Privacy Notice

Virtus Ventures LLC is the data controller for personal information processed in connection with the Service. We are responsible for deciding how and why your data is used.

• Account data: name, email address, password hash, and organization details when you register or are invited to an account.
• Business data: shop name, logo, address, tax state, and other settings you enter to configure your organization.
• Customer data: names, phone numbers, email addresses, addresses, order details, wedding event information, and lead details that you or your staff enter into the Service.
• Usage data: IP address, browser type, device identifiers, pages visited, and interactions with the Service.
• Support data: messages, ticket content, and other communications you send us.

• To create and manage your account and organization.
• To provide, operate, and improve the Service.
• To process payments, subscriptions, and billing through Paddle.
• To communicate with you about your account, security, and support requests.
• To prevent fraud, abuse, and security incidents.
• To comply with legal obligations.

We process personal data on the following legal bases: performance of a contract with you (providing the Service), our legitimate interests (security, fraud prevention, product improvement), your consent (where required), and compliance with legal obligations.

We do not sell personal data. We share data only with the following categories of recipients:

• Service providers: hosting, analytics, support, and email delivery vendors who process data on our behalf under confidentiality and security obligations.
• Merchant of Record: Paddle.com, which handles payments, subscription management, tax compliance, and invoicing on our behalf.
• Professional advisers: legal, accounting, and insurance advisers where necessary.
• Authorities: law enforcement or regulators when required by law or to protect our rights.

We keep your personal data for as long as your account is active or as needed to provide the Service. After you close your account, we will delete or anonymize your data within a reasonable period, unless we are required to retain it for legal, tax, or accounting purposes.

Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to or withdraw consent for certain processing. If you are in the UK or EEA, you also have the right to complain to your local supervisory authority. To exercise your rights, contact us at support@stemdesk.co.

We use appropriate technical and organizational measures to protect personal data, including encryption in transit, access controls, and regular security reviews. However, no method of transmission over the internet or electronic storage is completely secure.

We use essential cookies to operate the Service and may use analytics cookies to understand usage. You can manage cookie preferences through your browser settings.

We are based in the United States. If you access the Service from outside the United States, your data may be transferred to and processed in the United States or other countries where our service providers operate. We use appropriate safeguards, including standard contractual clauses, for transfers from the UK or EEA.

We may update this Privacy Notice from time to time. We will post the revised version and update the effective date. If changes are material, we will notify you by email or through the Service.

If you have questions about this Privacy Notice or our data practices, please contact us at support@stemdesk.co.