Privacy Policy

1. Introduction

Welcome to Ventress. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our website, applications, and services (collectively, the "Service"). Our Service is designed to act as a YouTube co-pilot, helping you generate content using artificial intelligence.

This policy outlines your privacy rights and how the law protects you. We are committed to complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Who We Are (Data Controller)

The company responsible for your personal data (the "data controller") is:

Throughout this policy, this entity may be referred to as "Ventress," "we," "us," or "our."

3. The Data We Collect About You

We collect and process various types of personal data to provide and improve our Service.

Information You Provide to Us:

• Account Data: When you register, we collect your name, email address, and password (which is securely hashed).
• User Content: We process the prompts, keywords, and other text or information you input into the Service to generate content.
• Payment Data: If you subscribe to a paid plan, our third-party payment processor (Stripe) collects your payment card information. We do not store this information ourselves.
• Communications Data: If you contact us, we collect your name, email address, and the content of your messages.

Information We Collect Automatically:

• Usage Data: We collect information about how you interact with the Service, such as the features you use, the actions you take, and the date, time, and duration of your activity.
• Device and Technical Data: We collect your IP address, browser type and version, operating system, and other technical information about the device you use to access the Service.
• Cookie Data: We use essential and analytics cookies to operate and understand the use of our Service. For more details, please see our Cookie Policy. We do not use advertising cookies.

Information from Third Parties:

• YouTube Data: If you choose to connect your YouTube account, we use the YouTube API Services to access channel data (like video count, views, likes) to provide our Service. Our use of this data adheres to the YouTube API Services Terms of Service and is limited to providing or improving user-facing features. We do not transfer this data to third parties other than as necessary to provide the service (e.g., to our hosting provider) or as required by law. When you disconnect your youtube channel, we delete all associated data from our database. You can also revoke Ventress' access to your data via the Google security settings page at https://security.google.com/settings/security/permissions
• Google Analytics: We use Google Analytics to help us understand service usage. This service collects data as described in Google's Privacy Policy. You can opt-out using the Google Analytics Opt-out Browser Add-on.

4. How We Use Your Data & Legal Bases

We only use your personal data when the law allows us to. Most commonly, we use your data in the following circumstances:

Purpose of Processing	Types of Data Used	Legal Basis (under GDPR)
To register you as a new user and provide the core Service.	Account, User Content, YouTube Data, Device Data	Performance of a contract with you.
To process your payments for subscriptions.	Account, Payment Data	Performance of a contract with you.
To improve our Service, including training our AI models and troubleshooting.	User Content (anonymized where possible), Usage Data, Device Data	Our legitimate interests to improve our product for our users.
To manage our relationship with you, including sending service-related communications and responding to inquiries.	Account, Communications Data	Performance of a contract; Our legitimate interests.
To send you marketing communications (e.g., our newsletter).	Account Data (Email)	Your explicit consent. You can withdraw this at any time.
To ensure security and enforce our Terms of Service.	All data types as necessary.	Our legitimate interests to protect our business and users.

5. Who We Share Your Data With

We do not sell your personal data. We may share your information with the following categories of third parties to help us provide our Service:

• Cloud & AI Providers: We use hosting services like Amazon Web Services (AWS) and third-party AI models (e.g., from OpenAI, Google) to power our Service. Your User Content is shared with these providers to generate the AI content you request.
• Payment Processors: We use Stripe to handle payments securely.
• Analytics Providers: We share data with Google Analytics to understand service usage.
• Professional Advisors & Legal Authorities: We may share data with lawyers, accountants, or government authorities if required for legal compliance or to protect our rights.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

6. International Data Transfers

Your data may be processed in countries outside of the European Economic Area (EEA), such as the United States, where our service providers are located. When we transfer your data outside the EEA, we ensure a similar degree of protection is afforded to it by using specific contracts approved by the European Commission, known as Standard Contractual Clauses (SCCs).

7. Data Security & Retention

We have implemented appropriate security measures (such as encryption and access controls) to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Generally, we retain your account data for as long as your account is active and for a reasonable period thereafter in case you decide to re-activate the Service. You may request deletion of your data at any time.

8. Your Legal Rights

Under the GDPR, you have rights over your personal data. These include:

• Right of Access: Request a copy of the data we hold about you.
• Right to Rectification: Request correction of inaccurate data.
• Right to Erasure: Request that we delete your data ("right to be forgotten").
• Right to Restrict Processing: Request that we limit the use of your data.
• Right to Data Portability: Request your data in a machine-readable format.
• Right to Object: Object to us processing your data for our legitimate interests.

9. Children's Privacy

Our Service is not intended for and may not be used by individuals under the age of 16. We do not knowingly collect personal data from children under 16.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and, where appropriate, by email. The "Last Updated" date at the top will always show the most current version.