activity data — fetched live per session, never stored
- Card numbers, CVV, or bank details
4. How We Use Your Information
- To manage your VeloBoard account and Strava connection
- To verify UPI payments and activate subscriptions
- To communicate about your account and support requests
5. Data Sharing
We do not sell or share your personal data. Limited sharing occurs only with: Strava (API calls), HostGator (hosting infrastructure), and Indian courts/authorities if legally required.
6. Security
Passwords are bcrypt hashed. All pages served over HTTPS. Data folders protected from web access. API endpoints require authentication.
7. Your Rights
You may access, correct, or request deletion of your data. Contact winvishtech@gmail.com. You can revoke Strava access anytime via Strava Settings → My Apps.
8. Cookies
One session cookie is used to keep you logged in. No third-party tracking or advertising cookies.
9. Grievance Officer (IT Rules 2011)
Vinu Narayanan · Palakkad, Kerala – 678 601 · winvishtech@gmail.com · Response within 30 days.
10. Changes
Updates will be posted here with a revised date. Continued use constitutes acceptance.