Privacy Policy
Effective July 14, 2026
This policy explains, in plain language, what information Venue Wright collects, why, and what we do (and don't do) with it.
The short version
- We collect what we need to run the Service — nothing sneaky.
- We never sell your data, and we don't use your event data for advertising.
- Your card number goes to Stripe; it never touches our servers.
- Photos you import with AI features are processed by our AI provider to extract the data, then the extraction is shown to you for review.
- You can export your data or ask us to delete it, any time.
What we collect
- Account information:your name, email address, and password (stored as a cryptographic hash — we can't read it).
- Workspace data you enter:venues, rooms, inventory, events, BEOs, clients, menus, floor plans, staffing sheets. This is your business's operational data; we store it to make the product work.
- Billing information: your plan, subscription status, and billing history. Card details are collected and stored by Stripe, our payment processor — not by us.
- Technical basics: standard server logs (IP address, browser type, pages requested) used for security and debugging, and cookies strictly needed to keep you signed in. We do not run third-party advertising or tracking cookies.
How we use it
- To provide, secure, and improve the Service.
- To bill you correctly and prevent fraud (via Stripe).
- To email you about your account — receipts, important changes, support replies. We don't send marketing email unless you opt in, and you can always unsubscribe.
AI features and your uploads
When you use photo import (for paper BEOs or inventory counts), the image you upload is sent to our AI provider, Anthropic, to extract the information in it. The extraction comes back to you as a proposal to review and confirm. Per Anthropic's commercial terms, API inputs are not used to train their models. Don't upload documents you don't have the right to process.
Who else touches the data (service providers)
We run on a small set of well-known providers, each handling only what their job requires:
- Supabase — database and authentication (where your workspace data lives, encrypted in transit and at rest).
- Vercel — application hosting.
- Stripe — payments and subscription billing.
- Anthropic — AI extraction, only when you use an AI import feature.
We share data with no one else, except if required by law — and if a legal demand for your data ever arrives, we'll tell you unless we're legally barred from doing so.
Share links
If you create a client share link, anyone who has that link can view that event's client-facing details (schedule, menu, estimated charges) without logging in. Links use long unguessable codes, and you can revoke any link at any time from the event page. Internal notes and staffing are never shown on shared pages.
Retention and deletion
- We keep your data while your account is active, including through trial expiry and cancellation, so you can come back without losing work.
- To permanently delete your account and workspace data, email support@venuewright.com from your account email. We'll complete deletion within 30 days, except records we must keep for legal or tax reasons (like invoices).
Your rights
Depending on where you live (including California), you may have the right to access, correct, export, or delete your personal information, and to know what we collect. Email support@venuewright.com and we'll honor these requests for everyone, not just where the law requires it. We do not sell personal information, so there is nothing to opt out of selling.
Children
The Service is for businesses and isn't directed at children under 16. We don't knowingly collect their information.
Changes to this policy
If we make material changes, we'll notify you by email or in the app before they take effect, and we'll keep prior versions available on request.
Contact
Venue Wright · support@venuewright.com