Privacy Policy

Who we are

Venturi, based in the Republic of Cyprus, is responsible for (the “controller” of) your personal information. Privacy questions or requests: contact us through the Contact Us page on our website (/contact) or by replying to your license email.

What we collect and why

• Account and purchase data: email, optional name, GitHub username, order details and license status. To deliver what you bought, run your account and meet tax obligations.
• Payment data: handled by Stripe. We receive the amount, tax, billing country and the last digits of the card, never the full card number.
• License activations: a one-way hash of a machine identifier sent by the CLI, to enforce the 3-machine limit.
• Theme descriptions you submit and the themes generated from them.
• Affiliate data: payout email and method, application details, and for clicks on affiliate links a keyed hash of the IP address, never the IP itself, used to detect fraud.
• Messages you send through our contact form: your name, email, topic and message, to reply to you, and a keyed hash of your IP address (never the IP itself) to stop spam.
• Basic server logs needed to keep the service secure and working.

What we never do

• We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising.
• We do not use advertising or cross-site tracking cookies.
• We do not use your data or theme descriptions to train AI models.

Cookies

Because we do no cross-site tracking, we treat browser Do Not Track and Global Privacy Control signals as already honored.

• Required: sign-in cookies, strictly necessary to keep you signed in.
• Required: venturi_offer, set only if you claim an on-site discount, so it is applied at checkout (7 days).
• Required: venturi_consent, remembers your cookie choices (1 year).
• Marketing: venturi_ref, set only when you arrive through an affiliate link; stores the affiliate’s link name for 30 days so they are credited if you buy. You can turn it off any time under “Cookie preferences” in the footer, which deletes it.

Who processes your data

These providers may process data in the US or elsewhere. For data from the EU, transfers rely on the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

• Supabase (database and authentication)
• Stripe (payments and tax)
• Vercel (hosting)
• Anthropic (theme generation; receives only the description you submit)
• Google Workspace (email)
• GitHub (repository access, if you add your username)

How long we keep it

Account data for as long as your account exists. Order records for the period tax law requires (currently 6 years). Affiliate click records and contact-form messages for 24 months. Server logs for up to 30 days.

Your rights (everyone)

You can ask to access, correct, delete or export your data, or close your account, by contacting us through the Contact Us page on our website (/contact) or by replying to your license email. We verify requests by confirming them from your account email, reply within 30 days, and will not treat you differently for using these rights.

US state privacy rights (including California)

Residents of California and other US states with privacy laws have the rights to know what personal information we collect and how we use it, to delete it, to correct it, and to opt out of its sale or sharing (we do neither). In the past 12 months we collected identifiers (email, GitHub username), commercial information (purchases) and internet activity limited to license activations and affiliate clicks, for the purposes above. You may use an authorized agent to make a request.

EU and UK rights (GDPR)

We process your data to perform our contract with you, to meet legal obligations, and for our legitimate interests in security and fraud prevention. You can also restrict processing or object to processing based on legitimate interests, and complain to the Commissioner for Personal Data Protection in Cyprus (dataprotection.gov.cy) or your local authority.

Children and changes

Venturi is for adults building software. We do not knowingly collect data from anyone under 16. We will post any change to this policy here with a new date.