Legal

Privacy Policy

Last updated: 7 October 2026

This policy explains how Velcod collects, uses and protects personal data when you visit velcod.com (including our offer pages), book a call, or contact us.

1. Who we are

Velcod is a senior product studio operated by PT Nexa Core Ventures, a company registered in Indonesia, at Plaza Aminta, 5th Floor, Suite 504, TB Simatupang St. Kav. 10, South Jakarta 12310, Indonesia (“Velcod”, “we”, “us”). We are the controller of the personal data described in this policy.

Contact for privacy questions: contact@velcod.com.

2. The data we collect

Data you give us

  • Contact details: name, email address, phone or WhatsApp number, company name.
  • Booking answers: what you are building, your product type, stage, budget readiness, timing and any links you share when you book a call.
  • Messages: what you write in forms, emails, WhatsApp messages and calls.
  • Client project information, when you become a client: contracts, invoices, billing details and project materials.

Data collected automatically

  • Device and usage data: IP address, browser, device type, pages viewed, the link or ad that brought you to us, and actions on the page such as clicking a button or opening the booking calendar.
  • Cookies and similar technologies, described in section 5.

If we record a video call (for example, to take accurate notes), we will ask for your permission at the start of the call.

3. How we use your data, and why

Purpose

Legal basis

Reply to your enquiries, schedule and hold calls

Steps you ask for before a contract; our legitimate interest in responding

Prepare scopes, proposals and agreements

Steps you ask for before a contract

Deliver projects, invoice and provide support

Performance of our contract with you

Send reminders and follow-ups about a call you booked

Our legitimate interest; you can ask us to stop at any time

Measure and improve our website and advertising

Your consent where the law requires it; otherwise our legitimate interest

Keep financial and tax records

Legal obligation

Protect our rights and prevent misuse

Our legitimate interest

We do not sell your personal data. We do not use it to make decisions about you by automated means alone.

4. Who we share data with

We share personal data only with service providers that help us run our business, and only as far as they need it:

Provider

What it does for us

Hostinger

Hosts our website

Google (Workspace, Meet, Analytics)

Email, video calls and website analytics

Meta (Facebook, Instagram, WhatsApp)

Advertising measurement and WhatsApp messaging

Cal.com

Call booking and reminders

Banks and payment providers

Processing payments and refunds

We may also disclose data to professional advisers (such as lawyers and accountants), to a buyer if our business is sold, or where the law requires it.

5. Cookies and tracking

Our website uses cookies and similar technologies:

  • Essential: needed for the website to work and stay secure.
  • Analytics: Google Analytics shows us how visitors use our pages, such as pages viewed, traffic sources and booking clicks.
  • Advertising: the Meta Pixel and Meta Conversions API tell us whether our Facebook and Instagram ads lead to visits and booked calls. Meta may combine this with other information it holds about you, under Meta’s Privacy Policy.
  • Booking and video: the Cal.com booking calendar and YouTube videos (loaded only when you press play) may set their own cookies.

You can block or delete cookies in your browser settings. You can limit ad personalisation in your Meta ad preferences and opt out of Google Analytics with Google’s opt-out add-on. Blocking cookies does not stop you from booking a call.

6. International transfers

We are based in Indonesia. Our service providers may process data in other countries, including the United States, Singapore and member states of the European Union. When we transfer personal data outside the country where it was collected, we rely on safeguards the law allows, such as the provider’s data processing terms and the European Commission’s standard contractual clauses.

7. How long we keep data

Data

Kept for

Enquiries and bookings that do not become projects

Up to 24 months after our last contact

Client contracts, invoices and financial records

As long as Indonesian tax and accounting law requires (generally 10 years)

Project materials

For the project and any support period, then as set out in the client agreement

Website analytics

Up to 14 months

When data is no longer needed, we delete or anonymise it.

8. Security

We use reasonable technical and organisational measures to protect personal data, including access controls, encrypted connections and reputable service providers. No method of transmission or storage is completely secure. If a breach affects your data, we will notify you and the relevant authorities as the law requires.

9. Your rights

Depending on where you live, you may have the right to:

  • access the personal data we hold about you and get a copy;
  • correct inaccurate data;
  • ask us to delete your data;
  • restrict or object to how we use it, including for marketing;
  • receive your data in a portable format;
  • withdraw your consent at any time, where we rely on consent.

These rights apply under Indonesia’s Personal Data Protection Law (Law No. 27 of 2022), the EU and UK GDPR, and similar laws elsewhere. To use them, email contact@velcod.com. We will reply within the time the law sets, and may need to confirm your identity first. You may also complain to the data protection authority in your country.

10. Client projects

When we build a product for a client, any personal data of that product’s users is handled under the client’s instructions and our agreement with the client. The client is responsible for its own privacy policy.

11. Children

Our services are for businesses. We do not knowingly collect personal data from anyone under 18.

12. Changes to this policy

We may update this policy. The date at the top shows when it last changed. Significant changes will be highlighted on this page.

13. Contact

PT Nexa Core Ventures (Velcod) Plaza Aminta, 5th Floor, Suite 504, TB Simatupang St. Kav. 10, South Jakarta 12310, Indonesia contact@velcod.com · +62 857-7411-5940

Tell us what you're building

What an MVP really costs, and the exact scope to launch — in weeks, not months.

Real cost ranges by type
No-code vs custom
The 3-week build checklist

Straight to your inbox. No call. No pitch.