Privacy Policy

1. Introduction

This Privacy Policy explains how VantaROI.ai ("VantaROI", "we", "us") collects, uses, shares, and protects personal data when you use our AI finance and marketing planning platform (the "Service"). By using the Service you acknowledge the practices described in this policy. If you do not agree, please do not use the Service.

2. Data We Collect

We collect the following categories of data:

• Account data. Your name, email address, password hash, and account preferences when you register.
• Business profile inputs. Information you voluntarily provide to generate plans and projections, such as your industry, business model, product pricing, historical or intended advertising budgets, revenue figures, target markets, and campaign goals. Please do not submit data you are not permitted to share, and avoid submitting sensitive personal data about individuals; the Service is designed for business-level inputs.
• Usage data. Log data such as pages viewed, features used, timestamps, IP address, browser type, and device information, used for security, debugging, and product improvement.
• Payment order metadata. When you purchase a subscription or report pack, we store order records such as the order identifier, plan or pack purchased, price, payment status, cryptocurrency asset used, and the transaction reference returned by our payment processor. We do NOT collect or store card numbers, bank details, or cryptocurrency wallet private keys. Cryptocurrency payments are handled by NOWPayments, and the payment details you provide at checkout are processed under NOWPayments' own privacy policy.

3. How We Use Your Data

We use your data to: (a) provide, operate, and secure the Service; (b) generate AI-powered marketing plans and financial projections from your inputs; (c) process orders and confirm payments; (d) send transactional emails such as receipts, account notices, and report delivery; (e) respond to support requests; (f) analyze aggregate usage to improve the product; and (g) comply with legal obligations. We do not sell your personal data.

4. AI Processing

When AI generation features are configured, the business profile inputs and prompts you submit may be transmitted to third-party AI model providers, currently OpenAI and/or Anthropic, via their APIs, solely to generate your requested outputs. We send only the data needed to fulfill your request. These providers process the data under their respective API data-usage terms, which, as of the date of this policy, state that API inputs are not used to train their models by default. You should not include personal data about third parties, trade secrets you are unwilling to transmit to a processor, or regulated data in your inputs.

5. Email Communications

Transactional email (account verification, receipts, payment confirmations, report notifications) is delivered through Resend, our email service provider, which processes your email address and message content on our behalf. Marketing emails, if any, are sent only with your consent where required, and every marketing email contains an unsubscribe link.

6. Cookies and Session Authentication

We use cookies and similar technologies primarily for session authentication — keeping you signed in securely — and for essential functionality such as security tokens and load balancing. We may use limited analytics cookies to understand product usage. Essential cookies cannot be disabled without breaking sign-in; where required by law, non-essential cookies are used only with your consent. You can manage cookies through your browser settings.

7. Sharing and Disclosure

We share data only with: (a) service providers acting on our behalf, including hosting infrastructure, NOWPayments (payments), Resend (email), and AI model providers (OpenAI/Anthropic, when configured); (b) authorities where disclosure is required by law or necessary to protect rights, safety, or the integrity of the Service; and (c) a successor entity in the event of a merger, acquisition, or asset sale, subject to this policy. Each provider receives only the data necessary for its function.

8. Data Retention

We retain account and business profile data for as long as your account is active and as needed to provide the Service. Payment order metadata is retained as required for accounting, tax, and anti-fraud obligations. Usage logs are retained for a limited period for security and diagnostics. When data is no longer needed, it is deleted or anonymized.

9. Your Rights and Data Deletion

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, object to or restrict certain processing, and request a copy of your data in a portable format. You can delete your account and associated data on request by contacting support@vantaroi.ai from your registered email address. We will action verified deletion requests within a reasonable period, except where retention is required by law (for example, payment records kept for tax purposes). If you are in a jurisdiction with a data protection authority, you also have the right to lodge a complaint with that authority.

10. Security

We use industry-standard safeguards, including encryption in transit, hashed credentials, access controls, and least-privilege practices. No system is perfectly secure, and we cannot guarantee absolute security; please use a strong, unique password.

11. International Transfers and Children

Our providers may process data in countries other than your own; where required, we rely on appropriate safeguards for such transfers. The Service is not directed to children under 18, and we do not knowingly collect their data.

12. Changes and Contact

We may update this policy from time to time; material changes will be announced by email or in-app notice. Questions or requests: support@vantaroi.ai.