Privacy Policy
This policy explains what data Ventra collects, why we collect it, and the rights you have over it. We've kept it in plain English because a privacy policy nobody can read protects nobody.
1. Who we are
Ventra Technologies Ltd ("Ventra", "we", "us") is a company registered in England and Wales, company number 15224910, with a registered office at 1 Redchurch Street, London E2 7DJ. We are the data controller for account data and the data processor for the event, guest and financial data our customers store in Ventra.
2. What we collect
We collect three categories of data:
- Account data. Name, work email, organisation, role, authentication credentials, and workspace preferences.
- Product data. Everything you or your team creates inside Ventra — events, tasks, guests, suppliers, documents, messages, invoices, analytics.
- Telemetry. Anonymised usage logs (page views, feature engagement, error traces) used to keep the product fast and reliable. We do not sell this data. Ever.
3. Why we collect it
- To provide the Ventra service to you and your organisation.
- To respond to support requests and improve the product.
- To comply with legal obligations (tax, audit, security).
- To keep the product secure — detecting fraud, abuse, and account compromise.
4. Where we store it
Ventra runs on AWS in the London (eu-west-2) and Frankfurt (eu-central-1) regions. Backups are geo-redundant within the EU/UK. Customer data does not leave the UK/EU unless you explicitly enable a region outside that boundary in your organisation settings.
5. Who else touches your data
We use a small, deliberately short list of processors: AWS (hosting), Stripe (billing), Postmark (transactional email), OpenAI (AI features, with our zero-retention arrangement), and Sentry (error monitoring). Every processor has a DPA in place with us. The full list, updated when it changes, is available on request from privacy@theventra.co.
6. Your rights
Under UK and EU GDPR you can:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data ("right to be forgotten").
- Request a portable export of your data.
- Object to specific processing.
- Withdraw consent for marketing at any time.
Email privacy@theventra.co. We respond within 14 days.
7. Retention
Live customer data is retained while your account is active. On termination, all customer data is deleted within 60 days unless you specifically request a longer export window. Anonymised aggregate telemetry may be retained indefinitely.
8. Contact
Our Data Protection Officer can be reached at privacy@theventra.co. You have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK, or your national supervisory authority in the EU.