This policy explains what Vellum Development LLC ("Vellum", "we") collects when you use vellumdev.com, the Vellum Studio and the Vellum plugin, why, and what choices you have.
1. What we collect
From you, for your account:
- your email address, and the name and picture your sign-in provider shares;
- the sign-in method you use (email link, Google or Discord) and its account id;
- your team, its members and their roles;
- sign-in history: when and from where (IP address and browser) you signed in.
From your linked servers:
- the server's id, its name, and the time it last connected;
- the content the Studio works on for you: models, textures, configurations and the resource packs built from them;
- server statistics shown on your Dash, such as player counts.
When you pay: Stripe collects your card details. Vellum never receives or stores your card number. We receive from Stripe your plan, billing country, payment status and the last four digits of your card.
Automatically: IP addresses and request logs, kept for security and to keep the Service running.
2. Why we use it
- to run your account, your team, your linked servers and the Studio;
- to build and host your resource packs;
- to bill you and keep your plan's limits;
- to email you about your account: sign-in links, security notices (such as a new sign-in method joined to your account), billing and changes to our terms;
- to protect the Service against abuse and fraud.
We do not sell your personal information and do not use it for advertising.
3. Cookies
We use one cookie, to keep you signed in. We do not use advertising or tracking cookies.
4. Payment security
Payments are handled by Stripe, which is certified to PCI DSS Level 1. Card details go straight from your browser to Stripe. All of vellumdev.com is served over HTTPS.
5. Who processes data for us
| provider | what for |
|---|---|
| Cloudflare | hosting, our database, file storage for packs and backups |
| Stripe | payments and subscriptions |
| Google, Discord | sign-in, if you choose them |
| [OPERATOR: email provider] | sending account email |
Each handles data only to provide its service to us. We may also disclose information where the law requires it.
6. How long we keep it
- Account data: while your account is open, and up to [OPERATOR: 30] days after you close it.
- Content beyond Free's limits after a paid plan lapses: deleted after the 14-day window described in our Terms §4.
- Billing records: as long as tax law requires.
- Request logs: [OPERATOR: 30] days.
7. Your choices and rights
You can see and change your account details on your Account page, export your content, unlink a server, and close your account. Depending on where you live (for example under the GDPR or the CCPA), you may also have the right to access, correct, delete or port your data, or to object to its use. Email support@vellumdev.com and we will respond within 30 days.
8. Children
Vellum is not intended for children under [OPERATOR: 13]. If we learn that we hold personal information from a child under that age without a parent's consent, we delete it.
9. International transfers
Our providers may process data outside your country, including in the United States. [OPERATOR: lawyer to name the transfer safeguards, such as Standard Contractual Clauses.]
10. Changes
We will post changes here and email account holders about material ones.
11. Contact
Vellum Development LLC, [OPERATOR: address, if any]
Email: support@vellumdev.com