The paperwork
Privacy Policy
Last updated July 28, 2026
The principle: local-first
Vellum Command runs on your machines. Your canvases, terminal sessions, agent conversations, browser pages, SSH configuration, and credentials live on your hardware and never reach us. We could not read your operation if we wanted to — there is no account, no sync service, no telemetry, and no analytics in the application.
The data controller for the little we do process is the developer of Vellum Command. Contact: support@vellumcommand.com.
The only two things the app sends us
- License validation. When you activate or periodically revalidate, the app sends your license key and an installation label to Dodo Payments — enough to enforce the activation limit, nothing about what runs on your board.
- Update checks. The app fetches the update feed to learn whether a newer build exists — a standard HTTP request carrying the app version.
That is the complete list. If it ever grows, this page changes first.
What we process off the app
- Purchases. Checkout is run by Dodo Payments, our merchant of record. Dodo Payments processes your payment details under Dodo Payments' privacy policy; we receive your name, email, and order details — never card numbers.
- Email. If you request beta access, start a trial, or write to us, we keep your email address and correspondence to deliver keys, builds, and answers. Transactional email is sent through Resend. Every non-essential email carries an unsubscribe link.
This website
No analytics, no advertising trackers, no cookies. The site is static pages served by Vercel; Vercel's infrastructure logs standard request metadata (such as IP addresses) to operate the service.
Who touches the data
Three processors, each for one job: Dodo Payments (payments, license validation, and merchant-of-record services), Resend (email delivery), and Vercel (website hosting). We do not sell or share your data with anyone else, full stop.
Retention and your rights
License and order records are kept while your subscription exists and as long as tax and consumer law require. Mailing-list entries are kept until you unsubscribe. Under the LGPD (and, where it applies, the GDPR) you can request access, correction, or deletion of your data — one email to support@vellumcommand.com.
Changes
If this policy changes materially — in particular, if the list of things the app sends ever grows — we announce it by email to active subscribers before it takes effect.
