VenturiBase Privacy Policy

Effective Date: December 1, 2025

VenturiBase, LLC (hereinafter, "VenturiBase," "we," "us," or "our") is committed to respecting the privacy rights of users of the Website, Services and Applications (the "Services"). VenturiBase created this Privacy Policy to explain its information collection and use practices and the protection of the Client's information when the Client visits and uses the Website, Services, and Applications. Any terms capitalized but not otherwise defined herein shall have the respective meanings set forth in the VenturiBase Terms of Service. This Privacy Policy is only applicable to the Website and Applications and does not apply to any websites or applications that are owned or operated by third parties ("Third-Party Websites/Applications"), which may have data collection, storage and use practices and policies that differ materially from this Privacy Policy. For additional information, see the section concerning Third-Party Websites/Applications, below. BY USING THE WEBSITE AND/OR APPLICATIONS, THE CLIENT REPRESENTS AND WARRANTS THAT THE CLIENT HAS READ AND UNDERSTOOD, AND AGREES TO THE TERMS OF, THIS PRIVACY POLICY. IF THE CLIENT DOES NOT UNDERSTAND OR DOES NOT AGREE TO BE BOUND BY THIS PRIVACY POLICY, THE CLIENT MAY NOT USE THE SERVICES, WEBSITE AND/OR APPLICATION.
1. INFORMATION COLLECTION PRACTICES1.1 Traffic DataVenturiBase automatically gathers information of the sort that browsers automatically make available, including: (i) IP addresses; (ii) domain servers; (iii) types of computers accessing the Website; and (iv) types of Web browsers accessing the Website (collectively "Traffic Data"). We collect Traffic Data to analyze trends, administer the Website, and gather broad demographic information for aggregate use.
1.2 CookiesA "Cookie" is a string of information that a website stores on a user's computer, and that the user's browser provides to the website each time the user submits a query to the website. The purpose of a Cookie is to identify the user as a unique user of the Website. VenturiBase uses Cookies to customize the Client's experience on the Website to the Client's interests, to ensure that the Client does not see the same informational messages repeatedly, and to store a Client's session information so the Client does not have to re-enter credentials each time the Client visits the Website. In addition, VenturiBase may use Cookies, and other methods, to store and retrieve data from the Client's web browser.

Types of Cookies We Use:

(a) Essential Cookies: Required for the operation of the Services, including authentication and security cookies.

(b) Functional Cookies: Enable enhanced functionality and personalization, such as remembering your preferences.

(c) Analytics Cookies: Help us understand how visitors interact with the Website by collecting and reporting information anonymously.

IF THE CLIENT DOES NOT WISH TO HAVE COOKIES PLACED ON THE CLIENT'S COMPUTER, THE CLIENT SHOULD SET THE CLIENT'S BROWSERS TO REFUSE COOKIES BEFORE ACCESSING THE WEBSITE, WITH THE UNDERSTANDING THAT CERTAIN OF THE SERVICES AND CERTAIN FEATURES OF THE WEBSITE MAY NOT FUNCTION PROPERLY WITHOUT THE AID OF COOKIES. For users in the European Economic Area, we will obtain consent before placing non-essential cookies.
1.3 Web Beacons"Web Beacons" (also known as clear gifs, pixel tags or web bugs) are tiny graphics with a unique identifier, similar in function to Cookies, and are used to track the online movements of web users or to access Cookies. Unlike Cookies which are stored on the user's computer hard drive, Web Beacons are embedded invisibly on web pages (or in e-mail). Web Beacons may be used to deliver or communicate with Cookies, to count users who have visited certain pages and to understand usage patterns.
1.4 Personal InformationThe Client may provide VenturiBase certain information related to the Client or Authorized Users ("Personal Information"). Personal Information includes, without limitation:

(a) "Contact Data": Personally identifiable information about the Client, such as the Client's name, email address, company name, job title, and billing information.

(b) "Account Data": Information related to Client's account, including username, password (encrypted), account preferences, and subscription status.

(c) "Planning Data": Data that the Client provides through integration with third-party project management tools or direct upload, including but not limited to project names, epic names, ticket titles, ticket descriptions, sprint configurations, team member names or identifiers, and other project management metadata.

The Personal Information the Client provides is used for such purposes as allowing the Client to set up a user account and profile, providing the Website and/or Applications and related Services, processing payments, monitoring and improving the content and usage of the Website, Services, and/or Applications, communicating with the Client about the Services, and any other purpose for which the information was collected.
1.5 Planning Data DistinctionVENTURIBASE DISTINGUISHES BETWEEN PERSONAL INFORMATION AND PLANNING DATA. Planning Data is processed solely to provide the Services and is subject to the strict data handling commitments set forth in our Security Policy. VenturiBase does not use Planning Data for any purpose other than providing the Services to the Client who provided such data. VenturiBase does not share, sell, or disclose Planning Data to any third party except as necessary to provide the Services or as required by law.
2. INFORMATION USE AND DISCLOSURE PRACTICES2.1 Traffic Data and Information Gathered Using Cookies and Web BeaconsVenturiBase analyzes Traffic Data and information gathered using Cookies and Web Beacons to help VenturiBase better understand who is using the Website, Services, and/or Applications and how they are using the Website and/or Applications. By identifying patterns and trends in usage, VenturiBase is able to better design the Website and Applications to improve the Client's experience. From time to time, VenturiBase may release Traffic Data and information gathered using Cookies and Web Beacons in the aggregate, such as by publishing a report on trends in the usage of the Website. Such aggregate data will not identify any individual Client.
2.2 Personal Information(a) Contact Data: VenturiBase uses the Client's Contact Data to send the Client information about VenturiBase and VenturiBase's products and services, and to contact the Client when necessary in connection with the Services, including for billing, support, and important service announcements.

(b) Account Data: VenturiBase uses Account Data to authenticate Clients, manage subscriptions, and provide customer support.

(c) Planning Data: VenturiBase uses Planning Data solely to provide the Services. VENTURIBASE DOES NOT USE PLANNING DATA FOR ANY OTHER PURPOSE, INCLUDING BUT NOT LIMITED TO ADVERTISING, ANALYTICS UNRELATED TO SERVICE PROVISION, OR TRAINING OF MACHINE LEARNING MODELS.
2.3 Disclosure PracticesExcept as otherwise provided in this Privacy Policy, and when the Client otherwise gives permission or under the following circumstances, VenturiBase will not share the Client's Personal Information with third parties:

(a) Disclosure in Connection with Services: VenturiBase discloses Personal Information to those who help it provide services, including those who perform technical, administrative and data processing tasks such as hosting, billing, fulfillment, and data storage and security. All such service providers are contractually bound to use Personal Information only for the purpose of providing services to VenturiBase and are prohibited from sharing or using such information for any other purpose.

(b) By Law or to Protect Rights: VenturiBase discloses Personal Information when required to do so by law, or in response to a subpoena or court order, or when VenturiBase believes in its sole discretion that disclosure is reasonably necessary to protect the property or rights of VenturiBase, third-parties or the public at large. Where permitted by law, VenturiBase will notify Client of such disclosure.

(c) Business Transfers; Bankruptcy: VenturiBase reserves the right to transfer all Personal Information in its possession to a successor organization in the event of a merger, acquisition, or bankruptcy or other sale of all or a portion of VenturiBase's assets. Other than to the extent ordered by a bankruptcy or other court, the use and disclosure of all transferred Personal Information will be subject to this Privacy Policy, or to a new privacy policy if the Client is given notice of that new privacy policy and an opportunity to affirmatively opt-out of it. Personal Information submitted or collected after a transfer, however, may be subject to a new privacy policy adopted by VenturiBase's successor organization.
2.4 What We Do NOT Do With Your DataVenturiBase commits to the following:

(a) WE DO NOT SELL YOUR DATA: VenturiBase does not sell, rent, or trade Personal Information or Planning Data to any third party for any purpose.

(b) WE DO NOT USE YOUR DATA FOR ADVERTISING: VenturiBase does not use Client Data to serve targeted advertisements or share data with advertising networks.

(c) WE DO NOT TRAIN AI ON YOUR DATA: VenturiBase does not use Planning Data or Client-specific information to train machine learning models, artificial intelligence systems, or any analytical tools that would benefit other clients or third parties.

(d) WE DO NOT SHARE YOUR DATA FOR ANALYTICS: VenturiBase does not share identifiable Client Data with analytics providers. Any analytics we perform are for the sole purpose of improving the Services for the Client who provided the data.
3. EMAIL COMMUNICATIONS FROM VENTURIBASEIn providing the Services, the Client may receive periodic email communications from VenturiBase regarding the Services, such as service updates, security notifications, and other information regarding the Services, which are part of the Services and which the Client cannot opt out of receiving. The Client may also receive periodic promotions and other offers or materials VenturiBase believes might be of interest to the Client. The Client can opt-out of receiving these promotional messages at any time by (a) following the unsubscribe instructions contained in each message; or (b) changing the messaging preferences in the Client's account.
4. SECURITY OF PERSONAL INFORMATIONVenturiBase has implemented and maintains reasonable security procedures and practices designed to protect against the unauthorized access, use, modification, destruction or disclosure of the Client's Personal Information. Please refer to our Security Policy for detailed information about our security practices. Despite these efforts, no security measures are perfect or impenetrable and no method of data transmission can be guaranteed against any interception or other type of misuse. In the event that the Client's Personal Information is compromised as a result of a breach of security, VenturiBase will promptly notify the Client if the Client's Personal Information has been compromised as required by applicable law.
5. USER ABILITY TO ACCESS, UPDATE, AND CORRECT PERSONAL INFORMATIONIf the Client has an account, the Client can access and modify the Client's Personal Information through the Client's account settings, at any time. If the Client completely deletes all such information the Client may not be able to access or use the Website and/or Applications correctly. If the Client would like VenturiBase to delete the Client's Personal Information from its system, please contact us at privacy@venturibase.com with a request that we delete the Client's Personal Information from our database. VenturiBase will use commercially reasonable efforts to honor the Client's request; however, VenturiBase may retain an archived copy of the Client's records as required by law or for other legitimate business purposes.

VenturiBase wants the Client's Personal Information to be complete and accurate. By using the Website and/or Applications, the Client represents and warrants that all information the Client provides on any registration form will be complete and accurate, and that the Client will update that information as necessary to maintain its completeness and accuracy. To confirm the completeness and accuracy of, or make changes to, the Client's Personal Information, please visit the Client's account settings.
6. DATA RETENTIONVenturiBase retains Personal Information and Planning Data only for as long as necessary to provide the Services and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

(a) Account Data: Retained for the duration of the Client's account and for a reasonable period thereafter to comply with legal obligations and resolve disputes.

(b) Planning Data: Retained only while the Client maintains an active account with VenturiBase. Upon account termination, Planning Data will be deleted within thirty (30) days unless the Client requests earlier deletion or unless retention is required by law.

(c) Traffic Data: Retained in aggregate form for analytics purposes. Individual session data is retained for no more than ninety (90) days.

(d) Billing Records: Retained as required by applicable tax and financial regulations.
7. THIRD-PARTY WEBSITES/APPLICATIONSThe Website and Applications contain links to Third-Party Websites/Applications, including but not limited to integrations with Atlassian Jira and Microsoft Azure DevOps. VenturiBase does not own or control these Third-Party Websites/Applications. VenturiBase is not responsible for the privacy and security practices and policies of those Third-Party Websites/Applications and this Privacy Policy does not apply to any Third-Party Websites/Applications. Before visiting or providing Personal Information to a Third-Party Website, the Client should familiarize himself or herself with the privacy policies and practices (if any) of that Third-Party Website, and should take those steps necessary to, in the Client's discretion, protect the Client's privacy.
8. INTERNATIONAL DATA TRANSFERSVenturiBase is based in the United States. If the Client or Authorized Users are located outside the United States and choose to provide information to VenturiBase, that information will be transferred to the United States and processed there (or any other country where VenturiBase or its service providers operate). By providing information and using the Website, Services and/or Applications, the Client agrees and consents to the collection, transfer, use, storage and disclosure of information as described in this Privacy Policy.

For transfers of Personal Information from the European Economic Area (EEA), United Kingdom, or Switzerland to the United States, VenturiBase relies on Standard Contractual Clauses approved by the European Commission, or other lawful transfer mechanisms. Clients may request a copy of applicable transfer mechanisms by contacting privacy@venturibase.com.
9. YOUR RIGHTS UNDER GDPR (EUROPEAN ECONOMIC AREA USERS)If you are located in the European Economic Area (EEA), you have certain rights under the General Data Protection Regulation (GDPR):

(a) Right of Access: You have the right to request a copy of the Personal Information we hold about you.

(b) Right to Rectification: You have the right to request that we correct any inaccurate Personal Information we hold about you.

(c) Right to Erasure: You have the right to request that we delete your Personal Information, subject to certain exceptions.

(d) Right to Restriction of Processing: You have the right to request that we restrict the processing of your Personal Information in certain circumstances.

(e) Right to Data Portability: You have the right to receive your Personal Information in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

(f) Right to Object: You have the right to object to our processing of your Personal Information in certain circumstances.

(g) Right to Withdraw Consent: Where we rely on consent to process your Personal Information, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us at privacy@venturibase.com. We will respond to your request within one month, or such other period as required by applicable law. We may request additional information to verify your identity before fulfilling your request.

Legal Basis for Processing: VenturiBase processes Personal Information on the following legal bases:

(a) Performance of Contract: Processing necessary to provide the Services pursuant to our agreement with you.

(b) Legitimate Interests: Processing necessary for our legitimate interests, such as improving the Services, preventing fraud, and ensuring network security, provided such interests are not overridden by your rights.

(c) Consent: Processing based on your consent, which you may withdraw at any time.

(d) Legal Obligation: Processing necessary to comply with legal obligations.
10. YOUR RIGHTS UNDER CCPA (CALIFORNIA USERS)If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

(a) Right to Know: You have the right to request information about the categories and specific pieces of Personal Information we have collected about you, the categories of sources from which the information was collected, the business purpose for collecting the information, and the categories of third parties with whom we share the information.

(b) Right to Delete: You have the right to request that we delete Personal Information we have collected from you, subject to certain exceptions.

(c) Right to Correct: You have the right to request that we correct inaccurate Personal Information we maintain about you.

(d) Right to Opt-Out of Sale or Sharing: You have the right to opt-out of the sale or sharing of your Personal Information. VENTURIBASE DOES NOT SELL OR SHARE PERSONAL INFORMATION AS DEFINED UNDER CCPA/CPRA.

(e) Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your privacy rights.

To exercise any of these rights, please contact us at privacy@venturibase.com or submit a request through the privacy settings in your account. We will verify your identity before fulfilling your request. You may designate an authorized agent to make a request on your behalf.

Categories of Personal Information Collected: In the preceding twelve (12) months, we have collected the following categories of Personal Information: Identifiers (name, email address, IP address); Commercial Information (transaction history, subscription status); Internet Activity (browsing history on our Website, interaction with our Services); Professional Information (job title, company name); and Inferences (preferences derived from the above).
11. CHILDREN'S PRIVACYVenturiBase does not solicit or knowingly collect personally identifiable information from any person under the age of 18. The Services are intended for business use and are not directed to children. If VenturiBase obtains actual knowledge that it has collected personally identifiable information from a person under the age of 18, VenturiBase will promptly delete such information from its database.
12. DO NOT TRACK SIGNALSSome browsers incorporate a "Do Not Track" (DNT) feature that, when turned on, signals to websites that you do not want to be tracked. Because there is not yet a common understanding of how to interpret DNT signals, VenturiBase does not currently respond to DNT signals. However, you can manage your cookie preferences through your browser settings.
13. UPDATES AND CHANGES TO PRIVACY POLICYVenturiBase reserves the right to update, change or modify this Privacy Policy. Any material changes to this policy will be posted on the Website and/or Applications, and the Client will be notified by email or through notification within the Services at least thirty (30) days prior to the changes becoming effective. The updated Privacy Policy will indicate when such changes will become effective. The Client will be deemed to have agreed to any such modification or amendment by the Client's decision to continue using the Website, Services, and/or Application following the date in which the modified or amended Privacy Policy becomes effective. Use of information thereafter is subject to the Privacy Policy in effect at the time such information is used.
14. DATA PROTECTION OFFICERFor questions or concerns about our privacy practices, or to exercise your privacy rights, please contact our Data Protection Officer:

Email: privacy@venturibase.com
Subject Line: Privacy Inquiry

We will respond to all inquiries within a reasonable timeframe, and in compliance with applicable legal requirements.
15. CONTACT INFORMATIONFor questions about this Privacy Policy, please contact:

VenturiBase, LLC
Email: privacy@venturibase.com
Website: https://www.venturibase.com