Your privacy matters. Here's exactly what we collect, why, and how we keep it safe.
Last updated: 25 April 2026
Velyxa is an SMS booking platform that provides you with a dedicated Australian phone number and an AI assistant to handle client enquiries, bookings, and payments. We take the security of your data seriously. This policy explains what information we collect, how we use it, and the measures we take to protect it. We are an Australian company and comply with the Australian Privacy Principles under the Privacy Act 1988 (Cth).
When you create an account, we collect your email address, phone number, and display name. This information is necessary to operate your account and provide our SMS booking service.
During onboarding, you provide details such as your availability, pricing, service descriptions, and location preferences. This data powers your personalised AI assistant so it can handle enquiries on your behalf.
Messages sent and received through your dedicated number are stored so you can review conversations in your dashboard, and so the AI can maintain context during a booking flow.
We use Stripe to process payments. We never store your full card details. Stripe handles that securely. We only retain transaction references and credit balances.
If you enable ID verification, client ID photos are collected during the booking process. These images are stored securely and are subject to a separate ID Verification Policy.
All data is encrypted using TLS in transit and AES-256 at rest. Your information is never transmitted or stored in plain text.
We use Supabase (built on PostgreSQL) for our database, with row-level security policies ensuring users can only access their own data. Our application is hosted on Vercel with enterprise-grade security controls and edge network delivery.
Only you can see your account data, conversations, and bookings. Our team does not access your data unless required to resolve a support issue you raise, and only with your consent.
We regularly review our security practices, dependencies, and infrastructure to ensure your data remains protected against evolving threats.
Your service configuration, availability, and pricing data is used by our AI assistant (powered by Claude, by Anthropic) to respond to client enquiries via SMS. Conversation data is used to maintain context within a booking flow.
We use Cellcast to send and receive SMS messages on your behalf. Client phone numbers are shared with Cellcast solely for the purpose of delivering messages to and from your dedicated number.
We use Google Maps for address search and validation during onboarding, and to calculate distances and travel fees for bookings at client locations. Address data is used only for these purposes and is not shared with third parties.
We may use aggregated, anonymised usage data to improve the platform. We never sell your personal data to third parties, and we never use your data for advertising.
Payment processing, subscription management, and credit top-ups. Stripe is PCI DSS Level 1 certified, the highest level of payment security certification.
Database hosting, authentication, and file storage. Your data is stored with row-level security policies ensuring only you can access your own data.
Application hosting and deployment. Vercel provides edge network delivery, automatic scaling, and enterprise-grade security for our web application.
Address search, validation, and distance calculations for travel fee estimates. Only address data is sent to Google. No personal or account information.
Australian SMS gateway for sending and receiving text messages. Cellcast processes phone numbers and message content solely for delivery purposes.
Our AI assistant is powered by Claude. Conversation context is sent to Anthropic's API to generate responses. Anthropic does not use your data to train their models.
Your account data is retained for as long as your account is active. If you delete your account, all personal data is permanently removed within 30 days.
Message history is retained for as long as your account is active, so you can always refer back to past conversations. Messages are deleted when you delete your account.
Client ID photos are automatically deleted from our systems after 365 days, unless the client has been reported. Reported client data may be retained longer for platform safety. For full details, see our ID Verification Policy.
You can export a copy of all your data directly from your dashboard under Settings. You can also correct inaccurate information, or request full account deletion at any time by contacting us at help@velyxa.ai.
If you have any questions about this privacy policy or how we handle your data, get in touch.
Contact Us