Privacy Notice
Version 1. Effective 28 October 2026. This notice explains what the supplier-invoice audit at audit.velkancorp.com collects and why.
Who is responsible
Waffle Corp., 2093 Philadelphia Pike #2073, Claymont, DE 19703, United States, operating under the Velkan name. Contact: invoices@audit.velkancorp.com.
What we collect
- Your invoices and the emails that carry them. Supplier names, item descriptions, pack sizes, quantities, prices, dates, and any names on them, such as a sales rep's. Also the sender's email address and the message itself.
- Contact details. The email address you write from and anything you tell us in your messages.
- Payment. Stripe collects your payment details. We receive the payment status, the amount, your email and your billing address from Stripe; we never see or store your card number.
This website sets no cookies, runs no analytics and loads nothing from third parties. Our hosting provider records technical connection data (such as IP addresses) to deliver and protect the site.
What we use it for
Only to prepare and deliver your audit, answer your messages, take payment and issue refunds, and meet our legal obligations, such as keeping payment records.
We do not sell your data. We never give your invoices, your prices or your report to a supplier, a supplier's reps or another customer, and we never use them in another customer's report. We do not use your invoices for any other purpose, including an anonymised benchmark, unless you give separate written opt-in consent, which you can refuse or withdraw without affecting your audit.
How long we keep it
We delete your invoices, emails and working files 90 days after we deliver your report, or sooner if you ask. If you do not buy an audit, we delete what you sent within 30 days of receiving it. As a safeguard, our storage deletes every message automatically 180 days after it arrives. Payment records are kept as long as tax and accounting law requires. If you opted in to an anonymised benchmark, only the anonymised price lines are kept, and you can withdraw that consent at any time.
Who processes it for us
| Provider | What it does | Where |
|---|---|---|
| Cloudflare, Inc. | Receives email to invoices@audit.velkancorp.com, stores it in private storage, and hosts this website | United States and its global network |
| Stripe, Inc. | Takes payment and issues refunds | United States |
No one else receives your data, except where the law requires us to disclose it.
Security
Invoices are stored in a private storage bucket that is never published and that only we can read. Access to our accounts is protected by strong, individual credentials.
Your choices and rights
You can ask us at any time to see, correct or delete the information we hold about you, or to stop using it, by writing to invoices@audit.velkancorp.com. We answer within 30 days. Where the law of your state or country gives you further rights, we honour them.
Changes
If we change this notice, we post the new version here with a new date. A change that affects invoices you already sent applies only with your consent.
Waffle Corp. · 2093 Philadelphia Pike #2073, Claymont, DE 19703, United States