Privacy Policy

Effective January 3, 2026

1. Information We Collect

Account and Contact Information

We may collect information you provide when creating an account, requesting a demo, contacting us, subscribing to updates, or using the Services. This may include your name, email address, organization, title, password or authentication credentials, and communication preferences.

Customer Content and Uploaded Materials

We collect the information you choose to submit to the Services, including prompts, diligence questions, case names, uploaded documents, pitch decks, data-room files, patent or IP materials, company materials, spreadsheets, images, notes, and other files or text you provide.

This information may include confidential business information, scientific or technical information, IP-related information, and personal information about founders, employees, advisors, investors, or other individuals.

Generated Outputs

We collect and store outputs generated through the Services, including diligence reports, investment memos, competitive landscapes, analyses, summaries, recommendations, annotations, on-canvas content, and related generated materials.

Usage and Technical Information

We may collect information about how you use the Services, including timestamps, feature usage, pages viewed, browser type, device information, IP address, approximate location derived from IP address, system logs, error logs, and usage or metering data.

Feedback and Communications

We collect information you provide through ratings, comments, support requests, emails, demo forms, survey responses, and other communications.

Payment Information

If paid features are enabled, payment processing may be handled by third-party payment providers. We do not store full payment card details. We may receive limited billing and transaction information, such as plan type, subscription status, billing period, payment confirmation, and customer identifiers from the payment processor.

2. How We Use Information

We use information to:

• Provide, operate, maintain, and improve the Services.
• Create and administer user accounts.
• Process uploaded materials and generate requested outputs.
• Build, save, and display diligence cases, reports, and analyses.
• Respond to inquiries, support requests, and demo requests.
• Send account, service, security, billing, and operational communications.
• Manage subscriptions, credits, billing, and payments where applicable.
• Monitor usage, troubleshoot errors, secure the Services, and prevent abuse.
• Improve product reliability, usability, quality, and features.
• Enforce our Terms of Use and other agreements.
• Comply with legal obligations and protect our rights, users, and Services.

3. AI Processing and Model Training

To provide the Services, we may process Customer Content and related context through AI model providers, infrastructure providers, search providers, databases, and other service providers that help generate outputs.

Unless we expressly state otherwise in a separate written agreement:

• We do not use Customer Content to train or fine-tune public AI models.
• We do not use Customer Content to train models shared across customers without the customer's permission.
• We do not sell Customer Content.
• We do not share confidential uploaded materials with other users.
• We use Customer Content to provide, secure, support, maintain, and improve the Services.

If we ever propose to use Customer Content for broader model training beyond providing or improving the Services, we will update our terms and obtain any consent required by applicable law or contract.

4. How We Share Information

We may share information in the following limited circumstances.

Service Providers

We may share information with service providers that help us operate the Services, such as cloud hosting providers, database providers, authentication providers, AI model providers, payment processors, email providers, analytics or logging providers, and support tools. These providers are authorized to process information only as needed to provide services to us and are subject to contractual confidentiality, security, or data-processing obligations.

AI, Search, and Public Data Sources

To generate outputs, the Services may use AI model providers, public research databases, regulatory sources, scientific literature sources, patent databases, trial registries, company filings, and web search or retrieval tools. Search terms or query context derived from your input may be sent to these services where needed to perform the requested analysis.

Legal, Safety, and Compliance

We may disclose information if we believe disclosure is necessary to comply with law, legal process, regulatory requests, court orders, subpoenas, or government requests; to protect the rights, property, or safety of VentriLinks, users, or others; to investigate fraud, security issues, or misuse; or to enforce our Terms of Use.

Business Transactions

If VentriLinks is involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar business transaction, limited information may be disclosed as reasonably necessary for transaction diligence, subject to appropriate confidentiality protections. Any transfer of Customer Content will remain subject to this Privacy Policy or comparable protections, unless we notify you otherwise as required by applicable law.

With Your Direction or Consent

We may share information when you direct us to do so, authorize us to do so, or otherwise consent.

5. Cookies and Similar Technologies

We may use cookies, local storage, or similar technologies to provide essential functionality, maintain sessions, remember preferences, improve performance, and understand use of the Services.

If we use analytics, advertising, or tracking technologies that require additional notice or consent under applicable law, we will provide appropriate notice and choices.

6. Data Retention

We retain information for as long as reasonably necessary to provide the Services, maintain accounts, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and support legitimate business purposes.

Users may be able to delete cases, uploaded documents, and generated content through the Services. Deletion may be subject to technical limits, backup retention, legal obligations, and audit or security requirements.

7. Security

We use commercially reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, loss, misuse, alteration, or disclosure. These may include encryption in transit, access controls, authentication, private storage, logging, and other security measures.

No system is completely secure. We cannot guarantee absolute security of information transmitted to or stored by the Services.

8. Your Responsibilities

You are responsible for ensuring that you have the right to upload, submit, or process any information you provide to the Services.

Unless covered by a separate written agreement with VentriLinks, you should not upload protected health information, patient-identifiable information, human-subject data requiring special handling, or other highly regulated sensitive data.

9. Your Privacy Rights

Depending on where you reside, applicable law may give you rights to access, correct, delete, restrict, object to, or receive a copy of certain personal information. You may also have rights to withdraw consent or opt out of certain uses.

Residents of certain U.S. states, the European Economic Area, the United Kingdom, and other jurisdictions may have additional rights under applicable privacy laws.

To exercise rights, please contact us. We may need to verify your identity before responding.

10. International Data Transfers

VentriLinks and its service providers may process information in the United States and other countries. If required by applicable law, we use appropriate safeguards for international transfers of personal information.

11. Children

The Services are not directed to children under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided personal information to us, please contact us.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will update the effective date and, where required, provide notice of material changes.

13. Contact

For privacy questions or requests, contact: