Privacy Policy

Effective Date: July 02, 2026 Last Updated: July 02, 2026

VenoraAi respects your privacy and is committed to protecting personal information entrusted to us.

This Privacy Policy explains how VenoraAi ("VenoraAi," "we," "us," or "our") collects, uses, discloses and protects personal information when you visit venoraai.com (the "Website"), contact us, request information or a pilot, or otherwise interact with us in connection with the Website.

1. Scope of This Privacy Policy

This Privacy Policy applies to personal information that VenoraAi processes for its own business purposes in connection with:

• visits to our Website;
• requests for information or a VenoraAi pilot;
• communications with us;
• business-development and prospective-customer interactions; and
• the operation, protection and improvement of our Website.

Customer and Product Data

This Privacy Policy does not govern customer data processed within a customer deployment of VenoraAi products or services under a pilot, commercial agreement, data processing agreement, or other applicable contract.

VenoraAi solutions may be deployed within customer-controlled infrastructure, including on-premises, restricted-network and air-gapped environments. The processing of customer data in those environments is governed by the applicable customer agreement, deployment architecture and data-processing terms.

Where VenoraAi processes personal information solely on behalf of a customer, the respective responsibilities of VenoraAi and the customer will be determined by the applicable agreement and applicable data protection law.

Nothing in this Website Privacy Policy changes or overrides the security, confidentiality, data-location or data-processing commitments contained in a customer agreement.

2. Information We Collect

The information we collect depends on how you interact with us.

Information You Provide

When you contact us or request a pilot, we may collect information such as:

• your name;
• business email address;
• company or organization;
• job title or professional role;
• telephone number, if provided;
• information concerning your organization's interest in VenoraAi;
• information concerning a requested pilot, deployment environment or use case; and
• other information you choose to provide in communications with us.

Providing this information is voluntary. However, we may be unable to respond to a request or evaluate a potential engagement without certain contact information.

Please do not submit passwords, classified information, restricted information, sensitive operational data, trade secrets, regulated datasets, or other confidential customer content through the public Website or contact forms. Appropriate secure channels can be established separately when required for a business engagement.

Information Collected Automatically

When you visit the Website, our hosting, network and security infrastructure may automatically process limited technical information such as:

• Internet Protocol (IP) address;
• browser and device type;
• operating system;
• requested pages and URLs;
• referring page;
• date and time of access; and
• technical, security and diagnostic information.

We use this information primarily to operate, protect, troubleshoot and understand the use of the Website.

3. How We Use Personal Information

We may use personal information to:

• respond to inquiries and pilot requests;
• communicate with prospective and existing customers, partners and other business contacts;
• evaluate potential pilots and commercial engagements;
• provide requested information about VenoraAi;
• arrange meetings, demonstrations or discussions;
• operate, maintain and secure the Website;
• identify and address technical or security issues;
• understand how our Website is used and improve it;
• protect VenoraAi, our users and others from fraud, abuse or security threats;
• establish, exercise or defend legal rights;
• comply with applicable laws, regulations and lawful governmental requests; and
• manage corporate and business operations.

AI Model Training

VenoraAi does not use personal information submitted through the Website's contact or pilot-request forms to train VenoraAi AI models.

Information provided for a potential customer engagement may be reviewed by authorized VenoraAi personnel for the purpose of evaluating, responding to and managing that engagement.

4. Legal Bases for Processing

Where applicable law requires us to identify a legal basis for processing personal information, we may rely on:

Legitimate interests — including operating and securing our Website, responding to business inquiries, developing business relationships, and protecting our legal and security interests.

Steps prior to entering into a contract or performance of a contract — for example, when you request a pilot, demonstration or commercial engagement.

Consent — where we ask for and receive your consent for a particular activity.

Legal obligations — where processing is necessary to comply with applicable law, regulation, judicial process or other legal requirements.

Where we rely on legitimate interests, we consider the nature of the information and the potential effect of the processing on the individuals concerned.

5. How We Share Personal Information

We do not sell personal information.

We may disclose personal information only where reasonably necessary, including to the following categories of recipients:

Service Providers

We may use service providers that support functions such as:

• website hosting;
• website form processing;
• email and business communications;
• cybersecurity and infrastructure;
• IT services; and
• professional services.

Such providers may process information only as necessary to perform services for us and subject to applicable contractual and legal requirements.

Professional Advisers

We may disclose information to lawyers, accountants, auditors, consultants, insurers or other professional advisers where reasonably necessary for legitimate business or legal purposes.

Legal and Governmental Requirements

We may disclose information if we reasonably believe disclosure is required to comply with applicable law, regulation, legal process or a lawful request from a governmental or judicial authority.

We may also disclose information where reasonably necessary to protect the rights, security or property of VenoraAi, our customers, users or others.

Corporate Transactions

Information may be disclosed or transferred in connection with an actual or proposed financing, investment, merger, acquisition, reorganization, sale of assets or similar corporate transaction, subject to appropriate confidentiality and legal protections.

6. Cookies and Similar Technologies

The Website may use cookies, local storage or similar technologies that are necessary for Website functionality, security or to remember user preferences.

Where we use non-essential analytics, advertising or similar tracking technologies that require consent under applicable law, we will provide appropriate notice and choices before using them.

We do not use Website visitor information for third-party cross-context behavioral advertising unless this Policy and any required consent mechanism are updated accordingly.

7. Marketing Communications

If you choose to receive marketing communications from VenoraAi, we may use your business contact details to provide information about our products, services, events or other relevant developments.

You may unsubscribe from marketing communications at any time using the unsubscribe mechanism in the communication or by contacting us.

Even if you opt out of marketing communications, we may continue to send communications necessary to respond to an inquiry, administer an existing relationship, or satisfy legal or security requirements.

8. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to:

• respond to inquiries;
• manage potential or existing business relationships;
• maintain appropriate business records;
• resolve disputes;
• enforce agreements;
• protect against fraud or security incidents; and
• comply with legal obligations.

For prospective-customer and business-contact information that does not result in an ongoing relationship, our intended retention period is generally no longer than 24 months following the last substantive interaction, unless a longer period is reasonably necessary for legal, security, recordkeeping or legitimate business purposes.

Information may be deleted, anonymized or aggregated when it is no longer required.

9. Information Security

VenoraAi uses reasonable administrative, technical and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss or destruction.

Access to personal information is intended to be limited to personnel and service providers who require it for legitimate business purposes.

No Internet transmission or information-storage system can be guaranteed to be completely secure. Accordingly, although we take measures designed to protect personal information, we cannot guarantee absolute security.

10. International Data Transfers

VenoraAi, its personnel and its service providers may operate in more than one country.

As a result, personal information may be processed in countries other than the country in which it was originally collected.

Where applicable law requires safeguards for international transfers of personal information, we will use appropriate legal mechanisms and safeguards.

11. Your Privacy Rights

Depending on where you live and applicable law, you may have rights concerning your personal information, including the right to:

• request information about the personal information we process about you;
• access personal information we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion of certain personal information;
• object to certain processing;
• request restriction of certain processing;
• withdraw consent where processing is based on consent;
• request portability of certain information, where applicable; and
• lodge a complaint with an applicable data protection authority.

Certain rights may be subject to legal exceptions and limitations.

We may need to verify your identity before responding to a privacy request.

To exercise an applicable privacy right, contact us using the information in the Contact Us section below.

12. California Privacy Rights

If California privacy law applies to VenoraAi and to your personal information, you may have additional rights, including rights to know, access, correct or delete certain personal information and rights concerning certain disclosures of personal information.

VenoraAi does not sell personal information for monetary consideration.

If applicable law defines certain forms of disclosure for targeted advertising as a "sale" or "sharing," VenoraAi will provide any legally required notices and mechanisms before engaging in such activities.

We will not discriminate against an individual for exercising an applicable privacy right.

13. Israeli Privacy Rights

Where Israeli privacy law applies, VenoraAi processes personal information in accordance with applicable requirements of the Israeli Protection of Privacy Law, 5741-1981, as amended, and applicable regulations.

Individuals may have rights to inspect personal information held about them and request correction or deletion in circumstances provided by applicable Israeli law.

Requests may be submitted using the contact information below.

14. European Economic Area, United Kingdom and Switzerland

Where applicable, individuals located in the European Economic Area, United Kingdom or Switzerland may exercise the data protection rights available to them under applicable data protection law.

Where required, VenoraAi will also provide information regarding the applicable controller, legal bases for processing and mechanisms used for international transfers.

Individuals also have the right to lodge a complaint with the competent supervisory authority in their jurisdiction.

15. Children's Privacy

The Website and VenoraAi's business services are intended for businesses and professional users and are not directed to children.

We do not knowingly collect personal information through the Website from children under the age of 16.

If you believe a child has provided personal information to us through the Website, please contact us so that we can review and, where appropriate, delete the information.

16. Third-Party Websites

The Website may contain links to third-party websites or services.

VenoraAi does not control the privacy, security or data-handling practices of third parties. Information you provide to a third party is governed by that third party's terms and privacy practices.

We encourage you to review the applicable privacy notice before providing personal information to a third-party service.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time as our Website, business, services, legal requirements or privacy practices evolve.

When we make changes, we will update the "Effective Date" or "Last Updated" date displayed at the beginning of this Policy.

Where required by applicable law, we will provide additional notice of material changes.

18. Contact Us

For questions about this Privacy Policy or requests concerning your personal information, please contact:

VenoraAi
Privacy contact: privacy@venoraai.com
Legal entity: VenoraAi Inc