Privacy policy

What we collect

• Account details. Your name and email address, and your profile picture if you sign in with Google or Microsoft. We use these to identify your account and to decide which courses you can open (for example, a school email address can unlock that school’s courses).
• Learning activity. The questions you answer, the flashcards you review, your scores, progress and notes inside a course. We use this to schedule your review, show your progress, and, if your class uses Vellum, to let your teacher see how the class is doing.
• Purchases. What you bought, when, and whether a plan is active. Card details are entered on Stripe’s page and go straight to Stripe; Vellum never sees or stores your full card number.
• Technical records. When a course page is opened we record the time, the page, and the IP address and browser that asked, so we can secure accounts and fix problems. We also collect anonymous page-view counts and error reports.
• Messages you send us, such as the “bring Vellum to your school” form.

We do not sell your information, we do not show ads, and we do not use your learning activity to build advertising profiles.

Who helps us run Vellum

These companies process data on our behalf, only to provide their part of the service:

• Clerk: sign-in and account management.
• Google and Microsoft: if you choose to sign in with them. They tell us your name, email and profile picture; we do not get access to your email, files or contacts.
• Supabase: our database (accounts, progress, purchases).
• Stripe: payments, receipts and billing.
• Vercel: hosting, and anonymous page-view analytics.
• Cloudflare: domain name service and course file storage.
• Sentry: error reports, so we can fix bugs.

We may also share information if the law requires it, or to protect Vellum’s users or the service from fraud or abuse.

Schools and teachers

When a school uses Vellum, a teacher at that school can see the progress of students in the classes they manage. Teachers see only their own classes. If you are a student and have a question about what your teacher can see, ask your teacher or write to us.

Children

Vellum is built for high school and middle school students. If you are under 13, use Vellum only through your school, with your school’s permission. We do not knowingly collect personal information from children under 13 outside a school’s use of Vellum. If you believe a child under 13 has given us information without that permission, email us and we will delete it.

How long we keep it

We keep your account and progress while your account is open so that your work is there when you come back. Purchase records are kept as long as tax and accounting rules require. If you delete your account, we delete your learning activity and profile within 30 days, except where we must keep a record by law.

Your choices

• Ask us for a copy of the information we hold about you.
• Ask us to correct it or delete your account.
• Cancel a monthly plan at any time from Manage billing.

Email petros@vellumprep.com and we will respond within 30 days.

Security

Course content and your data are only served after we check that your account is allowed to see them, connections to Vellum are encrypted, and payment details are handled entirely by Stripe. No system is perfectly secure; if we learn of a breach that affects you, we will tell you.

Changes

If we change this policy we will update the date at the top, and for significant changes we will let account holders know by email.