Privacy Policy

This policy explains what VenTech, LLC (“VenTech,” “we,” “us”) does with personal information. It covers three things: our website at ventechdigital.com, our consulting engagements, and VenTech Terminal — our desktop application and the hosted memory platform it connects to.

We have written it to be read. Where a design choice means we never receive something, we say so plainly, because that is more useful to you than a promise about how carefully we would have handled it.

1. Information We Collect Through the Website

• Contact form data — name, email address, company name, and whatever you include in your message.
• Email list data — your email address, the consent text and version, the time you confirm, and an opt-out record if you leave. We use Resend to send a confirmation and manage the VenTech email list. You join only after explicitly confirming by email. Use the unsubscribe link in any list email, or email eli@ventechdigital.com to withdraw consent or request access or deletion. An opt-out record prevents an old confirmation link from adding you again.
• AI chat conversations — messages you send through the chat widget on our website. These may be logged and used to improve our responses. This is the website widget only; it is not Terminal.
• Analytics data — pages visited, time on site, referral source, browser and device type, collected through cookies and similar technologies. Analytics and advertising cookies (PostHog and Google Ads) load only after you accept cookies in our consent banner. See our Cookie Policy.
• Connected social accounts — if you connect a third-party platform such as TikTok through our tools, we receive an authorization token (never your password), scoped only to publish content to that account and read basic profile information such as display name and avatar. These tokens are stored locally on the operator's own device, are used solely to upload content you choose to publish, and are never sold or shared. You can revoke access at any time from your TikTok account settings.

2. Information We Collect When You Subscribe to VenTech Terminal

Billing information. Payments are processed by Stripe. Your card number is handled by Stripe and does not reach VenTech's systems. From Stripe we receive the company name and administrator email you enter at checkout, the billing email address, the plan and number of Seats, and the status and history of the subscription.

License and activation. We record which license key is active on which installation, so that Seats work and so that a Seat can be moved between machines. License keys are stored only as hashes — we can check that a key you present is valid, but we cannot read your key back out of our database.

Support email. If you email us, we keep the correspondence so we can help you and so there is a record of what was agreed.

3. What Stays on Your Own Computer

Terminal is a desktop application, and a lot of what it holds never leaves your machine. This includes:

• your agent threads and conversation history
• your settings and preferences
• data an agent pulls from a connected service while it works on something

We do not hold a copy of any of it. If you uninstall Terminal or wipe the machine, it is gone, and we cannot restore it for you.

4. The Memory Graph

The memory graph is the part of Terminal we host. It exists so that what one agent learns is available to the others instead of being re-explained every time.

What is stored. Memories your agents write — facts, context, and summaries drawn from the work they do — along with which organization and which person they belong to, which agent recorded them, when, and the permission records that decide who may read them. Because memories come from your work, they can contain personal information about your people and about the people you deal with. What ends up in there is determined by what your agents do.

Where it is stored. On Fly.io, in the United States, in the region Fly identifies as iad (Ashburn, Virginia). Data travels over TLS and is stored in a managed database on that infrastructure. There is no other location. We do not replicate it elsewhere.

Who can read it. Each customer organization's data is isolated from every other customer's, and the isolation is enforced in the database rather than in application code or in a prompt. Inside your organization, per-person permissions decide what each person and each agent can read: content someone is not permitted to see is not returned by the query, so it never reaches a model at all.

What VenTech staff can see. We can access the production database, because somebody has to be able to operate and repair the service. We use that access to keep the platform running and to investigate faults you report to us. We do not read your memory graph routinely, we do not use it to train AI models, and we do not use it for anything other than providing the service to you.

5. Your AI Provider: What We Never See

Terminal runs on the AI provider subscription you already pay for — your own Anthropic or OpenAI account, for example.

Your prompts, your agents' reasoning, and the content your agents are working on go from your computer to that provider, under your own agreement with them. They do not pass through VenTech. We do not receive them, log them, or store them.

This is deliberate. In an agent system the prompt is usually the most sensitive thing in the pipeline, and the simplest way for us to protect it is not to be in the pipeline. It also means your provider's privacy policy governs that content, including how long they keep it. If that matters to you, read theirs, because on this point ours does not apply.

6. Connected Accounts

Terminal reaches Gmail, Google Calendar, Slack, Notion, and hundreds of other services through Composio, using your own Composio project.

The OAuth credentials for those accounts live in your Composio project, not in VenTech's. We are not the party holding a token that can read your inbox. You can revoke a connection at any time from your Composio project or from the service itself, and doing so cuts Terminal's access immediately.

Each connected service has its own privacy policy, which governs the data held inside that service. We do not control what they do with it.

7. Crash Reports

When Terminal crashes it sends us a crash report. A crash report contains these fields and nothing else:

• the error type
• a redacted message template — the shape of the error message, with the values taken out
• the file names of the frames in the stack trace
• the app version
• the operating system
• a random installation identifier

There is no free-text field anywhere in a crash report. That is the point of the design. Because there is nowhere for arbitrary text to go, the content of your messages, your documents, your file contents, and your prompts cannot be transmitted in a crash report — not deliberately, and not by accident. File paths and personal identifiers are redacted before the report is sent.

The installation identifier is a UUID generated at random when Terminal is installed. It is not a hardware serial number, a MAC address, a hostname, or a username. It exists so we can tell whether one machine crashed fifty times or fifty machines crashed once. It is not linked to your name.

8. How We Use Information

• To provide VenTech Terminal and the memory platform
• To issue licenses, run subscriptions, take payment, and send receipts
• To answer your enquiries and provide support
• To diagnose crashes and fix faults
• To keep the service secure and to investigate misuse or abuse
• To send service and project-related email — we do not send marketing email unless you opt in
• To understand how the website is used, where you have accepted analytics cookies
• To meet our legal and tax obligations

We do not use your data to train AI models. We do not build advertising profiles of you ourselves, and we do not make decisions about you by automated means that have legal or similarly significant effects. Where you have accepted advertising cookies, Google receives measurement data about your visit under its own terms — that is the “sharing” described in section 15, and you can stop it at any time from Do Not Sell or Share My Personal Information.

9. Who We Share Information With

We use four sub-processors. This is the complete list:

• Stripe — payments, subscriptions, and invoicing. Stripe holds your payment details.
• Resend — transactional email, such as license keys, download links, and account notices.
• Fly.io — hosting and the database for the memory platform, in the United States.
• Composio — the connector infrastructure Terminal uses to reach your connected accounts, running under your own Composio project.

Beyond those, we share personal information only where the law requires it — a valid legal process, or where we must to protect someone's safety — or if the business is sold or merged, in which case this policy continues to apply to the information transferred until you are told otherwise.

We will keep this list current. If we add a sub-processor, it will appear here.

10. Where Your Data Is Stored, and International Transfers

VenTech is a US company. The hosted memory platform runs on Fly.io in the United States (region iad). We do not operate an EU or UK region. If you are outside the United States, using the hosted platform means your data is transferred to and stored in the United States.

If you are subject to UK or EU data protection law and need standard contractual clauses or a data processing addendum in place before you rely on the platform, email eli@ventechdigital.com and we will agree one with you in writing first. We would rather tell you that we do not yet publish a standard DPA than have you rely on a mechanism that is not actually in place.

11. How Long We Keep Things

• Memory graph — for as long as your subscription is active. When a subscription ends we keep it for 30 days, so you can ask for an export or come back without losing your context, and then delete it. Ask us sooner and we will delete it sooner.
• Account and license records — for the life of the account and for a reasonable period afterwards.
• Billing and tax records — for as long as tax and accounting law requires us to keep them. These we cannot delete on request.
• Crash reports — up to 12 months, then deleted.
• Contact form submissions, support email, and website chat conversations — for the duration of any business relationship and a reasonable period afterwards.

12. Deletion and Export

Email eli@ventechdigital.com and tell us what you want: an export of your memory graph, deletion of it, or deletion of your account records. We will confirm your identity and your authority over the account, then act on it within 30 days — usually much sooner. There is no charge.

Data held on your own computers is yours to delete: uninstall Terminal, or remove its data directory. We cannot do that for you and we have no copy of it.

13. Security, and What We Do Not Claim

Data travels over TLS. The hosted platform runs on Fly.io's managed infrastructure with a managed database. Access to production is limited to VenTech staff who need it to operate the service. License keys are stored as hashes, not in plain text. Customer isolation is enforced in the database rather than in application logic.

What we do not claim: we hold no SOC 2 report, no ISO 27001 certificate, and no other security certification, and we have no published penetration test or audit to point you to. We are a small company. We would rather say that than imply an assurance we have not earned. If you need one of those before you can buy, tell us and we will give you a straight answer about where we are.

No system is perfectly secure. If you think you have found a vulnerability, email eli@ventechdigital.com and we will respond.

14. If You Are in the UK or the European Economic Area (GDPR)

Our role. For our website, our marketing, and our own billing and account records, VenTech is the controller. For the content your agents write into your memory graph, you are the controller and VenTech acts as a processor on your instructions.

Legal bases we rely on:

• Contract — to provide Terminal, issue licenses, take payment, and support you
• Legitimate interests — to keep the service secure, to fix crashes, to prevent abuse, and to respond to business enquiries
• Consent — for analytics and advertising cookies, and for marketing email; you can withdraw it at any time
• Legal obligation — for tax and accounting records

Your rights. You have the right to access your personal data, to have it corrected, to have it erased, to restrict or object to how we process it, to receive it in a portable format, and to withdraw consent you have given. You also have the right to complain to your supervisory authority — in the UK, the Information Commissioner's Office.

To exercise any of these, email eli@ventechdigital.com. We respond within 30 days. If your request concerns data we hold on a customer's behalf as a processor, we will pass it to that customer and tell you we have done so.

15. If You Are in California (CCPA/CPRA)

In the twelve months before the date at the top of this page, we have collected these categories of personal information: identifiers (name, email address, company); commercial information (subscription and payment records); internet and device activity (website analytics, where cookies were accepted); and, in the memory graph, whatever your agents write there on your behalf. We collect it from you, from your use of our website and Terminal, and from Stripe.

We do not sell personal information, and we have never sold it. California also treats some advertising cookies as “sharing” for cross-context behavioral advertising. Our website uses Google Ads and PostHog, and those load only if you accept cookies in the banner; decline, and they do not run. VenTech Terminal itself contains no advertising trackers.

How to opt out of sharing. Go to Do Not Sell or Share My Personal Information, which is also linked in the footer of every page on this site. It is a single control: one click stops the advertising and analytics tags and deletes the advertising cookies already set in that browser. You do not need an account, and we do not ask for your name or email address to honor it. You can also email us at the address below, or decline in the cookie banner.

Opt-out preference signals. We process opt-out preference signals, including Global Privacy Control (GPC), in a frictionless manner. If your browser or a browser extension sends one, we treat it as a request to opt out of sharing, apply it automatically without charging you anything or degrading the site, and do not show you the cookie banner. To send one, use a browser that supports GPC or install an extension that does; instructions are at globalprivacycontrol.org. Because we have no accounts on this website, a signal applies to the browser that sends it.

Why there is no separate “limit sensitive information” link. That link is required only where a business uses sensitive personal information beyond the purposes the regulations already permit — providing the service you asked for, security, fraud prevention and the like. We do not, so there is nothing for such a link to limit. If that ever changes, the link goes up before the use starts.

Sensitive personal information. We do not ask for it and we do not use it to infer characteristics about you. Content your agents write into the memory graph could contain it, but in that case we hold it on your behalf as a service provider and use it only to provide the service.

Your rights. You can ask us to tell you what personal information we have collected about you and why, to delete it, or to correct it. You can opt out of sale or sharing using the link described above. You can limit the use of sensitive personal information. We will not discriminate against you for exercising any of these rights: no price change, no reduced service.

Opting out of sharing needs no email — use the opt-out page. For everything else, make a request by emailing eli@ventechdigital.com. We will verify who you are before we act, so that we are not handing your data to someone else. An authorized agent may make a request on your behalf with written proof of authority.

16. Children

VenTech Terminal and our website are for business use by adults. The service is not directed at anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, email eli@ventechdigital.com and we will delete it.

17. Changes to This Policy

We may update this policy. Changes are posted on this page with a new “last updated” date. If a change materially affects how we handle data for an active subscription, we will tell subscribers by email before it takes effect.

18. Contact Us

Privacy questions and requests go to eli@ventechdigital.com. Related documents: the EULA, the Refund and Return Policy, the Cookie Policy, and Do Not Sell or Share My Personal Information.