Privacy Policy

Venturerize ("we", "us"), based in Bengaluru, Karnataka, India, designs and builds websites, AI agents and automations for businesses. For the personal data described here we are the "data fiduciary" (India) and the "controller" (EU/UK GDPR).

Contact for anything about your data, including complaints: the Director and Chief Technology Officer of Venturerize (Grievance Officer and data protection contact), talkto@venturerize.com, +91 63646 09168.

We only collect what we need for a stated purpose:

• Enquiries (contact form, WhatsApp, email, the AI assistant): your name, a way to reach you, your business name, budget, timeline, message and any code you enter. Purpose: to answer you and prepare a quote.
• Accounts (free sign-up for referrals, offers and Design Lab): name, email, a securely hashed password (we can't see it), your referral code, the people you referred, credits, claimed offers and saved designs. Purpose: to run your account, referrals and credits.
• Client Portal (clients): project files, messages, invoices, payments and credit use. Purpose: to deliver the project and keep the accounts the law requires.
• Design Lab "send to us": the design you built, your name and contact, only when you press send.
• Free tools: the speed check sends the web address you enter to Google PageSpeed Insights (not stored); the AI demo sends your business description to Google Gemini and keeps a one-way scrambled version of your IP address for 24 hours to limit misuse; the missed-call calculator never leaves your device.
• AI assistant and voice demo: what you type goes to Google Gemini, what you say on a demo call is processed by Vapi, so they can reply. The chat stays in your browser for 15 minutes. If you share your name and number in it, we save them as an enquiry.
• Technical data: server logs (IP address, browser, pages, time) for security and to stop abuse; error reports to fix bugs; cookieless, aggregated visit statistics; an anonymous random ID in your browser to tell new and returning visitors apart; your approximate country (from your IP address) to show prices in your currency.
• Advertising measurement, only if you press "Accept" in the cookie banner: the Meta Pixel (see section 7).

We don't collect card, UPI or bank details on this site, and we don't ask for sensitive data (health, finances, biometrics, government IDs).

India (DPDP Act): your consent, given when you send a form, create an account or press "Accept", and the "legitimate uses" the Act allows, such as using data you chose to give us for the purpose you gave it, and meeting legal duties.

EU/UK (GDPR): steps you asked for before a contract and the contract itself (enquiries, accounts, projects); our legitimate interests in security, fixing errors and simple statistics; consent for advertising cookies; and legal obligations (tax and accounting records).

You can withdraw consent at any time, as easily as you gave it (section 9). It doesn't affect what was done before.

We don't sell or rent personal data, we don't "share" it for cross-site advertising without your consent, we don't make automated decisions that legally affect you, and we don't use your data to train AI models.

Our services are for businesses and adults. You must be 18 or older to make an account or send an enquiry. We don't knowingly process data of anyone under 18; if we learn we have, we delete it. Parents can contact us to have it removed.

Only these providers, and only to provide their service to us (they may not use it for their own purposes):

• Vercel (hosting, cookieless statistics; USA/global)
• Neon (database; Singapore region)
• Resend (emails to you; USA)
• Upstash (rate limiting; global)
• Cloudflare Turnstile (spam check on forms; global)
• Sentry (error reports; USA/EU)
• Google (PageSpeed Insights, Gemini for the AI demo and assistant; global)
• Vapi (voice demo calls; USA)
• Meta (WhatsApp messages you send us; the Meta Pixel only with your consent; global)
• Hostinger (the server behind our WhatsApp assistant)

We may also share data when the law requires it (for example a court or government order), or to protect our rights in a dispute. If we start taking payments online, the payment provider will receive what it needs for the payment.

Essential cookies keep you signed in and stop spam. Only if you press "Accept" do we load the Meta Pixel, which tells Meta (Facebook/Instagram) that someone who saw our ads visited, tapped WhatsApp or sent an enquiry, so we can measure the ads. It never sees what you type into forms. "Only essential" means it never loads. Full list: Cookie Policy.

We work from India and our providers store data in India and other countries (section 6). When data leaves the EU/UK, we rely on the providers' Standard Contractual Clauses or equivalent safeguards. Transfers out of India follow the DPDP Act and any restrictions the Indian government notifies.

• Enquiries that don't become projects: up to 2 years, then deleted.
• Accounts, referrals, credits and offers: while your account exists; deleted within 30 days of closing it (unused credits and offers lapse).
• Client projects: for the project and 3 years after; invoices and payment records for 8 years (Indian tax and accounting law).
• Security logs: up to 1 year (Indian cyber-security directions require at least 180 days).
• AI demo IP fingerprint: 24 hours. Assistant chat in your browser: 15 minutes.

Wherever you live, you can ask us to:

• tell you what data we have about you and who we shared it with;
• correct, complete or update it;
• delete it (except what the law makes us keep, such as invoices);
• withdraw consent (for cookies: the "Cookie settings" link at the bottom of every page);
• (EU/UK) restrict or object to processing, and receive your data in a portable format;
• (India) nominate a person to use these rights for you if you die or can't act.

Email talkto@venturerize.com with the subject "Privacy request" from the address you used with us. We acknowledge within 48 hours and answer within 30 days (the GDPR's one-month limit; India allows up to 90 days, we aim for faster). We may ask you to confirm who you are first. Requests are free.

Please tell us first: the Director and Chief Technology Officer of Venturerize (Grievance Officer and data protection contact), talkto@venturerize.com. If you're not satisfied, you can complain to the Data Protection Board of India, to your local data protection authority in the EU, to the UK Information Commissioner's Office, or to the regulator in your country.

We use encrypted connections (HTTPS), hashed passwords, access limited to the people who need it, rate limiting and spam checks, and providers with recognised security standards. No system is perfectly secure. If a breach affects your data, we tell you and the authorities as the law requires (in India, the Data Protection Board within 72 hours, and CERT-In within 6 hours for reportable cyber incidents).

USA: we don't sell personal information or share it for cross-context behavioural advertising without consent; you can ask to know, correct or delete your data as above. We treat a Global Privacy Control signal as an "Only essential" choice. Canada, Australia, UAE and elsewhere: the same rights and contact apply; where your local privacy law gives you more protection, we follow it.

We update this policy when our service or the law changes, and change the date at the top. If a change affects how we use data you already gave us, we tell you (by email or on your account) before it applies, and ask again where consent is needed.