Last updated: February 2025
Venti Solutions (“we,” “us,” or “our”) is committed to protecting your personal information. This Privacy Policy explains what information we collect, how we use it, and what rights you have when you use our AI-powered sales automation and workflow platform (the “Services”). It applies to information collected through our website, applications, and APIs. By using the Services, you agree to the practices described here. If you do not agree, please do not use the Services.
We collect information you provide, information we get from your use of the Services, and information from third-party integrations you connect.
Account and profile
When you register or use the Services, we collect your name, email address, and (where applicable) authentication provider identifiers. Account creation and sign-in are handled by our identity provider, Clerk; their privacy policy applies to data they collect for authentication. We may also collect payment-related information through our payment processor, Stripe; we do not store full payment card details on our servers.
Usage and product data
We collect information about how you use the Services, including workflow sessions, canvas and session state, workflow execution history, batch runs (e.g. CSV uploads and row-level inputs/outputs), and usage metrics (e.g. workflows run, enrichments, API calls, storage). We use this to operate the product, enforce plan limits, and improve the Services.
Integrations and OAuth
When you connect third-party accounts (e.g. email, CRM, calendars, productivity tools), we receive and store access and refresh tokens and related metadata necessary to perform actions on your behalf. We may use encryption or other safeguards for sensitive credential data. Data exchanged with those platforms is governed by their respective privacy policies.
Content you upload or process
We process data you upload or provide through the Services, such as lead/contact data, files (e.g. preference files or context documents), and content used in workflows. We use this data only to provide the Services (e.g. running workflows, enrichments, and AI-assisted features) and as described in this policy.
Logs and support
We collect login history (e.g. IP address, device, user agent), audit logs of actions on the platform, and communications you send to support. We use these for security, troubleshooting, and compliance.
We use the information we collect to: provide, maintain, and improve the Services; authenticate you and manage your account; run workflows, batch jobs, and integrations; store session and execution data; enforce usage limits and security; send service-related and administrative communications; respond to your requests and support needs; and comply with legal obligations. We may use anonymized or aggregated data for analytics and product improvement. Where we use AI or machine learning to improve workflow generation or product features, we do so in accordance with our internal policies and, where applicable, with privacy-preserving techniques (e.g. anonymization) for sensitive data sent to AI providers. We do not use your personal data to train general-purpose AI models for use outside the Services without your consent or as permitted by law.
We do not sell your personal information. We may share your information: (1) with service providers that help us operate the Services, under contracts that limit their use to providing services to us; (2) if required by law or to protect rights, safety, or property; (3) in connection with a merger, sale, or restructuring of our business, with notice where required; and (4) with your consent or at your direction (e.g. when you connect a third-party integration). We may make anonymized or aggregated data available where it cannot reasonably be used to identify you.
Service providers we use
We use the following types of service providers to run the Services. Each processes data on our behalf under agreements that restrict how they may use your information: Supabase (database and backend data storage), Clerk (account creation and authentication), Stripe (payment processing; we do not store full payment card details), and Amazon Web Services (AWS) (file and object storage, where applicable). You can find their privacy policies on their respective websites. We may add or change providers from time to time; we will update this policy or provide a subprocessor list where required by law.
The Services support sign-in and connections to third-party platforms (e.g. email, CRM, calendars). When you connect an account, we receive profile and access data as allowed by that provider. We use this only to provide the integration features you request. We do not control how those third parties collect or use your data; please review their privacy policies. You can revoke connections at any time via our product or the third party’s settings. Some platforms also let you request that we delete data we hold for your connection when you remove our app in their settings; we honor those requests and provide a confirmation link for the status of your deletion request.
We retain your information for as long as your account is active or as needed to provide the Services and fulfill the purposes described in this policy. We may retain certain data after account closure for legal, security, or backup purposes (e.g. audit logs, transaction records). When we no longer need personal data, we delete or anonymize it where feasible. Retention may also be subject to applicable law or your plan terms.
We use technical and organizational measures to protect your personal information, including where applicable encryption, access controls, and secure handling of credentials. No method of transmission or storage is completely secure; we cannot guarantee absolute security. You are responsible for safeguarding your account credentials and for the security of data you upload or process through the Services.
The Services are not directed to individuals under 18. We do not knowingly collect personal information from children under 18. If you believe we have collected such information, please contact us and we will take steps to delete it.
Depending on your location, you may have the right to:
You can update account information and manage integrations through the product. For other requests, contact us using the details below. We will respond in accordance with applicable law. Verification of your identity may be required.
Data deletion via a connected platform (e.g. social or login provider): If you connected a third-party platform and want us to delete the data we hold for that connection, you can remove our app and request data deletion in that platform’s settings (e.g. “Apps and Websites” → remove our app → “Send Request” or equivalent). We process those requests via our data deletion callback, initiate deletion of the data we hold for that connection, and provide a confirmation link where you can see that your request was received.
Your information may be processed in countries where we or our service providers operate. Where we transfer data from the European Economic Area, UK, or Switzerland to countries not deemed to provide adequate protection, we use appropriate safeguards (e.g. Standard Contractual Clauses or other approved mechanisms). For EEA/UK/Swiss users, we process personal data as described in this policy; where we act as a processor on your behalf, we do so in accordance with our data processing terms. You may request a Data Processing Agreement or further details by contacting us.
If you are a California resident, you may have additional rights under the CCPA/CPRA, including the right to know what personal information we collect and how it is used and shared, the right to delete personal information, the right to correct inaccurate information, and the right to opt out of “sale” or “sharing” of personal information. We do not sell or share personal information for cross-context behavioral advertising as defined under the CCPA. To exercise these rights, contact us. We will not discriminate against you for exercising your privacy rights.
We may update this Privacy Policy from time to time. We will post the updated version on this page and update the “Last updated” date. For material changes, we may notify you by email or through the Services where required by law. Your continued use of the Services after the effective date constitutes acceptance of the updated policy.
For questions about this Privacy Policy, to exercise your rights, or to request access, correction, or deletion of your data, contact us through the contact information provided on our platform or in your account. You can also request to export or delete your data via your account settings or by contacting support.