Privacy Policy

VentureCite (“VentureCite,” “we,” “us”) shows businesses how AI assistants such as ChatGPT, Gemini and Perplexity describe and cite them. This policy covers the website at venturecite.com and the VentureCite product.

If you only visit the website, we do not ask for personal information. Like any website, the servers that host it keep short-lived technical logs so it stays secure and available. These can include:

• IP address
• Browser type and operating system
• The page requested and the time of the request
• The referring page, if your browser sends one

If you create an account, we also collect:

• Your email address and the details you add to your profile
• The brands, websites, competitors and prompts you set up
• The reports, drafts and notes you create in the product
• Billing details. Payments are handled by Stripe; we never see or store your full card number

If you connect Google Analytics, we receive the Google data described in the Google user data section below.

If you email us at engineering@venturecite.com, we receive your email address and whatever you choose to write.

We use information to:

• Provide the product: run the checks you ask for and show you the results
• Send emails you have signed up for, such as reports, and messages about your account
• Keep the website and product running, and fix problems
• Protect them against abuse, fraud and attacks
• Reply to emails you send us
• Meet legal obligations

We do not sell your information, share it for advertising, or use it to build a profile of you.

You can choose to connect a Google Analytics property to VentureCite. When you do, Google asks for your permission, and with it we access:

• Your Google account email address, so we can show which account is connected
• The list of Google Analytics accounts and properties you can access, so you can choose one
• Read-only reports from the property you choose: sessions, users, engagement, key events, landing pages, countries and traffic sources

Access is read-only. VentureCite cannot change your Google Analytics settings or data.

We use this data only to show you how many visitors AI assistants send to your website, inside your VentureCite account and in reports you choose to download. Only you can see it.

We do not sell Google user data, use it for advertising, send it to AI models, or use it to train AI models. We do not share it with anyone, except service providers who store it for us, when the law requires it, or with your consent.

We store the access Google gives us encrypted (AES-256-GCM). Report results are kept for at most 7 days so pages load quickly, then deleted.

You can disconnect Google Analytics from a brand at any time in VentureCite. We then delete that brand's cached reports. Once no brand of yours uses the connection, we revoke our access at Google and delete the stored token. You can also remove VentureCite's access at https://myaccount.google.com/permissions. If you delete your VentureCite account, the stored token and cached reports are permanently deleted with it after a 30-day grace period.

VentureCite's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

We do not set advertising cookies or run third-party analytics on the website or the product. When you sign in, your browser stores a session so you stay signed in. Your browser may also store preferences such as your theme. These stay on your device.

We use a small number of service providers to run VentureCite. They process information only on our instructions:

• Hosting and database (Supabase and our hosting provider)
• Payments (Stripe)
• Email delivery (Resend)
• Error monitoring (Sentry)
• AI providers (OpenAI and OpenRouter), which receive the prompts, brand details and website content needed to run the checks you ask for. They never receive Google user data

VentureCite links to other sites and services. Their privacy practices are governed by their own policies, and we are not responsible for sites we do not control.

Server logs are kept only as long as needed for security and reliability, then deleted. Account data is kept while your account is open and permanently deleted 30 days after you delete your account, except where the law requires us to keep it, such as billing records. Emails are kept for as long as needed to handle your message and any follow-up.

VentureCite is served only over HTTPS. Access tokens from connected services are encrypted at rest, and access to our systems is restricted to the people who need it. No website or network is completely secure, so we cannot guarantee absolute security.

Depending on where you live, including under the GDPR in the EU and UK and under US state privacy laws, you may have the right to:

• Ask what information we hold about you
• Ask us to correct or delete it
• Object to or restrict how we use it
• Complain to your local data protection authority

To make a request, email engineering@venturecite.com. We reply within 30 days and will not treat you differently for asking.

VentureCite is built for businesses and is not directed at children under 16. We do not knowingly collect information from children. If you think a child has sent us information, email engineering@venturecite.com and we will delete it.

If we change how VentureCite handles information, we will update this page and the “Last updated” date above.

Questions about this policy or your information: engineering@venturecite.com.