Privacy Policy

This Policy explains how Vantr collects, uses, shares and protects personal data when you use the Vantr web application and related services.

For the purposes of the UK and EU General Data Protection Regulation, Vantr Software Inc., a Delaware corporation, is the controller of the personal data described here.

Where you use Vantr to publish to a third-party platform, that platform is an independent controller of the data it receives and holds, governed by its own privacy policy. This Policy does not cover what a platform does with your content once published.

You can reach us about anything in this Policy at privacy@vantr.app. For general help with the Service, write to support@vantr.app.

We do not collect special categories of personal data (such as health or political data) and ask that you do not submit them through the Service. When you talk to Vann by voice or record a call, your voice is processed only to understand or transcribe what was said. We do not create or store voiceprints or any other biometric identifiers.

Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights, and you may object as described in "Your rights" below.

We do not sell personal data, and we do not share it for cross-context behavioural advertising, as those terms are defined under California law. We have never done so.

We do not use your personal data for automated decision-making that produces legal or similarly significant effects.

Vann and the other AI features are powered by Google's Gemini API. What is sent to Google depends on what you use:

A record of your Vann conversations is kept in your account history so you can see what was asked and what was returned. We do not train AI models on your content, and we do not send your published videos or images to an AI provider.

Our provider's own terms matter too. Vantr uses Google's paid Gemini API. Under Google's terms for the paid service, Google does not use the text you submit or the responses it returns to improve its products or train its models, and keeps them only for a limited time to detect abuse and meet legal obligations. Google does not claim ownership of what the model generates.

Bank, PayPal and Stripe transactions are not sent to an AI provider to be sorted; those suggestions come from Vantr's own rules.

If you would rather your content not reach an AI provider, don't use Vann's chat, voice, call recording, receipt scanning or brand email forwarding. Everything else in the Service works without them, apart from the daily take on Home.

Each provider is bound by a data processing agreement, or by contractual terms of equivalent effect, restricting them to processing data on our instructions.

The current list of the providers who process personal data for us, with what each one handles and where, is kept on our Subprocessors page at https://vantr.app/subprocessors. We update it before adding a new one.

We may also disclose personal data where we are legally required to, to enforce our Terms, or to protect the rights, safety or property of Vantr or others. Where we are lawfully able to notify you first, we will.

If Vantr is involved in a merger, acquisition or sale of assets, personal data may transfer as part of that transaction. We will give notice before your data becomes subject to a materially different privacy policy.

Vantr uses YouTube API Services. When you connect a YouTube channel, Vantr uses the access you grant to publish the videos you choose, read your channel's videos, statistics and comments so they appear in your Analytics and Inbox, and, if you allow it, post your replies and remove comments you choose to remove. Vantr only does these things when you ask it to or to keep your own dashboard up to date.

Google's Privacy Policy applies to Google's handling of your data: https://policies.google.com/privacy. Using YouTube through Vantr also means agreeing to the YouTube Terms of Service: https://www.youtube.com/t/terms.

You can remove Vantr's access to your Google account at any time from Google's security settings: https://myaccount.google.com/connections. You can also disconnect YouTube inside Vantr. To have the YouTube data Vantr stored deleted, delete your Vantr account or write to privacy@vantr.app; we delete it within 30 days.

Vantr's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements (https://developers.google.com/terms/api-services-user-data-policy). We do not sell this data, use it for advertising, or use it to train AI models, and people at Vantr do not read it except with your permission, for security, or where the law requires.

Creators use Vantr to run their business, so some personal data in Vantr belongs to people who never signed up. If you are one of them, this is what we hold and why.

Legal basis: for comments, brand emails, contacts, invoices, contracts and call transcripts, the legitimate interests of the creator and of Vantr in letting creators run their business and keep records of it, or the contract between you and the creator where there is one. For UGC applications, steps you asked for before entering a contract with us. For the newsletter, your consent.

Retention: comments stay until the creator disconnects that account or closes their Vantr account. Brand emails, contacts, invoices and contracts, including signing and viewing records, stay until the creator deletes them or closes their account. Call audio is never stored. Newsletter details stay until you unsubscribe (after which we keep your address only to make sure you stay unsubscribed, unless you ask us to delete it). UGC applications stay until you ask us to delete them, except that records of paid work are kept as long as tax law requires.

The creator decides what to do with most of this data in their own business. If you want to object to it or have it deleted, you can ask the creator, or write to privacy@vantr.app and we will help, including by deleting it ourselves where the law gives you that right.

We only disclose personal data to a government agency, regulator or law enforcement body when the law requires us to. We do not hand over data voluntarily or on informal request.

Every request is reviewed for legality before we act on it: that it comes from an authority with power to make it, follows the correct legal process, and is specific in scope.

If a request is unlawful, overly broad or fails to follow the correct process, we will challenge it, and we will use the remedies available to us to do so.

Where we must comply, we disclose only the minimum personal data that the request legally requires.

We keep a record of each request we receive, our response, the legal basis we relied on and who handled it.

Unless the law prohibits it, we will tell the affected person about the request before we disclose their data, so they have the chance to object.

Vantr and its service providers are located in the United States. If you use the Service from the European Economic Area, the United Kingdom or Switzerland, your personal data is transferred to and processed in the United States.

For those transfers we rely on the European Commission's Standard Contractual Clauses, and the UK International Data Transfer Addendum where applicable, incorporated into our agreements with the providers listed under "Who we share it with".

You may request a copy of the relevant transfer mechanism by writing to privacy@vantr.app.

Deleting content in the Service does not remove anything already published on a third-party platform. You must delete that from the platform itself.

We may retain data longer where necessary to establish, exercise or defend a legal claim, or where the law requires it.

You can exercise most of these rights directly in the Service: your settings include data export and account deletion. For anything else, write to privacy@vantr.app. We will respond within one month, and will tell you if we need longer because the request is complex.

Settings, Export gives you one file (JSON, a common machine-readable format) with your profile and, for the workspace you have open, your posts, uploaded video details, posts imported from your connected accounts, comments in your Inbox, connected channels (never their passwords or tokens), brand deals, deliverables, contacts, invoices with their payments and history, contracts, brand emails, income, expenses and bank transactions, plus your Vann conversations, sign-in history, activity, signup details, notification settings, cookie choices and streaks. What it includes follows what your role in that workspace lets you see. For anything it doesn't cover, such as another workspace or the files themselves, write to privacy@vantr.app and we will send it within one month.

We may need to verify your identity before acting on a request. You may use an authorised agent, in which case we will ask for proof of their authority.

If you are unhappy with how we have handled your data you may complain to your local supervisory authority. In the UK that is the Information Commissioner's Office; in the EEA, the authority in your country of residence. We would appreciate the chance to resolve it with you first.

Vantr staff can see an account's recent pages visited (only with analytics consent), errors and sign-in locations, to provide support and fix problems. Staff access is limited by role, and every time staff open an account or act on it is logged.

We want to be straightforward about the limits of that: Vantr has not undergone a third-party security audit and holds no security certification such as SOC 2 or ISO 27001. We do not claim to. No system is perfectly secure, and we cannot guarantee the Service will never be compromised.

If a breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of it, and will notify you without undue delay where the risk is high.

To report a suspected vulnerability, email support@vantr.app and give us a reasonable chance to fix it before disclosing publicly.

We use a small number of cookies: strictly necessary cookies to keep you signed in and secure your session, and a preference cookie that remembers your light or dark theme.

While Performance & Analytics is allowed on the cookie notice (in the EU, EEA, UK and Switzerland, only once you allow it; elsewhere it is on unless you turn it off with "Do not sell my personal information" or Cookie settings), we also measure how the app is used: product analytics through PostHog, and a record of the pages you open and the errors you hit, as described above. If you turn it off, neither runs. You can change your choice at any time from Cookie settings at the bottom of any page (in the iPhone and Android apps, which don't show the notice, under Settings, Cookie settings; there the EU, EEA, UK and Switzerland start with only strictly necessary cookies).

We treat a Global Privacy Control signal as a choice to turn off optional analytics and advertising cookies.

We do not use advertising cookies, and we do not embed third-party advertising networks.

Our Cookie Policy sets out each cookie, its purpose and its lifetime.

The Service is not intended for anyone under 18, and we do not knowingly collect personal data from children.

If you believe a child has provided us with personal data, write to privacy@vantr.app and we will delete it.

We may update this Policy as the Service changes. The effective date at the top records when the current version took effect.

Where a change materially affects how we use your personal data, we will give notice by email or in the Service before it takes effect, and where the law requires it we will ask for your consent.

What changed on October 20, 2026: we added a section for people who aren't Vantr users, more uses to the legal basis table (analytics, sign-in history, push notifications, voice and call recording, staff support access), retention periods for brand emails, call transcripts, contacts, sign-in history, push tokens, e-signature records, cookie choices and the newsletter, more providers (push notifications, the App Store, Outlook, photo and GIF search) and a link to our Subprocessors page, Global Privacy Control, and a fuller description of what your data export includes. We also made clear that we don't create voiceprints or other biometric identifiers.

For any privacy question, to exercise a right, or to request a copy of a data transfer mechanism, write to privacy@vantr.app or by post to Vantr Software, Inc., 490 Post St, Ste 500 PMB 2430, San Francisco, CA 94102.

We have not appointed a Data Protection Officer, as we are not required to under Article 37 of the GDPR. Privacy enquiries are handled by Vantr's founders directly.