This Privacy Policy explains how Venzato ("Venzato", "we") processes the personal data of our business-owner users ("you", "User") through the Venzato mobile application and the venzato.com website (the "Service"). Venzato is the data controller for the personal data of its Users.
• Account and identity data: name, email address, phone number (optional), profile information.
• Payment and subscription data: subscription plan, payment status, billing information (card data is processed by the payment institution; Venzato does not store card numbers).
• Usage and technical data: device model, operating system, IP address, in-app interactions, error/log records, cookies.
• Content data: the app/site projects you create, your AI prompts and the generated content.
• Voice data: while a voice session with the design assistant is open, the audio from your microphone is streamed to our voice AI provider in real time so that the provider can respond. We do not store that audio or any recording of it. Your speech is converted to text; that text appears in your chat and is then handled exactly like the prompts you type (see Content data above). We also keep session records such as duration, credits charged, why the session ended, the language and model used, and the provider's session identifiers, for billing and usage limits; these records contain no part of the conversation.
To provide the Service and perform our contract with you; to manage your account; subscription/payment operations; to run the AI-assisted app/site creation features; security, fraud prevention and debugging; legal obligations; and, with your consent, marketing communications and product improvement.
Where the EU/UK GDPR or similar laws apply: performance of a contract; compliance with legal obligations; legitimate interests; and, where required, your consent (e.g. marketing messages, non-essential cookies). California residents may have additional rights under the CCPA/CPRA.
Venzato uses third-party artificial intelligence (LLM) providers, cloud hosting, CDN, analytics and payment providers to generate apps/sites and run the Service. Data shared with these providers is processed only to provide the Service and under contractual safeguards. Your AI prompts may be processed to produce model output. The voice assistant runs on a separate real-time AI provider. While a session is open, your speech is transmitted to that provider and processed there to produce the spoken reply; so that it can carry on where you left off, we also send it the current state of your project and the most recent lines of your chat. We do not store your audio, but any retention on that provider's side is governed by the provider's own terms. We also use Cloudflare Turnstile to protect sign-up and sign-in against automated abuse. The check runs invisibly, so you are never shown a puzzle; while it runs, Cloudflare processes your IP address together with browser and device signals, as described in Cloudflare's Turnstile Privacy Addendum: https://www.cloudflare.com/turnstile-privacy-policy/
Some of the providers we use may be located in other countries. Such transfers are made with appropriate safeguards, such as adequacy decisions or standard contractual clauses (SCCs), where required by applicable law.
Your personal data is kept while your account is active and for the periods required by law; when the purpose no longer exists it is deleted, destroyed or anonymised. Invoice/payment records are kept for the periods required by applicable tax/commercial law. Aggregate usage totals — monthly counts of how much AI capacity your account used, per feature and containing no content — are kept as accounting records for as long as your account exists.
Our website may use essential, functional and, with your consent, analytics/marketing cookies. You can still access the site if you refuse non-essential cookies.
We apply appropriate technical and organisational measures, including access control, encryption, logging and regular security testing. No system is 100% secure, but we are committed to minimising the risks.
You have the right to access, correct and delete your data, to object to processing, to request information about transfers and to request compensation for damages where the law provides for it. If you are in the EEA or the UK you also have the GDPR rights, including complaining to a supervisory authority. Requests: info@venzato.com. We respond within the time required by applicable law (e.g. 30 days).
The Service is not directed to persons under 18.
This Policy may be updated; we will notify you of material changes in the app or by email.
Venzato, info@venzato.com, venzato.com.