Vena Solutions

[ToS] The API Terms state that personal information may be collected for 'maintain and improve the Vena API' and 'purposes which are set out in Vena's privacy policy,' but the provided documents do not explicitly address whether user data or content submitted to the API is used to train AI models. The vague 'improve' language without explicit opt-out or clear prohibition creates moderate concern.

“[ToS] 'the internal use by Vena and Vena's affiliated companies for problem resolution and troubleshooting, to maintain and improve the Vena API, and for the purposes which are set out in Vena's privacy policy'”

[ToS] The API Terms grant a 'limited, revocable, non-exclusive, non-transferable, non-sublicensable licence' for internal development only. However, regarding user-submitted data/content, the terms state 'You shall be solely responsible for the accuracy, quality and legality of any data You submit' but do not explicitly define Vena's license scope over submitted content. The feedback clause grants Vena ownership of feedback, but general content license terms are ambiguous.

“[ToS] 'limited, revocable, non-exclusive, non-transferable, non-sublicensable licence' and 'If you provide feedback or suggestions about the Vena API ("Feedback"), then Vena alone shall own all right, title and interest, including all related intellectual property rights, in and to such Feedback'”

[ToS] The document states personal information may be shared with 'Vena's affiliated companies, and service providers retained by Vena' but does not provide a published sub-processor list or detailed DPA requirements. The term 'service providers' is broad and vague. No explicit prohibition on advertising or analytics sharing of user content is stated, creating moderate concern.

“[ToS] 'You consent to the collection, use, processing, transmission, and/or disclosure of such information by Vena, Vena's affiliated companies, and service providers retained by Vena'”

[ToS] Upon termination, Vena states it 'will, in the normal course of Vena's operations, permanently delete and destroy all Your data (if any), provided however that Vena reserves the right to preserve such data if required to resolve a dispute or assert or defend any claim.' This creates ambiguity: no specific retention period is stated, deletion is not guaranteed, and exceptions for disputes are broad and undefined.

“[ToS] 'Vena will, in the normal course of Vena's operations, permanently delete and destroy all Your data (if any), provided however that Vena reserves the right to preserve such data if required to resolve a dispute or assert or defend any claim'”

[ToS] The API Terms explicitly state 'You do not acquire any intellectual property or other proprietary rights, including without limitation patents, designs, trademarks, copyright or rights in any confidential information or trade-secrets, in or relating to the Vena API.' Regarding user-submitted data, the terms make the user 'solely responsible' for data submitted, implying user ownership. Vena claims no rights to user-submitted content beyond service delivery.

“[ToS] 'You do not acquire any intellectual property or other proprietary rights, including without limitation patents, designs, trademarks, copyright or rights in any confidential information or trade-secrets, in or relating to the Vena API'”

[Copyright page] The document displays an 'AICPA Service Organization Control Reports Badge' (SOC certification) and references a 'Customer Trust' page, indicating some compliance certifications exist. However, the provided documents do not detail specific certifications (SOC 2 Type II, GDPR, ISO 27001, HIPAA status), DPA availability, or comprehensive security documentation. Compliance is mentioned but not fully documented.

“[Copyright page] 'AICPA Service Organization Control Reports Badge' and '[ToS] reference to 'https://www.venasolutions.com/trust' for customer trust information”