Privacy Policy

1. Introduction

Ven Technologies ("we", "our", or "us") operates VOX Platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. We are committed to protecting your privacy and complying with the UK GDPR and Data Protection Act 2018.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Name and email address
• Organization/company details
• Billing information (processed securely via Stripe)
• Authentication credentials (managed by Clerk)

2.2 Usage Data

We automatically collect:

• Device and browser information
• IP address and geolocation data
• Pages visited and features used
• Project and report data you create

3. How We Use Your Information

We use your information to:

• Provide and maintain the VOX Platform service
• Process your transactions and manage billing
• Send service updates and security notices
• Improve our products and services
• Comply with legal obligations
• Prevent fraud and ensure platform security

4. Legal Basis for Processing (UK GDPR)

We process your data under the following legal bases:

• Contract Performance: To provide services you've subscribed to
• Legitimate Interests: To improve our service and prevent fraud
• Legal Obligation: To comply with tax and accounting requirements
• Consent: For optional analytics and marketing (where applicable)

5. Data Sharing and Third Parties

We share data with trusted partners who help us operate:

• Clerk: Authentication and user management
• Stripe: Payment processing (PCI DSS compliant)
• Vercel: Hosting and infrastructure
• OpenAI: AI-powered analysis (anonymized data only)
• SerpAPI: Market data collection

We never sell your personal data to third parties.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. After account deletion, we retain minimal data for 90 days for legal and security purposes, then permanently delete all personal information.

7. Your Rights (UK GDPR)

Under UK GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a machine-readable format
• Object: Opt out of certain data processing activities
• Withdraw Consent: Revoke consent for optional processing

To exercise these rights, email privacy@ven-technologies.com

8. Data Security

We implement industry-standard security measures including encryption in transit (TLS 1.3), encryption at rest, regular security audits, and access controls. However, no system is 100% secure, and we cannot guarantee absolute security.

9. International Transfers

Your data may be processed in countries outside the UK/EU. We ensure adequate safeguards through Standard Contractual Clauses (SCCs) approved by the ICO and EU Commission.

10. Children's Privacy

VOX Platform is not intended for users under 16 years of age. We do not knowingly collect data from children. If you believe we have collected data from a child, contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email and by updating the "Last updated" date above.

12. Contact Us

For privacy-related questions or to exercise your rights: