What we collect, why, and what we do not do with it.

Last updated: September 2, 2026

This page describes what data VentureFrame ("we") collects from the people who use ventureframe.net ("you"), how we use it, and who else can see it. Written in plain English, not lawyer-speak.

What we collect

When you visit the marketing site: anonymous visit analytics (page views, referrer, browser type) via Google Analytics and Microsoft Clarity. No personally identifying information unless you fill out a form.

When you start an intake: the business name and industry you type, the 20 answers you give, and a browser-scoped anonymous session token. No email or account yet.

When you unlock your analysis: the email address you enter. That creates a VentureFrame account tied to that email.

When you pay: Stripe handles the transaction. We receive a confirmation event with your email and the tier you bought. We never see or store your card number.

When you sign in later: a session token (JWT from Supabase Auth) is stored in your browser's local storage. That's how you stay signed in across visits.

What we do with it

Your intake and diagnostic content is used to generate your analysis and to save it to your account so you can come back to it. That's it. It is not used to train any AI model. It is not shared with advertisers. It is not sold.

Aggregate, anonymized usage patterns (e.g. "how many diagnostics ran this month, average generation time") are used internally to run the business.

Who else can see your data

• Anthropic, the underlying language model provider. Your intake answers are sent to Claude to generate the analysis. Anthropic's data policy applies (see their privacy policy).
• Supabase, where your account and analyses are stored (Postgres, US region, row-level security keyed to your account).
• Cloudflare, routes traffic to and from the engine.
• Stripe, processes payments. They see billing details; we see only the confirmation.
• Netlify, hosts the static marketing site and the app front-end.
• Operator backup, when a client finishes an intake, a notification is emailed to the VentureFrame operator so the lead is not missed. That notification contains the client name, business, email and how many questions were answered. It does not contain the answers themselves. The full intake is stored only in the database described above.

We do not share your data with any other third party. We have never received a law enforcement request; if we ever do, we will comply only with a valid legal order and will notify you if we are permitted to do so.

Cookies and local storage

The marketing site uses one first-party analytics cookie (via a same-origin proxy to Google Analytics, the tracker never sees your IP directly) and one Microsoft Clarity session recording cookie for UX research. Neither is used for ad targeting.

The app uses browser local storage to keep your session token and any in-progress intake between visits. Clearing your browser data will sign you out and drop any unfinished intake.

Your rights

You can delete your account and all associated data at any time by emailing support@ventureframe.net. We'll process the deletion within 7 days and confirm by return email. Paid diagnostics that were part of your account will be permanently removed.

If you're in the EU/UK, you have GDPR rights (access, correction, deletion, portability). Same email address. Same response window.

Children

VentureFrame is a B2B product for business owners. We do not knowingly collect information from anyone under 16. If you believe we have, email us and we'll delete it immediately.

Changes to this policy

If we change how we collect or use data, we update this page and notify active account holders by email at least 14 days before the change takes effect.

Questions: support@ventureframe.net. Jake replies himself.