Privacy Policy

1. Who is responsible

Project Venus is operated by TanyaLabs, based in Belgrade, Serbia ("TanyaLabs", "we", "us"). This policy explains how we handle personal data when you use the Venus website, companion application, AI-generated conversations, and related features (together, the "Service"). For privacy questions or requests, email [email protected].

2. Adults only

Venus is for people who are at least 18 years old and legally able to use the Service where they live. The Service is not directed to children, and we do not knowingly seek personal data from anyone under 18. We do not ask ordinary visitors to submit identification documents. If we reasonably believe an account is ineligible or creates a child-safety risk, we may restrict it, investigate as permitted by law, and delete or preserve relevant data as legally appropriate. Contact us if you believe a minor has used Venus.

3. Information we collect

• Account data: email address, authentication identifiers, account status, and records of account-security events.
• Profile choices: your display name, companion name and age, personality selection, pet name, boundaries, and relationship preferences.
• Conversation data: messages, AI responses, conversation summaries, and information you choose to include in chat when history is enabled.
• Optional memory and improvement data: saved memories and feedback according to the controls you select. Training consent is separate from personal memory.
• Safety and preference records: AI-disclosure acknowledgement, legal-policy version, conversation preferences, boundaries, safety classifications, blocked requests, reports, and enforcement actions.
• Technical data: connection, device, browser, error, rate-limit, security, and basic service logs generated when you use the site or API.
• Email reminder records: reminder eligibility, delivery status, unsubscribe status, and privacy-protective email hashes used to honor suppression requests. Reminder emails are not personalized with conversation content.
• Communications: information you send in support, safety, privacy, feedback, or legal requests.

We do not currently sell personal data or run third-party advertising trackers on the Venus website.

4. Why we use information

• To create, authenticate, and secure accounts and provide conversations and features you request.
• To apply your boundaries, personality, history, and memory choices.
• To process feedback or training examples only when the relevant consent is enabled.
• To operate automated safety controls, investigate reports and suspected violations, enforce our Terms, protect children, and prevent fraud, abuse, or security incidents.
• To troubleshoot, measure reliability, communicate with you, and improve the Service.
• Where applicable law permits, to send occasional account follow-up reminders. Every reminder includes a way to stop future reminder emails.
• To establish, exercise, or defend legal claims; meet legal obligations; preserve records when required; and respond to valid legal requests.

Depending on where you live, our legal bases may include performing the Service you request, your consent for optional features, legitimate interests in security and service operation, and compliance with law. You may withdraw optional consent in the app without losing basic account access. Withdrawing consent does not affect processing already completed lawfully or essential safety, security, and legal processing. Follow-up reminders are sent only where permitted by applicable law, and you may stop them at any time using the unsubscribe link in the email.

5. Conversations and safety review

Messages may reveal intimate, relationship, health, or other sensitive information. Share only what you are comfortable processing through an online AI service. Do not use Venus to store passwords, payment-card numbers, government identifiers, or another person's confidential information.

Automated systems may process prompts, responses, safety signals, and related technical information to detect and block prohibited content, abuse, or security threats. When reasonably necessary, authorized personnel may review limited relevant information after a safety alert, report, support request, suspected violation, or security incident, or when law requires it. We do not promise to manually review every conversation. Opting out of model training does not turn off essential safety and security processing.

6. When we share or disclose information

We may share personal data only as described below:

• Service providers: vendors process information on our behalf to provide authentication, hosting, model inference, security, email, and other operational services.
• Legal process: we may preserve or disclose information in response to a valid subpoena, court order, warrant, or other legally binding request.
• Safety and integrity: where permitted by law, we may disclose information reasonably necessary to investigate suspected violations, prevent fraud or abuse, protect the rights and safety of a person or the public, or respond to an emergency involving a risk of serious harm.
• Reports to authorities: we may report suspected criminal conduct, including apparent child sexual exploitation, to law-enforcement or appropriate child-safety authorities and cooperate with lawful investigations. Government authorities decide whether to investigate or bring criminal charges.
• Business changes: information may be transferred as part of a merger, financing, reorganization, sale of assets, or similar transaction, subject to applicable law and appropriate confidentiality protections.

We do not disclose conversation data merely because someone asks. We assess legal requests where law allows and seek to disclose only what is reasonably necessary. Nothing in this policy limits a reporting, preservation, or disclosure duty imposed by law.

7. Service providers and international processing

We use infrastructure providers to operate Venus, including Supabase for authentication and database services, RunPod for private model inference infrastructure, and website-hosting and email-delivery providers. These providers process data to deliver contracted services to TanyaLabs. Data may be processed in countries outside your own; where required, we use appropriate contractual or legal safeguards.

Cloudflare Turnstile helps protect sign-in, sign-up, and password-reset requests from automated abuse. It processes limited browser, device, and network signals needed to distinguish people from bots. See Cloudflare's Turnstile Privacy Addendum for details.

8. Retention, preservation, and deletion

We keep account and service data while your account is active or as needed to provide Venus. You can disable conversation history, delete memories, and delete Venus application data through the app. Deletion removes the application records associated with your account, subject to the exceptions below. Authentication-account deletion may require a request to us while Venus is in beta.

Limited backups, security logs, and records needed for fraud prevention may remain temporarily. We may retain specific information longer when reasonably necessary for a legal hold, safety or security investigation, dispute, enforcement action, valid legal request, or other preservation duty. We limit that retention to the relevant information and purpose where reasonably possible. Deletion does not undo a prior lawful disclosure. We may retain a non-readable, keyed hash of an unsubscribed email address after account deletion so a later account using the same address remains opted out of reminder emails.

9. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of your personal data, and to withdraw consent. You may also complain to your local data-protection authority. Email [email protected] from your account email so we can verify the request. Some rights have legal exceptions, including where records must be kept for security, legal claims, or compliance. You can also stop follow-up reminder emails immediately through the unsubscribe link included in each reminder.

10. Automated safety actions

Safety systems may automatically refuse a message, apply a rate limit, or restrict a feature or account when they detect a serious risk or suspected violation. These systems can make mistakes. You may request review of an account-level safety restriction by emailing [email protected] with the account email and relevant time, without sending passwords or unnecessary sensitive information.

11. Security

We use account authentication, access controls, encrypted network connections, tenant-separated records, and restricted administrative access. No online service is perfectly secure, so use a unique password and report suspected account access promptly. Do not send passwords, government identification, or illegal material in a safety or support report.

12. Changes and contact

We may update this policy as Venus, our safety practices, or legal requirements change. We will post the updated date. Material updates may be presented in the app and require fresh acknowledgement before chat access continues. Privacy questions and requests can be sent to [email protected].