Privacy Policy

1. Who we are

Valentera is a trading name of Valentera Ltd, a company registered in England and Wales. We provide a marketing operating system for UK ecommerce businesses. Our registered address is available on request.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the data controller. Contact us at privacy@valentera.ai.

2. What data we collect

We collect and process the following categories of personal data:

• Account data: name, email address, company name, role.
• Authentication data: hashed passwords, session tokens.
• Integration data: API credentials you provide to connect third-party platforms (Google Analytics, Google Search Console, Klaviyo, Magento, Shopify, Meta Ads, and others).
• Business data: ecommerce metrics, product data, customer segments, campaign performance, and other data retrieved through your connected integrations.
• Usage data: pages visited, features used, AI interactions, timestamps.
• Technical data: IP address, browser type, device information.

3. How we use your data

• To provide and operate the Valentera platform and its modules.
• To retrieve and analyse data from your connected integrations (Google Search Console, Google Analytics, Klaviyo, etc.) on your behalf.
• To generate AI-powered recommendations, insights, and forecasts.
• To send transactional emails (account notifications, weekly digests, alerts).
• To improve the platform through anonymised, aggregated usage analytics.
• To comply with legal obligations.

4. Google API Services

Valentera's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only request access to data necessary for the features you use (Google Search Console data, Google Analytics metrics).
• We do not sell your Google data to third parties.
• We do not use your Google data for advertising purposes.
• We store Google integration data securely with encryption at rest and in transit.
• You can revoke access at any time through your Google Account permissions or through the Valentera Integrations settings.

5. Legal basis for processing

• Contract: processing necessary to provide the services you have subscribed to.
• Consent: where you have explicitly connected an integration or opted in to communications.
• Legitimate interest: platform improvement, security, and fraud prevention.

6. Data sharing

We do not sell your personal data. We share data only with:

• AI providers: Anthropic (Claude) and OpenAI, for generating recommendations and insights. Data sent to AI providers is limited to the minimum necessary and is not used for model training.
• Infrastructure providers: hosting, email delivery (Resend), and database services, all within the EEA or under adequate safeguards.
• Legal requirements: where required by law or to protect our rights.

7. Data retention

We retain your data for the duration of your subscription plus 90 days. Integration credentials are deleted immediately upon disconnection. You may request deletion of your account and all associated data at any time.

8. Security

We implement appropriate technical and organisational measures including: encryption of data at rest and in transit, row-level security ensuring strict tenant isolation, encrypted credential storage, and regular security reviews.

9. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate personal data.
• Erase your personal data ("right to be forgotten").
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time.

To exercise any of these rights, contact privacy@valentera.ai.

10. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies.

11. Changes to this policy

We may update this policy from time to time. We will notify you of material changes via email or through the platform.

12. Contact

For privacy-related enquiries: privacy@valentera.ai

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.