Security & privacy
Your leads are your business. Not our product.
Velro stores customer enquiries, which means names, numbers and intent. We treat that data as if it were our own pipeline, because it effectively is.
Encrypted end to end
All traffic runs over TLS and every record is encrypted at rest. Backups are encrypted and retained on a rolling schedule.
Hashed PII for Meta
Email and phone are SHA-256 hashed before any Conversions API request leaves our servers. Meta never receives raw contact details from us.
Role-scoped access
Sales reps see only the leads assigned to them. Admin actions, exports and setting changes are written to an immutable audit log.
Server-side by design
CAPI events fire from our backend, not the browser, so ad blockers and browser restrictions cannot break your measurement.
Our commitments
In plain language
No dark patterns, no data resale, no hostage-taking on export.
- We never sell, rent or share your lead data with third parties.
- You can export every record to CSV at any time, including after cancelling.
- Deleting a lead deletes it — with a short recovery window for accidents.
- We only send data to Meta for the events you explicitly configure.
- Access to production data is limited to on-call engineers and logged.
- Cancel and we remove your workspace data after the retention window.
Free · 20 minutes · no pressure
Need a security review before you buy?
Send us your questionnaire or bring your IT lead to the demo call. We answer specifics, not marketing copy.