Privacy Policy

Effective date: June 11, 2026

Veldmesh (“we”, “our”, “us”) is operated by Ironfeast Media, LLC. This Privacy Policy explains how we collect, use, and protect information when you use our website at veldmesh.io, our dashboard at app.veldmesh.io, and our software (collectively, the “Service”).

1. Information We Collect

Account information

When you create an account we collect your email address and a hashed password. We do not store your password in plaintext.

Network and machine metadata

We store the names, IP addresses, and public keys of machines you register with the coordination server. We never see or store your VPN traffic — all data-plane communication is peer-to-peer and end-to-end encrypted.

Billing information

Payments are processed by Stripe. We store only your Stripe customer ID; we never store full card numbers or bank details.

Usage data

We collect basic server logs (IP address, timestamp, HTTP method, path) for security and abuse prevention. Logs are retained for 30 days.

2. How We Use Your Information

  • Provide and operate the Service
  • Process payments and send billing receipts
  • Respond to support requests
  • Detect and prevent abuse or unauthorized access
  • Send transactional emails (password reset, subscription notices)

We do not sell your data to third parties. We do not use your data for advertising.

3. Data Sharing

We share data only with the following service providers:

  • Stripe — payment processing
  • Neon / PostgreSQL — database hosting
  • Railway — API hosting
  • Vercel — web hosting

Each provider is contractually bound to protect your data and may not use it for their own purposes.

4. Data Retention

Account data is retained for the duration of your account. You may request deletion at any time by emailing hello@veldmesh.io. Deleted accounts are purged within 30 days. Billing records may be retained longer as required by law.

5. Security

We use TLS for all data in transit. Database credentials are encrypted at rest. Access to production systems is restricted to authorized personnel.

6. Your Rights

Depending on your location, you may have rights to access, correct, or delete your personal data, or to object to or restrict certain processing. To exercise any of these rights, contact us at hello@veldmesh.io.

7. Cookies

The marketing site does not use tracking cookies. The dashboard uses a single session cookie (NextAuth) required for authentication. No third-party analytics cookies are set.

8. Children

The Service is not directed to children under 13. We do not knowingly collect information from children under 13.

9. Changes to This Policy

We may update this policy from time to time. We will notify registered users of material changes by email. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact

Ironfeast Media, LLC
hello@veldmesh.io