Privacy Policy

We collect the following categories of information:

• Account information: Your name and email address, collected and managed by Clerk (our authentication provider) when you create an account.
• Venture data: Business ideas, session notes, proposals, decisions, and other content you enter into the platform.
• Session data: Records of AI council sessions, including model outputs, scores, and structured proposals.
• Usage data: Analytics about how you use the platform (pages visited, features used, session frequency), collected via PostHog only if you have consented to analytics cookies.
• Billing information: Payment method details handled directly by Stripe. We do not store full card numbers.

We use your information to:

• Provide, operate, and improve the Service.
• Run AI council sessions by transmitting your venture data to AI providers.
• Process payments and manage your subscription.
• Send you service-related communications (account notices, billing receipts).
• Analyze usage patterns to improve features (only with analytics consent).
• Comply with legal obligations.

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

The core function of the Service requires sending your venture data to five AI providers for analysis:

• Anthropic (Claude Opus 4.7) — anthropic.com
• OpenAI (GPT-5.5) — openai.com
• Google (Gemini 3.1 Pro) — google.com
• xAI (Grok 4.3) — x.ai
• Moonshot AI (Kimi K2.6) — moonshot.ai

We transmit only the data necessary for each session. We engage these providers under terms that prohibit them from using your data to train their models. However, each provider operates independently and you should review their respective privacy policies. Do not submit data that you are not authorized to share with third-party AI systems.

• Convex: Your venture data and session records are stored in Convex, our backend database. Data is encrypted at rest and in transit.
• Clerk: Account authentication data (email, name, passwords) is managed by Clerk, which maintains its own security certifications.
• Stripe: Billing and payment data is handled by Stripe. We store only a Stripe customer ID on our end.

We implement reasonable technical and organizational measures to protect your data. No system is completely secure, and we cannot guarantee absolute security.

• Active accounts: Your data is retained for as long as your account is active.
• Account deletion: When you delete your account, your personal data and venture data are permanently purged within 30 days.
• Billing records: Financial transaction records may be retained longer where required by law.

Depending on your location, you may have rights under GDPR, CCPA, or other applicable privacy laws, including:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your account and associated data.
• Export: Request an export of your venture data in a portable format.
• Opt-out: Opt out of analytics data collection via cookie preferences.

To exercise any of these rights, contact us at support@venturecortex.com. We will respond within 30 days.

We use cookies for authentication and, with your consent, for analytics. For full details, see our Cookie Policy.

The Service is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notice. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

For privacy-related questions or requests, contact us at support@venturecortex.com.