What we do with your data.

Your account. An email address, a password, and the name you give us, which is what your team calls you. There is no social sign-in and no phone number.

Your business. The facts you give during onboarding and afterwards: what the business does, who it serves, how it should sound, and how much of its work you want handled without asking you first.

Your conversations. The messages you exchange with your AI employees, the files and images you attach, and the voice notes you record. Voice notes are transcribed so your team can read them.

What your team does. Every action an employee proposes, every approval or denial you give, every email the business sends with your approval, every website change, and the daily report. This is the product’s own history and it is kept so you can see it.

Leads and customers of your business. When someone fills in the contact form on a website we host for you, or emails your business, we store what they sent so your team can reply. You are responsible for how your business handles those people’s data.

The phone app. If you allow notifications, a push token that lets us reach that one device. It is deleted when you sign out or turn notifications off. The app carries no analytics, no advertising identifier and no crash reporter.

Nothing that tracks you across other companies’ apps or websites. No advertising SDKs, no data brokers, no location, no contacts, no health or financial data. We do not sell data and we do not build profiles of you for anyone else.

To run your business: your AI employees read your messages, your business facts and your team’s history in order to do their work, and to remember what they have already done.

To keep you in control: approvals, the daily report and notifications exist so nothing goes out in your business’s name that you did not agree to.

To keep the service working: operational logs of requests and errors, kept briefly and read only when something breaks.

Midventura runs on a small number of infrastructure providers, each under its own data-processing terms. Your data reaches them only to the extent needed to do the job named here.

AI models. Your messages, business facts and attached images are sent to a model provider (currently OpenAI) to generate your team’s replies and work. We use API access, under terms that do not allow the provider to train on your data.

Hosting and storage. The application and your website run on Vercel; the database is hosted on Neon; attachments, voice notes and website images are stored on Cloudflare R2. Scheduled work runs through Inngest.

Email. Messages your business sends, and the daily report, go through Resend.

The phone app. Notifications and app updates are delivered through Expo’s push and update services, and Apple’s notification service on iOS.

We will name a provider here before we start sending it your data, not after.

You can connect a LinkedIn profile, a Facebook Page and the Instagram professional account linked to that Page, so that a post your team wrote and you approved can be published there, scheduled, and its public comments read and answered. Connecting is your action, through the network’s own sign-in; nothing is connected on your behalf.

What we store. The access token the network issues, encrypted at rest; the account’s id and display name so you can see which account is connected; and the scopes granted. We never store your Facebook, Instagram or LinkedIn password. Tokens are used only to act on the account for the purposes above and are never shown to you, your team, or a model.

What we read from the network. The list of Pages you manage (to let you pick one), and public comments on the Page’s and account’s own posts. Comments are shown to your team so a reply can be drafted for your approval; they are treated as untrusted text and are not stored beyond the conversation they were read into.

Disconnecting. Settings → Connected accounts lets you disconnect any network at any time. Disconnecting revokes our ability to act on the account immediately; the stored token is discarded, and a scheduled post that has not gone out is refused when its time comes. You can also remove Midventura from your Facebook account’s Business Integrations or your LinkedIn Permitted Services, which has the same effect on our side the next time we try to act.

For as long as your account exists. Your team’s memory is the history of your business, so we do not prune it while you are running the business.

Operational logs are kept for a short, fixed period and then discarded. Backups of the database are rotated on a schedule; a deleted account leaves them as they expire.

You can delete a business from its settings, and delete your whole account from Settings in the phone app or on the web. Deletion removes the account, its businesses, their conversations, files, websites and history. It is not reversible.

Deleting a business or an account also discards the tokens of every social account connected to it and cancels its scheduled posts. To remove only a connected social account, disconnect it in Settings.

You can also email us at the address below and we will do it for you.

You can ask us what we hold about you, ask for a copy, ask us to correct it, or ask us to delete it. Write to us at the address below; we answer from a person, not a form.

Midventura is intended for adults running a business. We do not knowingly collect data from anyone under 18.

When this page changes in a way that matters, we say so in the daily report and update the date at the top. The current version is always the one at this address.