Privacy Policy

Last updated: March 2, 2026

1. What VentBox Is

VentBox is an anonymous employee feedback platform. Users create feedback spaces, share them with their teams, and collect honest, anonymous feedback. Admins (such as HR managers) can view aggregated feedback and AI-generated sentiment analysis — but can never identify who submitted any individual piece of feedback.

2. Anonymity by Design

Anonymity is not a feature of VentBox — it is the architecture. Our feedback database contains no user ID column. It is technically impossible to link a piece of feedback to the person who wrote it. Submission tracking (used only for deduplication) is stored in a separate, isolated table with no foreign key to the feedback table. For a technical deep-dive into how this works, visit our Trust Center.

3. What We Collect

We collect the minimum information needed to operate the platform:

  • Account information: Email address, name (if provided), and avatar (if using Google sign-in). This is used for authentication and managing your spaces.
  • Feedback content: The text you submit to a feedback space. This is stored with no connection to your identity.
  • Space data: Space names, settings, member roles, and invite codes.
  • Usage data: Basic analytics such as feedback counts and sentiment scores, used to power dashboards and AI insights.

4. What We Do Not Collect

  • We do not track which user submitted which feedback. Ever.
  • We do not use cookies for advertising or third-party tracking.
  • We do not sell, rent, or share your personal data with third parties for marketing purposes.
  • We do not log IP addresses against feedback submissions.

5. How We Use Your Data

  • Authentication: Your email is used to sign in and manage your account.
  • Domain restriction: If a space requires @company.com emails, we verify your email domain — but your identity is never linked to your feedback.
  • AI analysis: Feedback text is processed by AI (Anthropic Claude) to generate sentiment scores and category tags. This processing is done on the feedback content only — no user identity is attached or sent.
  • Referrals: If you sign up via a referral link, we record which user referred you. This is used solely for referral tracking and is separate from feedback data.

6. Data Storage and Security

Your data is stored securely on Supabase (hosted on AWS). All data is encrypted in transit (TLS) and at rest. We use Row Level Security (RLS) on every database table to ensure users can only access data they are authorized to see. Admin access to the platform is restricted to the founder.

7. Third-Party Services

We use the following third-party services:

  • Supabase: Database, authentication, and storage.
  • Anthropic (Claude): AI sentiment analysis on anonymized feedback content.
  • Vercel: Hosting and deployment.
  • Google: Optional OAuth sign-in (only if you choose to sign in with Google).

None of these services receive data that links feedback content to user identity.

8. Your Rights

You can:

  • Delete your account: Contact us and we will delete your profile and associated account data. Note that feedback you submitted cannot be linked to you and will remain in the system anonymously.
  • Access your data: Request a copy of the personal data we hold about you (account info, spaces, referrals).
  • Withdraw consent: You can stop using VentBox at any time. If you signed in via Google, you can revoke access from your Google account settings.

9. Data Retention

Account data is retained as long as your account is active. Feedback data is retained indefinitely as part of the anonymous feedback record for the space it belongs to — since it cannot be linked to any individual, it poses no privacy risk. If a space is deleted by its creator or admin, all feedback within that space is permanently deleted.

10. Children

VentBox is designed for use in professional workplace settings. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us and we will remove it.

11. Changes to This Policy

We may update this policy from time to time. If we make significant changes, we will notify users via email or an in-app notice. The “Last updated” date at the top of this page will always reflect the most recent revision.

12. Contact

If you have questions about this policy or your data, contact us at mail.hamza.ali@gmail.com.