Privacy Policy

The short version

We collect the minimum needed to run the service: your email address, your payment details (handled entirely by Stripe — we never see them), and the inputs you type into our tools. We don't sell data, we don't run advertising trackers, and we don't share anything with third parties except the ones strictly required to operate (Stripe for payments, our email provider for receipts and links, our language model provider for tool output, and Google reCAPTCHA on the contact form only).

Who we are

VentureStand operates venturestand.com and provides subscription-based business tools for professionals. For any privacy-related question, use the contact form.

What we collect

When you subscribe:

• Your email address — to send your receipt, your access link, and service updates.
• Your name and billing country — provided by Stripe, used only for tax and accounting.
• Payment confirmation — the fact that a subscription exists, its status, and its renewal date. We never store your card number, expiry, or CVV. Stripe handles all card data.

When you join the Club:

• Your name and email address — to send your confirmation link, your member access, free-tool access, and partner deals.
• A confirmation token and an access token, both stored as opaque strings. We do not store passwords because there are none.
• When you leave the Club, your name, email, and every token associated with you are removed.

When you use a tool:

• The inputs you type into the tool form (e.g. invoice details, business name, amounts).
• We send these inputs to our language model provider to produce the tool's output.
• We do not store the inputs or the outputs on our servers after the request completes. They exist only for the duration of your session.
• Some tools remember configuration between visits (e.g. the column names you mapped, the thresholds you set, the pages you created). This is stored in your own per-subscriber state and is never shared.

Automatically:

• Standard server logs (IP address, user agent, timestamp) kept for security and abuse prevention, retained for up to 30 days.
• A single session cookie that keeps you signed in to the tool after your first click from the access email. It contains no personal data and expires after 30 days.
• Anonymous page-view counts (path, referrer host, truncated daily IP hash, user agent). No full IPs, no query strings, no cross-day tracking.

What we do NOT collect

• No advertising trackers, no analytics pixels, no third-party cookies on the tools or the Club.
• No sensitive personal data (health, biometric, political, religious).
• No patient-identifiable information. Our medical tools operate on business data only — practice names, invoice amounts, dates — and are designed to never receive patient identifiers.

Who we share with

We share the minimum necessary with the following service providers:

• Stripe — payment processing and subscription management. Stripe receives your email, payment method, and billing country. Their privacy policy applies to that data.
• Our email provider — delivery of transactional email (receipts, access links, service notices, Club confirmations).
• Our language model provider — the inputs you type into a tool are sent to generate output. They are not used for training.
• Google reCAPTCHA — spam protection on the contact form only. When you submit the contact form, Google receives your IP address, the page you came from, and a browser-generated token, and returns a score to us. Google's use of that data is covered by Google's Privacy Policy and Terms of Service. reCAPTCHA is not used on the tools, the Club, or anywhere else on the site.

We do not sell, rent, or trade your data with anyone. We do not share data for advertising.

Legal basis and your rights

If you are in the EU/EEA or UK, we process your data under the following legal bases: performance of a contract (running your subscription or Club membership), legitimate interest (security, abuse prevention), and legal obligation (tax records). You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data (subject to legal retention requirements).
• Export your data in a portable format.
• Object to processing, or lodge a complaint with your local data protection authority.

To exercise any of these, use the contact form and mention what you're asking for. We respond within 30 days.

Data retention

• Account data (email, subscription status): kept for as long as your subscription is active, plus 90 days after cancellation for record-keeping.
• Club data (name, email, tokens): kept for as long as you are a member, and removed in full when you leave the Club.
• Billing records: kept as required by tax law (typically 6–10 years, depending on jurisdiction).
• Server logs: up to 30 days.
• Tool inputs and outputs: not stored beyond the request.
• Anonymous page-view log: kept for up to 30 days.

Security

All traffic is encrypted (HTTPS). Payment data never touches our servers. Access to the internal systems is restricted to the minimum needed to operate the service. If we ever become aware of a data breach that affects you, we will notify you and the relevant authorities as required by law.

Cookies

We use one cookie: a session cookie that keeps you signed in to a tool you have an active subscription for, and the Club cookie that keeps you signed in to the Club. Both contain only an opaque token. Neither contains personal data.

The contact form also loads Google reCAPTCHA v3, which sets its own cookies (_GRECAPTCHA and related) to tell real visitors from automated submissions. These cookies are set by Google, not by us, and only on the contact page. They are not used for advertising or analytics. Google's Privacy Policy applies.

Outside the contact page, we do not use advertising, analytics, or tracking cookies. There is no cookie banner because there is nothing to consent to beyond the essential session cookies and the contact page's reCAPTCHA cookies, which are covered by your use of the contact form.

Changes

We may update this policy from time to time. Material changes will be announced by email to active subscribers and reflected in the "last updated" date at the top of this page.

Contact

Questions, concerns, or data requests: use the contact form.