Privacy Policy

Venomiq Platform

Last updated: 25/06/2026

Confidentiality and security are core values of Venomiq. We are committed to always protecting the privacy of our users and to collecting only the information strictly necessary for the operation of our platform. This Privacy Policy explains how we collect, use, and protect your personal data when you use the Venomiq market intelligence platform.

This document describes:

  • Who is responsible for processing your data.
  • The purposes for which we collect the data we request.
  • The legal basis for processing.
  • How long we retain your data.
  • With whom your data may be shared.
  • What rights you have regarding your personal data.

1. Data Controller

ETIC AI S.L.
721177V
Carretera d'Engolasters, s/n, Esc. 2, -1 -1
AD700 – Escaldes-Engordany
Andorra
Privacy contact: contact@venomiq.com

Hereinafter referred to as "we", "us", or the "Data Controller".

2. Scope of This Privacy Policy

This Privacy Policy applies to all personal data collected and processed by Venomiq through the Platform. It applies to:

  • Users of the Platform (analysts, managers, and administrators who use Venomiq on behalf of their organisation — referred to as "Employees" or "Users").
  • Website visitors who interact with our contact forms.

Venomiq is a B2B enterprise market intelligence platform. Each client organisation operates in an isolated data environment.

3. Personal Data Collected

"Personal Data" refers to any information that can identify you directly or indirectly.

3.1 Data provided directly by Users

When you register or use the Platform as an Employee/User, we collect:

  • Identity data: full name, email address, password.
  • Professional data: role, assigned business area or region.

3.2 Data entered by Users into the Platform

As part of market intelligence management, Users may enter or upload:

  • Information about competitors, suppliers, and partners (company names, URLs, sectors).
  • Search queries and market tracking criteria.
  • Annotations and tags on knowledge graph entities.

3.3 Data collected automatically

When you use the Platform, we may automatically collect:

  • Log data: access logs and error reports for platform security and maintenance.
  • Usage data: interactions with search and analysis features, to improve user experience.

4. Purposes of Processing

Personal data collected through the Platform is used for the following purposes:

4.1 Platform access and user management

  • To register and authenticate Users on the Platform.
  • To manage role-based access controls.
  • To maintain data isolation per organisation.

4.2 Market intelligence functionality

  • To enable Users to track and analyse competitors, suppliers, and partners.
  • To build and maintain knowledge graphs on market entities.
  • To generate alerts, reports, and competitive intelligence dashboards.

4.3 Platform improvement and security

  • To monitor platform performance and ensure service availability.
  • To protect against unauthorised access, fraud, and security threats.
  • To develop, test, and improve Platform features.

4.4 Communications

  • To send service-related communications (updates, security alerts, support messages).
  • To send commercial communications about new features or services, where you have provided explicit consent.

5. Legal Basis for Processing

  • Contractual necessity: Processing required to provide the Platform services in accordance with the subscription agreement.
  • Legitimate interests: Processing for platform security, fraud prevention, and quality improvement.
  • Consent: For optional commercial communications.
  • Legal obligation: Where processing is required to comply with applicable law.

6. Data Recipients

Your personal data may be shared with:

  • Infrastructure and technology providers: cloud hosting and database providers who process data on our behalf under data processing agreements.
  • Analytics providers: services used to monitor Platform performance and usage.
  • Authorised personnel: employees and contractors of Venomiq who require access to provide support or maintain the Platform.
  • Legal authorities: where required by applicable law or a binding order from a competent authority.

7. International Data Transfers

Some of our infrastructure providers may be located outside the European Economic Area (EEA). In such cases, we ensure that appropriate safeguards are in place (such as Standard Contractual Clauses approved by the European Commission) to protect your personal data in accordance with the GDPR.

8. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Policy, or as required by law.

All personal data is retained exclusively for the duration of the active subscription or contractual relationship with the client organisation. Upon termination, all personal data associated with the account is permanently deleted from our systems.

Commercial communications consent data is retained until consent is withdrawn.

9. Your Rights

Under applicable data protection law (including the GDPR), you have the following rights:

  • Right of access: to request a copy of the personal data we hold about you.
  • Right to rectification: to request correction of inaccurate or incomplete data.
  • Right to erasure: to request deletion of your data where it is no longer necessary.
  • Right to restriction: to request that we limit the processing of your data in certain circumstances.
  • Right to data portability: to receive your data in a structured, machine-readable format.
  • Right to object: to object to processing based on legitimate interests or for direct marketing purposes.
  • Right to withdraw consent: to withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at: contact@venomiq.com, indicating "Personal Data Request" in the subject line.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the relevant supervisory authority (e.g. the AEPD at www.aepd.es).

10. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include:

  • Data isolation per organisation using multi-tenant architecture.
  • Role-based access controls.
  • Encrypted data transmission (TLS/HTTPS) for all Platform communications.
  • Encrypted storage of credentials and sensitive configuration data.
  • Access logging and security monitoring.

11. Cookies

The Platform uses technical and functional cookies to ensure proper operation and maintain user sessions.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Where changes are material, we will notify Users through the Platform or by email.

13. Contact

For any questions or requests regarding this Privacy Policy, please contact:

ETIC-AI S.L
Attn: Data Protection
Email: contact@venomiq.com

Publication date: 25/06/2026 | Version 1.0