Privacy Policy

1. Information We Collect

We collect the following information when you use Venom AI:

• Email address (provided at signup)
• Display name (provided at signup or onboarding)
• Authentication data (managed by Firebase Authentication, including hashed passwords or third-party sign-in identifiers)
• Purchase history (tiers and add-ons purchased; payment method details are processed by Stripe and not stored by us)
• Lesson progress, XP, ranks, and badges
• Lesson chat content (the messages you send to Venom and Venom's replies, stored so you can resume lessons)
• Notes you write in lessons and contact-form submissions
• IP address, browser type, device type, operating system, and approximate location derived from IP, collected automatically by our hosting and analytics providers
• Usage analytics (page views, feature interactions, lesson completions)
• Cookies and similar local-storage identifiers (see Section 4)

2. How We Use Your Information

• To provide, maintain, and personalize your account and purchased content
• To process payments and prevent fraud (via Stripe)
• To track your learning progress, XP, and rank
• To power the Venom chat experience by transmitting your messages to our API AI Provider for AI processing
• To send transactional emails (purchase confirmations, password resets, account notifications)
• To send occasional product updates about new tiers, add-ons, or platform changes; you can opt out of non-transactional emails at any time
• To improve the platform through aggregated, anonymized analytics
• To respond to support requests, refund requests, and legal notices
• To enforce our Terms of Service and protect the safety and security of the platform and its users
• To comply with our legal and tax obligations

3. Third-Party Services

We use the following third-party services to operate the platform. Each has its own privacy policy, which we encourage you to review:

• Firebase (Google) for authentication, Firestore database, Cloud Storage, Cloud Functions, and analytics
• Vercel for application hosting and edge networking; processes server logs and IP addresses
• Stripe for payment processing; handles all card data in accordance with PCI-DSS
• Google Analytics 4 for aggregated usage analytics

4. Cookies and Local Storage

We use a session cookie (__session) to maintain your authentication state, and local-storage entries to remember non-sensitive preferences such as theme and sidebar state. We use Firebase Analytics and Google Analytics cookies to understand platform usage. We do not use advertising or cross-site tracking cookies.

5. Data Storage and Security

Your data is stored on Firebase (Google Cloud) and Vercel infrastructure, primarily in U.S. regions. We use Firestore security rules and Firebase Storage rules to restrict access to your data. All communication between your browser and our services is encrypted with HTTPS. We do not sell, rent, or share your personal data to third parties for their independent marketing purposes. While we follow industry-standard practices, no system is perfectly secure; if we become aware of a breach affecting your personal data we will notify you in accordance with applicable law.

6. AI Processing of Lesson Chats

When you chat with Venom inside a lesson, your messages are sent to our API AI Provider to generate Venom's replies. The provider processes these messages under its own privacy policy and API terms. We store the conversation in your account so you can resume lessons. Do not paste passwords, API keys, credit card numbers, or other secrets into the Venom chat.

7. Data Retention

We retain your account data for as long as your account is active. If you request account deletion, we will remove your personal data from production systems within 30 days; copies may persist in encrypted backups for up to 90 additional days before being purged. Purchase records and tax-related information may be retained for up to 7 years to comply with U.S. tax and accounting laws.

8. Your Rights

You have the right to access, correct, export, or delete your personal data. You can update most profile information yourself in the settings page, or contact us through our contact page for other requests.

California residents: under the California Consumer Privacy Act (CCPA), you have the right to know what personal information we collect, the right to delete it, the right to correct it, and the right to opt out of any sale or sharing of personal information. We do not sell or share personal information as those terms are defined under the CCPA. To exercise any of these rights, contact us through our contact page.

9. Children's Privacy

Venom AI is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Users between 13 and 17 may use the platform only with parental consent and supervision; purchases must be made by a parent or legal guardian who is at least 18. If you believe a child under 13 has provided us with personal information, contact us and we will delete it.

10. Do Not Track

Some browsers send a "Do Not Track" signal. Because no industry standard exists for how to interpret these signals, we do not currently respond to them. We do, however, limit our analytics to aggregated usage data and do not run advertising trackers.

11. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with a revised "Last updated" date. For significant changes we will provide additional notice (such as an email). Your continued use of the platform after changes are posted constitutes acceptance of the updated policy.

12. Contact

For privacy-related questions, data requests, or to opt out of non-transactional emails, contact Cobra Digital Group LLC through our contact page at MakeAnythingWithAI.com/contact.