Privacy Policy

Ventura is operated by K2 Studio Corp. For the personal data of our own account holders we act as a controller. For the material you upload into the platform, you are the controller and we process it on your instructions.

Privacy questions and requests go to hello@k2studio.co.

• Name, email address, and your role at your firm.
• Authentication records. Sign-in is by emailed one-time code, with password sign-in also available.
• Product usage events and error diagnostics, used to operate and debug the platform.

• Pitch decks, financial models and other diligence material you choose to upload.
• Metrics and structured data extracted from those documents.
• Valuations, memos, market maps, risk flags and other generated outputs.
• The questions you ask the assistant, and its answers.

You decide what goes in. Under the Terms of Service you must not upload personal data beyond what diligence reasonably requires, and must not upload special-category data such as health or biometric information.

This is the category most privacy policies in our category leave out, so we are explicit about it.

To give you context on a founding team, Ventura retrieves professional information about founders and team members from a third-party professional data provider. Those people are not Ventura users and have no relationship with us.

We retain occupational information only:

• Current position and current employer.
• Employment history and education.
• Skills, a professional headline, and a short summary.

We do not request or store their email addresses, phone numbers or date of birth, and we do not seek special-category data about them. That exclusion is built into the system rather than being a matter of policy.

Running the platform

Performance of our contract with you — we cannot provide the service without processing your account and the material you upload.

Security and abuse prevention

Our legitimate interest in keeping the platform and its contents secure.

Founder and team information

Our legitimate interest, and that of our investor customers, in assessing the teams behind companies being evaluated. We limit this to occupational information and exclude contact details. Anyone can object — see Your rights.

Product analytics

Our legitimate interest in understanding how the product is used and diagnosing faults.

Ventura runs on third-party infrastructure. Providers fall into these categories:

• AI processing — document contents and the questions you ask are processed here to produce the analysis Ventura returns to you.
• Research and enrichment — public web research, and professional background information about founders and team members.
• Hosting, storage and authentication — running the platform and holding your account and documents.
• Analytics and error monitoring — product usage and fault diagnosis.
• Email delivery — sign-in codes and account notifications.

Providers process data on our instructions under written terms. Where a provider processes material you upload, we contract on terms that do not permit using it to train their models.

A current list of our named sub-processors is available to customers and prospective customers on request.

• Where we are legally required to, such as a court order or lawful request.
• To establish or defend legal claims, or to protect the safety and rights of users.
• In connection with a merger, acquisition or sale of assets — you would be told before your data became subject to a different policy.

We keep your account information for as long as your account is open, and material you upload for as long as you keep it in the platform or your subscription is active.

We are currently defining fixed retention periods, including a shorter period for professional information about people who are not our users. Until those are published, you can ask us to delete anything we hold and we will action it. We would rather tell you this is in progress than publish a schedule we do not yet enforce.

Ventura and its sub-processors operate in the United States, Canada and the European Union, so your data is transferred to and processed in those locations. Where data protection law requires a transfer mechanism for this, we put appropriate safeguards in place and will provide details on request.

• Ask what we hold about you, and get a copy.
• Have inaccurate information corrected.
• Ask us to delete what we hold.
• Object to processing we carry out on the basis of legitimate interests — including the professional profile information described above.
• Ask for your data in a portable, machine-readable form.
• Withdraw consent where we relied on it.
• Complain to your data protection authority. In Canada that is the Office of the Privacy Commissioner.

Send requests to hello@k2studio.co. Requests — including account deletion and a full copy of your data — are actioned by our team rather than from a control in the product, and we aim to respond within one business day.

If you are a founder or team member and do not want your professional information held in Ventura, write to the same address and we will remove it.

• Essential cookies keep you signed in and protect the platform. These cannot be turned off without breaking sign-in.
• Analytics cookies tell us how the product is used and when it fails.

We do not use advertising or cross-site tracking cookies. You can block cookies in your browser, though sign-in will not work without the essential ones.

We may update this policy. If a change materially affects how we handle your information we will tell you by email or in the platform before it takes effect.