1. Who this policy covers
This policy applies to everyone who uses the Ventra website: visitors, registered users, project owners, buyers, investors and candidates. The controller of the data is the operator listed in the "Operator" section.
We process data in accordance with applicable data protection law, including the law of the operator's country of registration, and for users from the European Union, Azerbaijan, Russia and other countries, taking their local requirements into account.
2. What data we collect
| Where | What data |
|---|---|
| Registration and account | Name, email, password (stored by the authentication provider as a hash, we never see it), role, registration date, identity verification mark. |
| Projects | Description, figures, country and city, images, documents and other materials you upload. |
| Request forms | Name, email, message text, and the project or service you are writing about. |
| Deals | Messages, purchase offers, syndicate participation, access granted to materials and records of viewing them. |
| Resumes and applications | Name, headline, roles, experience, skills, country and city, pay expectations, contacts, links, application text. |
| Investor offers | Amount, terms, comment and the investor's contacts. |
| Revenue confirmation | Monthly payment totals and the date of the check. The payment system key is used once within the request and is not stored. |
| Favorites and saved searches | Saved projects and search parameters. |
| Reports and blocks | The reason and text of a report, what it concerns, an excerpt of the message or listing title, and the list of users you have blocked. |
| Statistics | The fact that a project page was viewed: the project, the date and your account if you are signed in. |
| Technical data | IP address, browser and device type, time and addresses of requests in hosting and database logs. |
| Analytics | With your consent: pages viewed, referral source, device, approximate location and cookie identifiers in Google Analytics and Yandex Metrica. |
We do not ask for special categories of data (health, beliefs, etc.) through the website. If we request documents for the "Identity verified" mark, they are used only for verification and are never published.
3. Why we process data
| Purpose | Legal basis |
|---|---|
| Registration, sign-in and running your account | Performance of the Terms |
| Publishing and moderating projects, verification marks | Performance of the Terms |
| Delivering requests, applications, offers and messages to project owners and other participants | Performance of the Terms, your consent |
| Email notifications about requests, messages and offers | Performance of the Terms |
| Providing paid services | Service contract |
| Fraud and abuse prevention, security, moderator activity log | Legitimate interest |
| View statistics for project owners and improving the website | Legitimate interest |
| Analytics and advertising, if we enable them | Your consent in cookie settings |
| Responding to authorities and complying with the law | Legal obligation |
4. Who sees your data
- All visitors: published projects and the seller's public profile.
- Project owner: requests, applications, messages and offers sent about their project.
- Founders who are hiring: resumes with open visibility.
- Users granted access: a project's private materials.
- The Platform team: data needed for moderation, support and protecting the website.
Service providers who process data on our behalf:
| Provider | What it does |
|---|---|
| Supabase | Database, authentication and file storage |
| Vercel | Hosting and delivering the website |
| Resend | Sending notification emails |
| Stripe | Only if you start a revenue confirmation with your own key |
| Google (Google Analytics) | Visit statistics, only with your consent to analytics |
| Yandex (Yandex Metrica) | Visit statistics, only with your consent to analytics |
We do not sell personal data. We disclose it to authorities only upon a lawful request.
5. International transfers
Our providers' servers may be located outside your country, including in the European Union and the United States. We choose providers that protect data through contracts and security measures, and for transfers from the EU we rely on standard contractual clauses. By using the website, you agree to such transfers.
6. How long we keep data
- Account data, projects, resumes and messages: for as long as the account exists.
- After an account is deleted: deleted or anonymised within 30 days, except information we must keep by law or to resolve disputes, for no longer than 3 years.
- Requests without an account: up to 3 years from the last contact.
- Reports: up to 3 years, to handle repeat violations; if the reporter deletes their account, the report is anonymised.
- Hosting and database logs: for the periods set by the providers.
- View statistics: in anonymised form.
7. Your rights
- find out what data we process about you and get a copy;
- correct inaccurate data (most of it can be changed in your account);
- delete your account and data immediately: in the app (Profile → Delete account) or on the website on the Account deletion page;
- restrict or object to processing;
- receive your data in a machine-readable format;
- withdraw consent, without affecting processing carried out before withdrawal;
- lodge a complaint with the data protection authority in your country.
To exercise a right, send a request using the form at the bottom of this page. We reply within 30 days and may ask you to confirm that the request came from you.
8. How we protect data
Connections to the website are encrypted. Access to data is restricted at the database level: each user receives only the records they are allowed to see. Private materials open only with access granted by the owner. Moderator actions are recorded in a log that cannot be edited. Passwords are held by the authentication provider and are not available to us.
10. Children
The website is not intended for people under 18. If you learn that a child has given us data, write to us and we will delete it.
11. Changes to this policy
We publish the new version on this page with its date and announce material changes on the website or by email.
12. Operator
- Website
- Ventra
Requests about your data and these documents
Access, correction, deletion of data or the account, withdrawal of consent, complaints. We reply by email within 30 days.