Privacy policy

Information you provide

Our contact and strategy-call forms collect the fields you submit, such as your name, email address, service interests, website, business goals, project stage, and message. We also receive information you send by email and project materials you provide during an engagement.

We use this information to respond, assess your request, prepare proposals, communicate about your project, and deliver agreed services. Please do not include account passwords, payment card numbers, government identifiers, or sensitive personal records in an inquiry. If a project needs sensitive information, contact us to arrange an appropriate method of sharing it.

Client accounts and private workspaces

Portal accounts associate a username with an authorized client workspace. Authentication uses a salted password hash and a signed session cookie. The workspace may contain client names, business contact details, proposals, scope, pricing, project notes, and creative materials. We use these records to provide access and collaborate on the relevant engagement.

The portal uses a cookie named venust_portal to keep you signed in for up to eight hours. Signing out removes it from your browser. Removing this cookie ends access in that browser; it does not delete project records. Account removal or credential changes may be needed to revoke other sessions. Contact team@venust.ai if access should be withdrawn or you suspect an account has been misused.

Technical information and security

When you visit, our hosting and service providers process connection information such as IP addresses, requested URLs, browser details, and request timing to deliver and protect their services. Our login endpoint also uses an IP address and temporary attempt counts to limit repeated sign-in attempts.

We use safeguards including HTTPS, server-side authorization, restricted access to client materials, and private-response cache controls. No website, account, or transmission method is completely secure. Only share information appropriate to the project and report suspected security issues to team@venust.ai.

Analytics, cookies, and display preferences

The public website loads Google Analytics to measure visits and page interactions. Google Analytics can process cookie identifiers, browser and device details, and information about pages viewed and interactions. It is currently loaded on public pages without an on-site consent selector. This policy is a disclosure, not a substitute for consent where consent is required.

Google Analytics is excluded from portal routes and its analytics property is disabled when navigating into the portal. Separately, our own proposal activity measurement records authenticated proposal visits, sections visible on screen, scroll depth, selected button and link clicks, and estimated active time. We use this information to understand proposal engagement and prepare relevant follow-up. A random visit identifier lasts for that page visit; we do not use it to identify a person across websites. Shared client accounts do not identify which team member viewed a proposal.

Proposal activity is stored privately with Supabase and is accessible to authorized VenustAI administrators. We do not collect session recordings, keystrokes, form contents, IP addresses, full browser identifiers, or referral URLs in these activity records. We retain these records for up to 90 days and honor browser Do Not Track and Global Privacy Control signals for this measurement. Hosting security logs are separate, as described above.

The light/dark setting is saved separately in your browser’s local storage under theme, including when you use the portal. That preference remains until you change it or clear the storage.

You can manage cookies and local storage through your browser, block analytics scripts, or use Google’s Analytics opt-out browser add-on where supported. Blocking the session cookie prevents portal sign-in from working. Clearing a display preference resets the theme; it does not remove information already sent to us or a provider.

Service providers and international processing

FormSubmit receives website inquiry submissions and forwards them to team@venust.ai. Cloudflare provides website hosting and delivery, Google provides public-site analytics, Supabase stores our private sales-workspace and proposal activity records, and email providers process correspondence. These providers process information as part of delivering their services and have their own privacy terms.

Information may be processed in Canada, the United States, or other countries where a provider operates, and may be accessible to courts, law enforcement, or other authorities under the laws of those countries. We do not promise Canada-only storage. Contact us before providing information that must remain in a specific location.

We may disclose relevant information when required by law, to respond to lawful requests, or as reasonably necessary to investigate misuse and protect legal rights. Links to external websites lead to services governed by their own policies.

Client materials and AI-assisted services

Some engagements involve third-party advertising platforms, software services, or AI tools for tasks such as creative production, development, and automation. The tools used and the information they need depend on the agreed project. Project-specific instructions and agreements govern the handling of client data within those services.

Do not assume that every tool has the same retention, training, or storage-location settings. Tell us about confidentiality, personal-data, or provider restrictions before supplying materials so we can agree on suitable handling. Submitting an inquiry does not grant permission to publish your private project information as a case study.

Retention and deletion

We retain inquiry and project information for the purposes described here, including responding to requests, managing engagements, and meeting applicable recordkeeping or legal requirements. The necessary period varies with the relationship and type of record; this website does not apply one automatic deletion deadline to every record.

You may ask us to delete information we hold about you. We will assess the request and explain any information that must be retained, for example for an active engagement, a dispute, or a legal obligation. Browser storage, provider records, and backup copies can have separate retention or deletion processes.

Your choices and privacy requests

Email team@venust.ai to ask about our handling of your information, request access or correction, request deletion, or withdraw consent where processing relies on consent. Identify the email address or engagement involved, but do not send a password. We may verify your identity and authority before releasing information or changing access.

We will handle requests within the periods required by applicable law and explain relevant exceptions or service impacts. Your available rights depend on the applicable jurisdiction; this policy does not limit them. You may also contact the Office of the Privacy Commissioner of Canada or another privacy authority with jurisdiction over your concern.

Changes and contact

We will update this page when our practices change and revise the date above. Where a change requires notice or fresh consent under applicable law, updating this page alone does not replace that requirement. Privacy questions can be directed to the VenustAI team at team@venust.ai.