Privacy Policy

1. Introduction

Vantura ("we," "us," or "our") provides a cloud-based inventory management and valuation platform designed for small and medium businesses. We are committed to protecting your privacy and handling your data with transparency. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it.

2. Information We Collect

We collect the following categories of information:

• Account information: When you sign up, we collect your name, email address, and password. If you sign up via Google, we receive your name and email from your Google account.
• Inventory data: Products, stock levels, locations, purchase orders, transfers, and other data you enter into Vantura to manage your inventory.
• Usage analytics: We use Plausible Analytics, a privacy-friendly analytics tool that does not use cookies and does not track individual users. We collect aggregate data such as page views, referral sources, and browser type.
• Payment information: Billing is processed by Stripe. We do not store your credit card numbers. Stripe handles all payment data in compliance with PCI-DSS standards.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Vantura platform
• Authenticate your identity and manage your account
• Send transactional emails (welcome, password reset, workspace invitations)
• Send onboarding emails to help you get started (you can unsubscribe at any time)
• Process billing and subscription management
• Respond to support requests
• Analyze aggregate usage patterns to improve the product

4. Third-Party Services

We use the following third-party services to operate Vantura:

• Firebase Authentication (Google): Handles user authentication, including email/password and Google sign-in. Firebase processes your email address and authentication tokens.
• Stripe: Processes subscription billing and payments. Stripe receives your payment method details directly. We never see or store your full card number.
• Plausible Analytics: Provides privacy-friendly website analytics. Plausible does not use cookies, does not collect personal data, and is fully GDPR compliant.
• Amazon S3: Stores file uploads such as product images and data backups. Files are encrypted at rest using AES-256.

5. Data Storage and Security

Your inventory data is stored in dedicated PostgreSQL databases with tenant-level isolation. All data is encrypted at rest and in transit (TLS 1.2+). Database backups are stored in Amazon S3 with server-side encryption.

We follow industry best practices for security, including role-based access controls, audit logging, and regular security reviews. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Delete your account and associated data
• Export your inventory data at any time via CSV export

To exercise any of these rights, contact us at privacy@vantura.com.

7. Data Retention

Active accounts: Your data is retained for as long as your account is active and your subscription is current.

Deleted accounts: When you delete your account, we retain your data for a 30-day grace period in case of accidental deletion. After the grace period, all personal data and inventory data are permanently purged from our systems and backups.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Effective date" at the top of this page. For significant changes, we will notify you via email or an in-app notification. Your continued use of Vantura after changes take effect constitutes acceptance of the updated policy.

9. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at privacy@vantura.com.