Ventress Privacy Policy

1. Introduction

Welcome to Ventress ("we," "us," or "our"). Our service provides a Software-as-a-Service (SaaS) platform (the "Service") that acts as a YouTube co-pilot, using a variety of advanced artificial intelligence models from different providers to help you generate YouTube scripts, titles, descriptions, tags, and other content based on analysis of popular trends and data in similar categories.

This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our Service, and describes your rights related to your data. We are committed to complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Policy Updates and Your Agreement: This Privacy Policy may be updated from time to time. We will notify you of any material changes via email or a prominent notice within our Service. By continuing to use the Service after such notification, you acknowledge and agree to the updated terms.

2. Data Controller

The data controller responsible for your personal data is:

Ventress
Bucharest, Romania
Email: contact@endspec.net

3. Information We Collect

We collect the following types of information to provide and improve our Service:

Account and Contact Information:

When you register for an account, we collect:

Name
Email Address
Username
Password (stored in a secure, hashed format)
Billing Information (if you subscribe to a paid plan): This is processed securely by our third-party payment processor (see Section 5). We do not store your full credit card details.

Email Communications: By registering for an account, you agree to receive emails from us regarding the Ventress Service, including product updates, announcements, and our blog/newsletter. You can opt-out of marketing communications at any time by clicking the "unsubscribe" link in the footer of any email.

Usage and AI Model Data:

We automatically collect information about how you interact with the Service. This includes:

Your text-based inputs and prompts provided to the AI models.
The full text of content generated by the AI, such as scripts, titles, and descriptions, which you may save or discard.
Information on the types of AI models you use and the features you engage with.
Interaction metadata, such as timestamps, frequency of use, and session duration.
Your IP address and device information (e.g., browser type, operating system).

YouTube Data:

When you connect your YouTube channel to our Service (which requires read-only permissions), we access data via the YouTube API Service to provide our features. This includes:

Public channel data and metadata.
Analytics and performance metrics (e.g., views, likes, comments, subscriber counts).

Strict Limitations on YouTube Data Use: Your YouTube data is used exclusively to provide and improve the Service's features for you. We DO NOT use your YouTube data for third-party advertising, sell it to data brokers, use it for credit-worthiness or lending purposes, or transfer it to any advertising platforms.

Our use of information received from YouTube APIs adheres to the YouTube API Services Terms of Service.

Analytics Data & Cookies:

We use Google Analytics and cookies to understand Service usage. This helps us improve user experience.

Essential Cookies: Necessary for core functionality like session management and security.
Analytics Cookies: We collect anonymized data like pages visited and time spent. You can opt-out using the Google Analytics Opt-out Browser Add-on.

For more details, please see our Cookie Policy.

4. How We Use Your Information

Purpose of Processing	Legal Basis (under GDPR)	Data Categories Used
To provide, maintain, and personalize the Service	Performance of a Contract	Account, Usage, AI Model, YouTube Data
To improve our Service and train our AI models for better accuracy, relevance, and safety	Legitimate Interests	Anonymized Usage, AI Model, and Analytics Data
To communicate with you about your account and service-related matters	Performance of a Contract; Legitimate Interests	Account Information
To send marketing and informational emails (e.g., newsletters, product updates)	Legitimate Interests (for existing customers); Consent (by registration)	Account Information (Name, Email)
To process payments and manage subscriptions	Performance of a Contract	Account and Billing Information
To enforce our terms and comply with legal obligations	Legal Obligation; Legitimate Interests	All relevant data categories

5. Sharing and Disclosing Your Information

We do not sell your personal data. We may share your information with the following trusted third parties to make our Service possible:

AI Model Providers: To provide our core content generation features, we send your prompts and relevant context to third-party AI service providers (such as OpenAI, Google, Anthropic, etc.). This data is processed by them to generate the output you request. Their use of data is governed by their respective privacy policies and security practices. We strive to work with partners who uphold strong data privacy standards.
Infrastructure & Service Providers: We use providers for essential services like cloud hosting (e.g., Amazon Web Services), payment processing (e.g., Stripe), and email delivery (e.g., SendGrid). These providers are contractually bound to protect your data.
Analytics Providers: We share data with Google Analytics as described above.
Legal Requirements & Business Transfers: We may disclose your information if required by law or in the event of a merger, acquisition, or sale of assets. We will notify you in such cases.
With Your Consent: We may share your information for other purposes with your explicit consent.

6. Data Retention

We retain your personal data only for as long as necessary for the purposes outlined in this policy.

Account Information: Retained for as long as your account is active, and for a limited period after closure for legal and operational reasons.
Usage and AI Model Data: May be retained in an anonymized or aggregated form indefinitely for service improvement and model training. Personally identifiable data is deleted upon account closure.
YouTube Data: Cached data is deleted promptly after it is no longer needed to provide the service. All YouTube data is removed within 30 days of you disconnecting your channel or deleting your account.

7. Data Transfers

Our Service is global, and your data may be processed in countries outside of your home country, including the United States. We ensure that such transfers are protected by appropriate safeguards, such as Standard Contractual Clauses (SCCs), to maintain a level of data protection consistent with GDPR requirements.

8. Your Data Protection Rights

Under GDPR, you have the following rights:

Access: Request a copy of your personal data.
Rectification: Correct any inaccurate data.
Erasure ("Right to be Forgotten"): Request the deletion of your data.
Restriction: Request that we limit the processing of your data.
Data Portability: Receive your data in a machine-readable format.
Object: You can object to us processing your data for certain purposes, including for AI model training or direct marketing.
Withdraw Consent: You can withdraw your consent for marketing emails at any time by using the "unsubscribe" link.

To exercise any of these rights, please contact us at contact@endspec.net. We will respond within 30 days.

9. Security

We implement robust technical and organizational measures to protect your data, including encryption in transit (TLS/SSL) and at rest, strict access controls, and regular security audits. However, no system is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

Our Service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will take steps to delete it.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at:

Ventress
Email: contact@endspec.net