Privacy policy
The short version
- We only collect what Venstra needs to work: your account details, your company details, and the programmes and photos you put in.
- Your programmes are private to your company (or to you, for a personal account). Other companies using Venstra cannot see them.
- We don't sell your data, show adverts, or use tracking or analytics cookies.
- Your data is stored in the UK (London) with our database provider.
- You can ask to see, correct, download or delete your data at any time.
1. Who we are
Venstra is a construction programming service and a trading name of AGH Management Limited, a company registered in England and Wales (company number 16150527), of 103 Washway Road, Sale, England, M33 7TY ("we", "us").
For anything about this policy or your data, contact us at aghmanagement25@outlook.com.
2. Our role, and your company's role
Account information (your name, email and login): we decide how this is used, so we are the controller for it.
Project information (programmes, notes, delay records, photos and company details your team adds): your company decides what goes into Venstra and why, so your company is the controller. We store and process it on your company's behalf, as a processor. If you have a question about project information, such as a photo that shows you, you may need to speak to the company that uses Venstra. We will help them respond.
For a personal account, you are in control of your own project information.
3. What we collect
| Type | What it includes | Where it comes from |
|---|---|---|
| Account | Your name, email address and password. Passwords are stored securely hashed; we cannot see them. | You, when you sign up |
| Company details | Company name, logo, address, phone, email and website; invite code; who is in your team and their role. | Your company admin |
| Programme data | Tasks, dates, durations, links, progress, baselines, calendars, delay causes and notes. | You and your team |
| Photos | Photos you upload as evidence, and the date, time and GPS location saved by the camera. If you allow it, your device's location when the photo is added. | You and your team |
| Settings | Your reminder day and time, and the last workspace you used. | You |
| Technical | Sign-in times, IP address and browser type held in our providers' security logs. | Automatically |
Photos can include people and locations, so please only upload photos you have a reason to keep as a record of the works.
4. How we use it
- To provide Venstra: creating your account, saving and showing your programmes, sharing them with your team, and producing reports and exports. Lawful basis: contract.
- To send account emails: confirming your email and resetting your password. Lawful basis: contract.
- To keep Venstra secure and working: preventing misuse and fixing faults. Lawful basis: legitimate interests.
- Device location for photos: only when you allow it in your browser. You can say no, or turn it off in your browser settings at any time. Lawful basis: consent.
We don't use your data for marketing, and we don't sell or rent it to anyone.
5. Who we share it with
We use a small number of trusted providers to run Venstra. They can only use your data to provide their service to us.
| Provider | What they do | Where |
|---|---|---|
| Supabase | Database, sign-in and photo storage | UK (London). Supabase, Inc. is based in the US. |
| Netlify | Hosts the Venstra website | Global network, based in the US |
| Anthropic | Only if your company uses the optional "Read with Claude" PDF import: the programme PDF is sent to read its tasks | US |
Where data is handled outside the UK, our providers use approved safeguards, such as the UK International Data Transfer Addendum or Standard Contractual Clauses.
We may also share data if the law requires it, or to protect our rights or someone's safety.
6. How long we keep it
- Account: while your account is open. If you ask us to delete it, we do so within 30 days.
- Project information: until your company deletes it, or until the company's workspace is closed. Deleted programmes and photos are removed straight away; copies in backups are overwritten within 7 days.
- Security logs: held by our providers for a limited time, usually under 90 days.
7. Cookies and storage on your device
Venstra doesn't use advertising, tracking or analytics cookies. It stores a few things in your browser so it works properly:
- your sign-in session, so you stay logged in;
- preferences such as timescale, column view and the last programme you opened.
These are strictly necessary for the service, so we don't ask for consent. Signing out removes your session.
8. Keeping your data safe
- All connections use encryption (HTTPS).
- Database rules mean each company can only reach its own programmes and photos, and personal workspaces can't be joined by anyone else.
- Photos are stored privately and are only shown to signed-in members of the company through short-lived links.
If a data breach affects you, we will tell you and the ICO where the law requires it.
9. Your rights
Under UK data protection law you can ask us to:
- give you a copy of your data;
- correct data that is wrong;
- delete your data;
- restrict or object to how we use it;
- give you your data in a format you can take elsewhere. You can also export any programme yourself as Excel or PDF.
Email aghmanagement25@outlook.com. We will reply within one month. There is no charge.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. We'd appreciate the chance to put it right first.
10. Children
Venstra is a business tool and isn't intended for anyone under 18.
11. Changes to this policy
If we make important changes, we will show a notice in Venstra or email account holders before they take effect. The date at the top shows when this policy was last updated.