Last Updated: October 10, 2026 — Version 2.3
Velocta (Houkan Technologies, LLC) ("Velocta", "we") is committed to protecting the privacy and security of your data. This policy explains how we collect, process, store, protect, and destroy your information. For our full security controls, see our Security & Compliance Policies.
Velocta is a cloud-based construction management platform serving general contractors, subcontractors, and specialty trade contractors in the United States. This Privacy Policy applies to all data collected and processed through the Velocta platform, including our web application (velocta.io), API, and integrations.
By using Velocta, you (the "Subscriber") agree to the collection and use of information in accordance with this policy. Subscribers are responsible for ensuring their own employees' awareness of data handling practices when using the platform.
Houkan Technologies LLC / Velocta
Contact: privacy@velocta.io
DPO: Abdul Rhman Houkan — legal@velocta.io
When you use Velocta features (Velocta AI Agent, cost prediction, smart migration), the relevant project data is transmitted to our AI providers for processing. We do not send Restricted PII (SSNs, bank data) to AI systems. See our Gen AI Use Policy for full details.
All data is classified into one of four categories that determine handling, access, and protection requirements.
We do not sell your data. We do not use your proprietary construction or financial data for advertising, cross-platform tracking, or to train AI models.
We share data only with the following categories of recipients:
All sub-processors are bound by data processing agreements. We do not share your data with advertisers, data brokers, or analytics platforms.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
If you choose to connect your Gmail or Outlook account, Velocta sends estimates, invoices, and submittals to your clients directly from your own email address, so they arrive from you rather than from a third-party platform. This is not data sharing with Google or Microsoft — you are authorizing Velocta to act as you, on your own account, for that specific purpose.
By default, connecting Gmail or Outlook grants only send-as-you access (Google scope gmail.send / Microsoft scope Mail.Send). Velocta cannot read, search, or list any message in your mailbox under this access, and message content is not retained beyond what is needed to complete delivery.
For Gmail, Velocta strictly requests only send-as-you access (gmail.send) to transmit project documents, invoices, estimates, and submittals directly on your behalf. Velocta cannot read, search, or list any message in your Gmail mailbox, and message content is not retained beyond what is needed to complete delivery. Mailbox read access (Mail.ReadWrite / IMAP) is reserved for Microsoft Outlook or direct IMAP integrations.
Velocta's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. You can disconnect Gmail or Outlook at any time from Settings, which revokes Velocta's access immediately.
Velocta (Houkan Technologies, LLC) sends text messages only to people who add their mobile number and agree to receive texts. If you give Velocta your mobile number and agree to receive texts, we use it only to send you a one-time verification code to confirm the number, the daily project brief you asked for, and answers to questions you text to Velocta. We do not send marketing or promotional texts.
We do not sell or share your mobile number, SMS opt-in data or consent with third parties or affiliates for marketing or promotional purposes. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. Information sharing to subcontractors in support services, such as our text message delivery provider (Twilio), is permitted only to deliver the texts you asked for.
We keep a record of your consent: the wording you agreed to, when you agreed, and the IP address you agreed from, so we can show it was your choice.
You can opt out at any time by replying STOP to any message, or by turning off texts in Daily brief by text in Velocta AI. Message frequency varies. Message and data rates may apply. Reply HELP for help or email support@velocta.io. Consent is not a condition of purchase. See also our SMS Terms.
Retention periods are based on legal requirements and business necessity. Data is permanently deleted when no longer required.
Data is destroyed via Firestore document deletion. Google's infrastructure ensures cryptographic erasure through key rotation. Backup data is deleted from Google Cloud Storage. No physical media is maintained by Velocta.
You may export your data in JSON or CSV format at any time during your active subscription. Export capability remains available for 30 days post-cancellation on request to privacy@velocta.io.
Velocta implements technical and organizational measures to protect your data:
For complete security controls documentation, see our Security & Compliance Policies.
You have the following rights regarding your personal data:
California residents have additional rights under the California Consumer Privacy Act, including the right to know, delete, and opt-out of sale of personal information. Velocta does not sell personal information. Submit CCPA requests to privacy@velocta.io.
Email privacy@velocta.io with your request. We will respond within 30 days. Identity verification may be required.
Velocta is not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided personal information to Velocta, contact privacy@velocta.io immediately.
We may update this Privacy Policy periodically. Material changes will be communicated to subscribers via email at least 30 days before taking effect. Continued use of Velocta after the effective date constitutes acceptance of the updated policy. The "Last Updated" date at the top of this page reflects the most recent revision.