Privacy Policy

Effective Date: August 1, 2026 · Leonetti AI LLC, Asheville, NC

This Privacy Policy describes how Venari ("Venari," "we," "our," or "the Service"), a product of Leonetti AI LLC, collects, uses, shares, and protects information when you use our real estate customer relationship management platform at venaricrm.com.

Leonetti AI LLC is a North Carolina limited liability company and is the operator of the Service and the controller of the data described below. Leonetti AI LLC is a separate legal entity from Leonetti Group LLC, a real estate brokerage team that is a customer of the Service.

1. Information We Collect

Information you give us

Account information. When you sign in with Google, we receive your name, email address, and profile photo from your Google account.

CRM data you create. Contacts, deals, notes, tasks, calendar entries, communications, documents, and any other data you enter into Venari or upload to it.

Information from services you connect

Venari only accesses a connected third-party account after you explicitly authorize it, and only for the features described in Section 3.

Google Workspace data — Gmail messages and threads, Google Drive files and folders, and Google Calendar events associated with the account you connect.
Dotloop data — OAuth tokens and transaction ("loop") metadata that let you open and manage transaction documents from inside Venari.

Information collected automatically

Usage and log data. Standard server logs including IP address, browser type, pages and features accessed, and timestamps. We also record an internal audit log of actions taken in your account — including every AI-assisted action — so that account owners can review what happened and when.

2. Google User Data — Scopes and Purposes

Venari requests the following Google OAuth scopes. Each is requested only for the purpose stated, and each is presented to you for consent before it is granted.

Scope	Why Venari needs it
`gmail.readonly`	To display the email threads related to a transaction inside the deal you are working on, so you do not have to switch between your inbox and your CRM.
`gmail.modify`	To apply and remove labels and read/unread state as you triage transaction email from within Venari, keeping your Gmail and your CRM in sync.
`gmail.compose`	To create draft replies and transaction emails in your Gmail account for your review. Venari writes drafts; it does not send them on your behalf.
`gmail.send`	To send an email you have reviewed and explicitly chosen to send, from your own address, so the sent message appears correctly in your Gmail Sent folder.
`calendar.events`	To create and update calendar events for transaction deadlines — due diligence expiration, closing dates, showings, and inspection appointments — on the calendar you connect.
`drive.file`	To create transaction folders and to open, upload, and link the specific files you select or that Venari creates for a deal.
`drive`	To locate and reuse a client's existing transaction folders elsewhere in your Drive — including folders created before you started using Venari and archived past-client folders — so returning clients are matched to their existing history instead of producing duplicate folders. Venari reads folder and file metadata for this purpose and does not scan, index, or transmit the contents of files it was not asked to open.

Google API Limited Use Disclosure. Venari's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: Google user data accessed by Venari is used only to provide and improve features that are directly visible to you in the application. We do not use Google user data for advertising, we do not sell or transfer it, we do not use it to develop, improve, or train generalized artificial intelligence or machine learning models, and we do not allow humans to read it except (a) with your explicit consent for a specific issue, (b) where necessary for security purposes such as investigating abuse, or (c) where required by law.

3. How We Use Your Information

To provide and operate the Venari platform and the features listed above
To link your Google Drive folders, Gmail threads, and Calendar events to the right real estate transaction
To power AI-assisted features — voice notes, call summaries, lead extraction, email drafting, and extraction of showing details from ShowingTime emails
To authenticate you and maintain your session
To generate an audit trail of account activity for your team's own review
To monitor, secure, troubleshoot, and improve the reliability of the Service

We do not use your data, or your clients' data, for advertising or for any purpose unrelated to operating Venari on your behalf.

4. AI Features and Third-Party AI Services

Venari uses the Anthropic Claude API to power voice note transcription and summarization, call summaries, lead data extraction, email draft generation, and the extraction of showing details from ShowingTime appointment and feedback emails.

What is sent to Anthropic. In almost every case, the only data sent to Anthropic is what you type or speak directly into Venari, plus scoped, structured fields from the specific deal or contact you are working on. There are two deliberate exceptions, both limited:

ShowingTime emails. When enabled for an active listing, the text of automated ShowingTime appointment and feedback emails from your connected Gmail is sent to Anthropic solely to extract structured showing details (date, agent, rating, feedback) for that deal's Showings panel.
Email drafting. When you ask Venari to draft a reply, the relevant message thread is sent to Anthropic solely to generate that draft for your review.

What is never sent to Anthropic. Google Drive file contents. Dotloop documents or Dotloop-derived data of any kind — this restriction is enforced in our code as a hard rule and reflects our obligations under the Dotloop API License Agreement. No Google user data is used to develop, improve, or train any AI or machine learning model, by us or by anyone else.

Anthropic processes these inputs to generate a response and is bound by its own Privacy Policy and commercial terms, under which customer inputs are not used to train its models. Every AI-generated action in Venari requires your confirmation before it changes your data, and every one is written to your account's audit log.

5. Data Sharing and Sub-Processors

We do not sell your personal information, and we do not share it with third parties for their own marketing. We share data only with the following service providers, each only to the extent needed to run the Service:

Supabase — database, authentication, and server-side functions (data stored in United States regions)
Vercel — application hosting and content delivery
Anthropic — AI processing, limited to the data described in Section 4
Google — OAuth authentication and the Gmail, Drive, and Calendar integrations you explicitly authorize
Dotloop — transaction document management, if you choose to connect it

We may also disclose information if required by law, to enforce our Terms of Service, or to protect the rights, property, or safety of our users or the public. If Leonetti AI LLC is involved in a merger, acquisition, or sale of assets, we will provide notice before your information is transferred and becomes subject to a different privacy policy.

6. Data Retention and Deletion

We retain your CRM data for as long as your account is active, because a real estate transaction record has ongoing professional and regulatory value to you.

Disconnecting an integration. You may disconnect Google or Dotloop at any time from Settings. Doing so revokes and deletes the stored tokens for that integration immediately. You may also revoke Venari's access to your Google Account directly at myaccount.google.com/permissions.

Closing your account. On request, we will export your data to you and delete your account data within 90 days, except where we are required to retain it by law. Server logs and backups are retained on a rolling basis and are purged on their own cycle, not to exceed 90 days after account deletion.

To request export or deletion, contact us at the address in Section 11.

7. Security

We take the following concrete measures to protect your data:

Tenant isolation. Every table enforces PostgreSQL row-level security keyed to your team, so one team's data is structurally inaccessible to another team — not merely filtered out by application code.
Token handling. Google OAuth access and refresh tokens are held server-side only. Database privileges on those columns are revoked from browser-facing roles, so the tokens cannot be read by the client application, and all Google API calls are proxied through server-side functions.
Encryption. All traffic is served over HTTPS/TLS. Data at rest is encrypted by our database provider.
Least privilege and audit. Access is scoped by role, and account activity — including every AI-assisted action — is written to an audit log.
Backups. Automated daily database backups are maintained by our database provider.
Review. We perform a structured security review of the codebase on an ongoing basis, covering the OWASP Proactive Controls.

No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you without undue delay and as required by applicable law.

8. Your Rights and Choices

You have the right to access, correct, export, or delete the personal information we hold about you, and to withdraw consent for any integration at any time. Depending on where you live, you may also have the right to object to or restrict certain processing, and to lodge a complaint with a supervisory authority. We do not sell personal information or share it for cross-context behavioral advertising, and we do not discriminate against you for exercising any of these rights.

To exercise any of these rights, contact us at the address in Section 11. We will respond within 30 days.

9. Client Information and Your Role

Much of the data in Venari concerns your clients rather than you. As the licensed professional using the Service, you are responsible for having a lawful basis to collect and store that information and for complying with your own professional and regulatory obligations. We process it on your instruction and solely to provide the Service to you.

10. Children's Privacy

Venari is a professional business tool not intended for use by anyone under 18 years of age. We do not knowingly collect personal information from minors. If we learn that we have, we will delete it.

11. Contact Us

If you have questions about this Privacy Policy, or want to exercise your data rights:

Leonetti AI LLC
Asheville, North Carolina, USA
Email: info@venaricrm.com

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy here with a new effective date, and will notify you of material changes by email or a prominent notice in the Service before they take effect. Continued use of the Service after that date constitutes acceptance.