V31L LTD | Company Number: 16890413 | Registered in England and Wales
Last Updated: 7 October 2026 · Version 1.6
This Privacy Policy explains how V31L LTD ("We," "Us," "Our"), a company registered in England and Wales (Company Number 16890413), collects, uses, and protects your information when you use Veil ("the Platform").
Veil is the creative communication platform that combines messaging, community spaces, creative tools, and an optional AI companion, with end-to-end encryption built in as infrastructure. This policy describes what data we collect, what we cannot access due to our end-to-end encryption, and your rights under UK data protection law. If you use Veil's AI companion (Aurora), additional data handling is described in the separate Aurora Terms of Service.
V31L LTD is the data controller for your personal data:
V31L LTD · Company Number: 16890413
Registered office: 86–90 Paul Street, London, England, EC2A 4NE
Email: legal@v31l.chat
Account Information (Required):
Profile Information (Optional):
Email Address (Optional):
Subscription and Billing Data (Paid Tiers Only):
Technical Data (Automatic):
Hub Analytics: Veil records daily totals of Hub joins and departures, published page visits, content views, reactions, comments, poll choices, authored-link clicks and event responses. These help Hub owners understand activity in their communities. Only the owner and admins individually authorised by that owner can view the reports; exporting reports requires separate permission.
Analytics totals do not contain viewer names, account IDs, IP addresses, device fingerprints or browsing histories. Page measurement uses a random value held in memory for that page visit, with a hashed retry record kept for no more than 24 hours while the service runs. It does not use tracking cookies or persistent visitor identifiers. Daily totals are kept for up to 365 days. Hub Chat, Inbox and private message content are excluded. Existing membership, public content and event-response records remain governed by their normal access and retention rules.
Due to our end-to-end encryption architecture, we do not have access to and cannot read:
This data is encrypted on your device before transmission. Only you and your intended recipients possess the keys to decrypt it. We cannot decrypt this content even if compelled by law - we do not possess the decryption keys.
The Reporting System:
Whilst Veil uses end-to-end encryption and we cannot normally see or decrypt your messages, we provide a user-initiated reporting mechanism to address harmful or illegal content. When you submit a report through our platform:
What You Share:
Legal Basis for Processing Report Data:
Under UK GDPR, we process user-submitted report content on the following legal bases:
How We Use Report Data:
Report content and associated message snippets are processed strictly for the following purposes:
What We Do NOT Do With Report Data:
We will never use report content for:
Data Retention:
While message content is encrypted, we do process certain metadata necessary to operate the service:
Message Metadata:
Usage Metadata:
Hub Metadata:
Hubs can be private, request-to-join, open, or publicly discoverable. Hub profiles, pages, events, posts, galleries, host information and other material marked public may be visible outside the membership and appear in Veil discovery. Private or encrypted areas remain limited to their intended audience.
This metadata is necessary to route encrypted messages and provide service functionality.
We process your personal data under the following legal bases:
Self-Destruct Messages: When you send a self-destruct message, it is automatically deleted from our servers after the specified time period. Due to E2EE, we cannot access the content before or after deletion.
When We May Disclose Data:
We may disclose limited personal data to law enforcement, regulatory authorities, or other third parties in the following circumstances:
What We Can Disclose:
Due to our end-to-end encryption architecture, we can only disclose data we have access to:
We CAN provide:
We CANNOT provide:
Even when served with legal process, we cannot decrypt general message content. Only users possess the keys to decrypt their own communications.
Data Minimisation:
When responding to lawful requests, we will:
Under the UK General Data Protection Regulation, you have the following rights:
To exercise these rights, contact legal@v31l.chat.
Data-protection complaints: Email legal@v31l.chat with the subject “Data protection complaint”. We will acknowledge the complaint within 30 days, investigate it without undue delay, and provide progress information and an outcome. We keep a restricted complaint record so the Legal Team can track that duty. You do not have to complete our process before contacting the ICO or using another legal remedy.
Right to Complain: You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:
If you choose to provide an email address:
Used For:
Never Used For:
Email Cannot Recover Encrypted Messages: Your email enables password reset for account access only. Only your Superkey can recover encrypted message history.
Minimal Dependencies: Veil is designed with minimal third-party dependencies. Where third parties are used, they are limited to operational necessities:
We do not use:
Data Storage: Your data is stored on servers located in the European region (primarily Iceland).
Security Measures:
Veil is for people aged 16 and over. We intentionally provide a safeguarded service to 16- and 17-year-olds and apply the Children's Code and online-safety protections to those residents. Their accounts initially accept direct messages only from contacts. At entry, the server uses a date of birth to calculate eligibility and then discards the exact date. We retain an age band, the time of the check, and, for membership, a versioned adult declaration.
Plus and Pro memberships, including Aurora features reserved for paid members, are for adults aged 18 and over. Stripe stores card details; Veil receives billing identifiers and status, not your full card number. Bitcoin membership is prepaid and card-free. Neither payment method is treated as proof of identity or age. We do not currently request identity documents, facial or voice biometrics, bank links, or age-vendor identity dossiers.
If the date entered during a required age check makes the person ineligible, Veil refuses entry and does not retain the exact date. The resident can correct an error or contact legal@v31l.chat for help with access, export, or the existing account-deletion route.
Your data is primarily stored and processed within the European Economic Area (EEA), which provides equivalent data protection standards to the UK under UK GDPR adequacy decisions. Certain third-party operational services may involve processing outside the UK/EEA. This includes Aurora web search, spoken playback, the limited external AI processing fallback and Creative Studio generation described in section 16 where they are used. We apply the safeguards required by applicable UK data-protection law to restricted transfers.
Aurora is Veil's optional AI companion. Using Aurora is entirely opt-in and subject to the separate Aurora Terms of Service. If you do not use Aurora, no Aurora-specific data is generated or processed for your account.
What Aurora may process: Depending on the features you use, Aurora data may include your Aurora conversations and responses, memories and personalisation, saved locations, calendar items, reminders, lists, projects, plans, recipes, preferences, files you upload, and media created or saved through Aurora. We process this data to provide Aurora, preserve the continuity and features you choose, and fulfil actions you request. Aurora conversations are not sold or used to train V31L LTD's public AI models.
Where Aurora processing happens: Aurora's ordinary conversational replies are produced on V31L LTD hardware. Some text you supply to Aurora is processed by other AI companies for web search, spoken playback, Creative Studio, or selected background jobs as described below. A provider contracted to work on Veil's behalf is still an outside AI company.
Private Aurora processing and limited external fallback: Aurora's user-facing conversational model and private background support nodes are operated on V31L LTD hardware. Selected background jobs run on those private support nodes first. Only if private background processing is unavailable or cannot complete a job may we send the minimum relevant task context to a contracted outside AI company to complete that background task. Depending on the job, this may include relevant conversation text or summaries, relationship or personalisation context, reminder or event context, transcript material, or reflection material. This exceptional fallback supports selected background jobs; it does not replace Aurora's user-facing conversational model. The provider processes this data on our behalf under applicable contractual, confidentiality, security, retention and data-protection requirements.
Web search and current research: When you ask Aurora to search the web, a contracted outside AI company providing web research processes the search query and relevant request, conversation context or library material needed for that search. We do not attach your Veil account details or per-user identifiers to the request. Identifying details can still be present if you included them in the supplied text. This is the primary processing path for the web search you invoked, not the private-first background fallback described above.
Spoken playback: When you ask Aurora to speak a reply, the reply text and selected voice and synthesis settings are processed by ElevenLabs to generate the audio. ElevenLabs' terms and privacy policy describe its service.
Creative Studio: Creative Studio is an optional external-processing feature limited to an adult membership with a recorded adult declaration. When you ask it to generate an image, Runware processes the text prompt, any reference image you choose to supply, technical generation settings and generated result. Do not include information or images you do not want processed for that request. Runware's terms and privacy policy describe its service.
Your portable Aurora archive: From Data & Privacy in Aurora Settings, you can ask us to prepare a private ZIP containing the standard Aurora data linked to your account. Depending on what you have used, it may contain structured JSON, readable HTML or text conversation copies, and the actual media or files available for export. It excludes internal logs, model instructions or weights, service credentials, security data, and backend diagnostic metadata. Ghost Chat data and end-to-end encrypted Veil messages outside Aurora are not included.
How the archive is delivered: You can leave the page while it is prepared. When ready, Veil places a message in your in-app inbox and may send a generic offline push if you have enabled notifications. No email address is required. The notification contains no archive, direct download credential, or private Aurora content. You must enter your Veil password before each download; access is then authorised using a short-lived, one-use credential restricted to that archive.
Archive retention: The prepared ZIP remains available for 24 hours from the moment it becomes ready and is then permanently deleted from export storage, even if it was never downloaded. A minimal status receipt may remain for up to 30 days as described in section 8. Any copy you download is then under your control.
The self-service Aurora archive is designed to support access and portability, but it does not limit your data protection rights. To request other personal data, correction, deletion, restriction, or assistance, contact us using section 18.
We may update this Privacy Policy from time to time. We will notify you of material changes through Veil or by other reasonable means. The "Last Updated" date at the top indicates when the policy was last revised.
For privacy enquiries, data-protection complaints, or to exercise your data-protection rights:
V31L LTD · Company Number: 16890413
Registered office: 86–90 Paul Street, London, England, EC2A 4NE
Email: legal@v31l.chat · hello@v31l.chat