Privacy Policy

Last updated: August 21, 2026

1. Who We Are

VenueRev ("VenueRev", "we", "us", or "our") is a business-to-business software service operated by Kant Associates, LLC, a United States limited liability company. This Privacy Policy explains how we collect, use, share, and protect information in connection with our website and our service.

You can reach us about privacy matters at nipun@tryfable.co.

2. Scope and Our Two Roles

This Privacy Policy applies to (a) our marketing website, and (b) the VenueRev application and messaging service (together, the "Service").

We handle personal information in two distinct roles, and it matters which one applies to you:

• As a controller (our own business records). When a wedding or event venue ("Customer") signs up, contacts us, or uses the Service, we process information about that business and the people who administer its account for our own purposes: providing the Service, billing, support, security, and improving our product. For that information, we are the controller (or "business" under some state laws).
• As a service provider / processor (data about leads). The Service communicates with a Customer's prospective clients: couples and other individuals who have submitted an inquiry to that venue ("Leads"). We process Lead information on behalf of and under the instructions of the Customer. For that information, the Customer is the controller (or "business"), and we act as a service provider or processor. The Customer's own privacy policy governs how it uses Lead information.

If you are a Lead and want to know how a particular venue uses your information, contact that venue. You may also contact us using the details in Section 12, and we will route your request to the relevant Customer and assist them in responding.

3. How the Service Works (Relevant Data Flows)

Understanding the data flow makes the rest of this policy easier to read:

1. The Customer configures a forwarding filter in its own email system so that inquiry emails (for example, from The Knot, WeddingWire, or the venue's own website contact form) are forwarded to an email address that VenueRev manages.
2. We do not connect to, sign in to, or read the Customer's mailbox. We have no OAuth or other authorized access to the Customer's Gmail account or any other mailbox. We only receive the messages the Customer chooses to forward to us.
3. We use artificial intelligence to classify the inquiry, extract event details, and draft replies and follow-ups in the voice and under the profile the Customer configures.
4. We send those messages to the Lead by SMS text message and by email, on the Customer's behalf, and we record the resulting conversation so the Customer can review it.

4. Information We Collect

4.1 Information we collect from and about Customers

• Business and contact details: venue or business name, owner or administrator name, business email address, business phone number, and mailing or venue address.
• Account credentials: login identifiers and authentication data (passwords are stored in hashed form by our authentication provider).
• Venue content: descriptions of packages, pricing, availability practices, frequently asked questions, policies, and similar material. We obtain this from information the Customer gives us directly, from the Customer's public website and public listings, and from documents (such as PDF brochures or price sheets) the Customer uploads.
• Configuration and support records: the Customer's messaging settings, AI profile settings, notes, and correspondence with our support team.

4.2 Information we process about Leads (on the Customer's behalf)

• Identifiers and contact details: name, email address, and phone number.
• Event details: event date or date range, guest count, event type, budget indications, and other details the Lead provides or that appear in the inquiry.
• Message content: the contents of the original inquiry, all SMS and email messages exchanged through the Service, and the resulting conversation transcript.
• Messaging metadata: timestamps, delivery and failure status, opt-out status, and the record of how and when the Lead first contacted the venue (we log consent provenance so we can show why a message was sent).
• Inferred timezone: we may infer an approximate local timezone from the area code of a Lead's phone number, solely so that automated messages respect quiet hours. We do not use this to determine precise location.

We do not ask for and do not want government identifiers, financial account numbers, health information, or other sensitive categories of personal information. Please do not submit them through the Service.

4.3 Information collected automatically

• Website and application logs: IP address, browser type and version, device and operating system information, referring page, pages viewed, and timestamps.
• Cookies and similar technologies: we use strictly necessary cookies and similar storage for authentication, session management, and security. We do not use cookies for cross-context behavioral advertising.
• Diagnostic data: error reports and performance data generated by our hosting and application platforms.

5. How We Use Information

We use the information described above to:

• provide, operate, and maintain the Service, including receiving forwarded inquiries, generating replies, and sending and receiving SMS and email messages on a Customer's behalf;
• classify inquiries, extract event details, and schedule and send follow-up messages within permitted hours;
• maintain conversation records so the Customer can review, take over, or pause a conversation;
• authenticate users, secure accounts, and prevent fraud, abuse, and unauthorized access;
• honor opt-out requests and enforce quiet hours and message frequency limits;
• provide customer support and respond to inquiries;
• bill for the Service and maintain business records, where fees apply;
• monitor, troubleshoot, and improve the reliability and quality of the Service, including reviewing aggregated or de-identified usage patterns;
• comply with legal obligations and enforce our Terms of Service.

Where we act as a service provider or processor for a Customer, we use Lead information only to perform the Service for that Customer, for the limited internal purposes permitted by applicable law (such as security, debugging, and legal compliance), and as otherwise directed by the Customer.

6. AI Processing Disclosure

The Service uses third-party artificial intelligence models to operate. Specifically:

1. What is processed. Inquiry content, extracted event details, conversation history, and the Customer's configured venue content are sent to our AI provider (Anthropic, using Claude models) so that the Service can classify inquiries and generate draft and outbound messages.
2. Messages are machine-generated. Replies and follow-ups sent to Leads are generated by AI acting as the Customer's assistant, under the profile and instructions the Customer configures. The Customer controls that configuration, can review every conversation, and can pause the AI for any individual Lead at any time.
3. No model training by us. We do not use Customer content or Lead content to train our own artificial intelligence models. We rely on our AI provider's enterprise or business terms, under which submitted content is not used to train that provider's general-purpose models.
4. Accuracy. AI output can contain errors. The Customer is responsible for the accuracy of the venue content it supplies, including pricing, packages, availability practices, and policies, and for reviewing the communications the Service sends on its behalf.
5. Your responsibility as a Customer. Do not submit to the Service any information you do not have the right to share with us and with our subprocessors, and do not submit sensitive personal information, confidential third-party material, or content that would violate any law or agreement.

7. How We Share Information

7.1 Service providers and subprocessors

We share information with a small set of vendors who process it on our behalf under contracts that limit their use of it to providing services to us:

• Twilio (SMS delivery and receipt): phone numbers and message content.
• Resend (email sending and receiving): email addresses, subject lines, and message content, including forwarded inquiry emails.
• Supabase (database hosting and authentication): Customer account data, venue content, Lead records, and conversation transcripts.
• Vercel (application hosting and delivery): request and log data associated with use of the Service.
• Anthropic (AI processing): inquiry content, conversation history, and venue content, as described in Section 6.

We may add or replace subprocessors as our infrastructure evolves. We will keep this list current and will require comparable protections from any replacement.

7.2 With the Customer

Lead information is made available to the venue the Lead contacted. That is the purpose of the Service.

7.3 Legal and safety

We may disclose information if we believe in good faith that disclosure is required by law, regulation, legal process, or governmental request, or is reasonably necessary to protect the rights, property, or safety of VenueRev, our Customers, Leads, or the public, or to investigate suspected fraud or abuse.

7.4 Business transfers

If we are involved in a merger, acquisition, financing, reorganization, or sale of all or part of our assets, information covered by this policy may be transferred as part of that transaction. We will require the recipient to honor commitments made in this policy or provide notice of any material change.

7.5 Aggregated and de-identified information

We may create and use aggregated or de-identified information (for example, overall response-time statistics) that cannot reasonably be used to identify an individual. We do not attempt to re-identify such information.

7.6 What we do not do

We do not sell personal information. We do not share personal information for cross-context behavioral advertising or targeted advertising. We do not rent or trade Lead contact information, and we do not use one Customer's Lead information for the benefit of another Customer.

8. SMS and Email Communications and Opt-Out

Messages sent through the Service go only to people who first contacted the venue. We log the origin of each inquiry so the basis for messaging is documented.

• Opt-out language. The first SMS message to a Lead identifies the venue and includes opt-out instructions.
• Keywords. Replying with STOP, STOPALL, UNSUBSCRIBE, CANCEL, END, or QUIT immediately opts the Lead out. We cancel all scheduled and pending messages for that Lead and suppress future automated messages to that number.
• Quiet hours. AI-initiated messages are sent only between 9:00 AM and 8:00 PM in the Lead's local timezone, which we approximate from the phone number's area code.
• Frequency. The Service sends at most one AI-initiated message per Lead per day. Direct replies to a Lead's own incoming message are not subject to that daily limit.
• Email. Outbound emails include a way to unsubscribe or to ask not to be contacted further. Honoring that request stops automated email follow-ups.
• Message and data rates. Standard message and data rates from your mobile carrier may apply. We do not charge Leads.

Opting out of automated messaging does not delete the record of a prior conversation. To request deletion, see Section 11. Opting out also does not prevent the venue itself from contacting a Lead directly outside the Service.

9. Data Retention

• Inbound email content is retained by our email provider for a limited period (approximately 30 days) and then removed from that provider's systems in the ordinary course.
• Lead records and conversation transcripts are retained in our database for as long as needed to provide the Service to the Customer, and thereafter as needed for legal, security, dispute-resolution, and messaging-compliance purposes (including proof that consent existed and that opt-outs were honored).
• Opt-out records are retained indefinitely, because we must keep them in order to continue suppressing messages to a number or address that has opted out.
• Customer account and billing records are retained for the life of the account and for the period required by applicable tax and accounting rules afterward.
• Logs and diagnostic data are retained on a short rolling basis, typically no longer than 12 months.

When a Customer's account ends, we make its data available for export for a limited window and then delete or de-identify it, except for records we are required or permitted to keep as described above. A Customer may also instruct us to delete specific Lead records, and we will do so subject to those exceptions.

10. Security

We use administrative, technical, and physical safeguards designed to protect information, including encryption in transit, encryption at rest through our hosting providers, access controls and least-privilege administrative access, authentication managed by an established provider, and separation of each Customer's data within the application.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, and you should not send us information you consider highly sensitive. If we become aware of a breach affecting personal information, we will notify affected Customers and, where required, individuals and regulators, consistent with applicable law.

11. Your Rights and Choices

Depending on where you live, you may have rights under state privacy laws (such as those in California, Colorado, Connecticut, Texas, Virginia, and other states with comprehensive privacy statutes), including the right to:

• know what personal information we hold about you and how we use and disclose it;
• access or obtain a copy of that information;
• correct inaccurate personal information;
• request deletion of personal information;
• opt out of sale or targeted advertising (as noted in Section 7.6, we do not sell personal information or share it for cross-context behavioral advertising);
• not be discriminated or retaliated against for exercising these rights.

How to exercise these rights:

1. If you are a Lead (a couple or individual who contacted a venue), the venue is the business responsible for your information. Direct your request to that venue. You may also contact us at nipun@tryfable.co, and we will forward the request to the relevant venue and assist that venue in fulfilling it. We may need to verify your identity, and we will not make deletion or disclosure decisions about a venue's data on our own initiative.
2. If you are a Customer or a person who administers a Customer account, contact us directly and we will respond as the controller of that information.
3. Authorized agents may submit requests on your behalf with proof of authorization.

We will respond within the timeframes required by applicable law. If we deny a request, we will explain why and how you can appeal.

The Service is provided from the United States and is intended for use by businesses located in the United States. Information is processed and stored in the United States and in other locations where our subprocessors operate.

12. Children's Privacy

The Service is a business tool and is not directed to children. Leads are expected to be adults planning events. We do not knowingly collect personal information from children under 13. If we learn that we have received information from a child under 13, we will delete it. If you believe a child has provided information through the Service, contact us at nipun@tryfable.co.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. If a change materially affects how we handle personal information, we will provide additional notice, such as by email to Customers or a notice within the Service. Continued use of the Service after an update means you accept the revised policy.

14. Contact Us

Kant Associates, LLC
Attention: Privacy, VenueRev
Email: nipun@tryfable.co

If you have a concern we have not resolved, you may contact us again with the subject line "Privacy Appeal" and we will review the matter.

This document is provided for general informational purposes and does not constitute legal advice.