Venvori Privacy Policy

Venvori (“Venvori”, “we”, “us”) operates the service at venvori.com. You can reach us about privacy, data access or deletion at support@venvori.com.

• Your name, current state or region, and any previous or associated names you choose to add so we can search records that are indexed by name.
• What you ask Venvori to look for, and preferences such as notification settings.
• Receipt photos or purchase details you choose to add manually, and any documents or confirmations you upload as evidence for a claim.
• Messages you send us for support.

When you create an account we store your email address and an authentication record so you can sign in. We record the date you gave consent for Venvori to work on your behalf. We do not ask for, and do not want, passwords to other services, Social Security numbers or full financial account numbers.

If you choose to connect a mailbox, we store connection metadata: which provider you connected, the mailbox address, when it was connected, its current status, when it was last checked, and the progress of scanning. Access credentials for connected accounts are held in encrypted form on our servers and are never exposed to your browser.

Venvori’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

What we access

• Read-only Gmail access (gmail.readonly) and your Google account email address, only after you complete Google’s consent screen yourself.
• We do not request permission to send, modify, delete or organise your mail, and we cannot do so.
• We run narrow searches for purchase, order, refund, recall, warranty, benefit and similar financial messages. For each message returned we read the sender, subject, date, labels and Gmail’s own snippet. For a message that already looks like a relevant financial event but lacks a confirmation or an amount, we also read its plain-text content so we can judge it accurately.

Why we access it

• To find money and opportunities that may belong to you.
• To verify a finding well enough that acting on it is honest rather than a guess.
• To remember your purchases so we can keep monitoring for later events such as recalls, price drops or settlements.
• To gather the evidence a specific claim requires, so we can help you act on it with your authorisation.

How we use and retain it

• Message content read during analysis is processed in memory on our servers. We do not store message bodies or full message text.
• We do retain the durable facts derived from authorised messages: the opportunity or purchase we identified, the merchant, an amount, a relevant date, our confidence, and per-message reference details such as the Gmail message identifier, the mailbox it came from and a short one-line summary derived from the subject with sensitive values redacted. These records are how Venvori keeps watching over time, so they persist until you ask us to delete them.
• Analysis of Gmail data is performed by our own deterministic software. Gmail content is not sent to a third-party AI provider and is not used to develop, improve or train generalised artificial intelligence or machine-learning models.
• We do not sell Google user data. We do not use it for advertising. We do not transfer it to others except as described under “Service providers” and “When we may have to disclose information” below.
• Human beings do not read your mail, except where you specifically ask us to look into a problem, or where we are required to for security, abuse or legal reasons.

Your control

• Connecting a mailbox is entirely your choice, and Venvori works without it.
• You can disconnect a connected mailbox at any time from your profile. Disconnecting revokes our access and deletes the stored credential for that mailbox. You can also revoke access from your Google Account permissions page.
• Findings and derived records already created stay in your account so your history is intact; you can ask us to delete them (see “Retention and deletion”).

From authorised sources — connected mailboxes, receipts you add and documents you upload — Venvori builds and keeps a normalised record of your economic life: purchases and purchase memory, transaction-related details such as merchants, amounts and dates, opportunities and deadlines we are watching, claims and cases and their status, evidence references, and outcomes. This is deliberate: it is what allows Venvori to keep watching for something useful without asking you to remember it. Amounts we surface as “possible” are estimates, not money in hand.

• To operate the service: find, verify, monitor and help you act on opportunities.
• To ask you for a decision or a detail when a step is genuinely yours to make.
• To notify you about findings, deadlines and case progress you asked to hear about.
• To keep the service secure, prevent abuse, and diagnose problems.
• To understand how the beta performs in aggregate and improve it.

Venvori never takes an action on your behalf with an outside party without your explicit, case-specific authorisation at the time.

• Account, profile, purchase, opportunity, case and evidence records are kept while your account is active.
• Message bodies from connected mailboxes are not retained.
• Disconnecting a mailbox stops future access and deletes that mailbox’s stored credential.
• You can ask us to delete your account and its associated records by emailing support@venvori.com. We will action deletion requests within a reasonable time, except where we are required to keep limited records for legal or security reasons. Copies may persist in routine encrypted backups for a limited period before being overwritten.

We use industry-standard measures to protect your information: encryption in transit, access controls that scope your data to your account, encrypted storage of connected account credentials, and server-side handling of anything sensitive so it never reaches your browser. We ask for the narrowest access that lets Venvori work. No service can promise perfect security, and we do not claim to; if a breach affects you, we will tell you as required by law.

Venvori relies on a small number of providers to operate, acting on our instructions and bound to protect your information: application and database hosting, the authorisation gateway that holds connected-account credentials, and an email delivery provider used to send messages. If you upload a receipt photo, its image is processed by a third-party model provider solely to read the items on that receipt. Gmail content is not sent to model providers.

We may disclose information where we are legally required to — for example a valid legal process, a lawful government request, or where necessary to protect rights, safety, or to investigate fraud or abuse. Where we submit a claim or enquiry on your behalf, we share only what that specific matter requires, and only after you authorise it.

Venvori is for adults. It is not directed to children under 13, and we do not knowingly collect their information. If you believe a child has used Venvori, contact us and we will delete the account.

Depending on where you live, you may have rights to access, correct, export or delete your information, and to object to certain processing. You can see much of what Venvori holds inside the app, and you can exercise these rights by emailing support@venvori.com. We will not treat you differently for exercising them.

We will update this page when our practices change and revise the date at the top. If a change materially affects how we use your information, we will make that clear rather than rely on a quiet edit.

support@venvori.com