Velum Lite makes no network requests. The text and documents you process never
leave your machine, because they are never sent anywhere.

What the extension collects: nothing. No servers, no analytics, no accounts, no
telemetry, no crash reporting.

What it stores locally: your settings, in browser extension storage. The
mapping that reverses masking lives in session memory only and is cleared when
the browser closes. Neither is ever transmitted.

Network access: the extension declares no host permissions and makes no
requests. The detection model, the ONNX runtime, the OCR data and the licence
revocation list are all packaged inside the add-on.

Two optional features request permissions at runtime, and only if you turn them
on. In-page masking asks for access to claude.ai, chatgpt.com and
gemini.google.com so it can add a Mask button to the composer on those sites.
The Desktop engine bridge asks for loopback access (127.0.0.1) so masking can
be routed to the Velum Desktop app running on your own machine; only loopback
addresses are accepted, so no remote host is reachable through it. Both are off
by default.

Licences: if you buy a licence, the purchase is handled on velumprivacy.com and
is covered by the policy at the link below. The extension validates a licence
key locally and does not phone home.

We do not sell your data. We never receive it.

Full policy, always current: https://velumprivacy.com/privacy