Privacy Policy

This policy explains how Venturi (SAS, Paris RCS 941 168 551, 11 boulevard Saint-Martin, 75003 Paris) processes the personal data of visitors to its website (negoflow.ai) and users of its NegoFlow application, in compliance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act. NegoFlow is a trademark operated by Venturi.

1. Data controller

Venturi is the data controller for the personal data described below (data of site visitors and holders of application accounts).

Please note: data that our business customers enter or import into the application as part of their activity (commercial operating data) is processed by Venturi as a data processor, on behalf of those customers, who remain the data controllers. These processing activities are governed by the contract / data processing agreement (DPA) entered into with each customer, not by this policy.

Contact: admin@venturi-ai.com

2. Data collected, purposes, and legal bases

We process the following categories of data:

• Identity and contact details (name, email, company): creation and management of the user account. Legal basis: performance of the contract.
• Connection and application usage data: provision, security, and improvement of the service. Legal basis: legitimate interest / performance of the contract.
• Billing data: invoicing and accounting obligations. Legal basis: legal obligation.
• Contact form / demo request data: responding to your request. Legal basis: legitimate interest / consent.
• Browsing data (cookies): operation and audience measurement of the site. Legal basis: consent (except for strictly necessary cookies).

3. Recipients and data processors

Data is accessible to Venturi's authorized teams and its technical data processors, who operate in the following categories:

• database hosting (European Union);
• hosting of the negoflow.ai showcase site and the NegoFlow application;
• automation of internal processing;
• generation of PDF documents, including invoices (processing carried out within the European Union);
• email and office tools.

These providers act only on Venturi's instructions and offer guarantees of GDPR compliance.

The named list of these data processors and their hosting locations is provided to our customers as part of the data processing agreement (DPA) binding them to Venturi, and to any data subject upon simple request to admin@venturi-ai.com.

4. Transfers outside the European Union

The application and database are hosted within the European Union. Certain providers linked to the showcase site and our internal tools may nonetheless process data in the United States, in particular the showcase site's host and our email provider. These transfers are governed by appropriate safeguards: standard contractual clauses of the European Commission and/or certification under the EU-US Data Privacy Framework.

5. Retention period

• Account data: for the duration of the contractual relationship, then archived for up to 3 years.
• Billing data: 10 years (accounting obligation).
• Prospecting / contact data: 3 years from the last contact.
• Cookies: 13 months maximum.

6. Your rights

You have the right to access, rectify, erase, restrict, and object to processing, as well as the right to data portability and the right to define post-mortem directives.

To exercise them: admin@venturi-ai.com. Proof of identity may be requested.

You may also lodge a complaint with the CNIL (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr).

7. Cookies

The site uses cookies that are strictly necessary for its operation, as well as, subject to your consent, audience measurement cookies. You can adjust your preferences at any time via the cookie management banner.

8. Changes

Venturi may update this policy. The applicable version is the one published on the site at the time of your visit.