Privacy Policy

1. Scope & Definitions

This Privacy Policy describes how VentureNex Pte. Ltd. ("VentureNex", "we", "us") collects, uses, discloses, and safeguards information when you use VentureNex.sg (the "Platform"). It applies to personal data processed in Singapore and to our processing of data for members worldwide.

For PDPA purposes, VentureNex is the organisation responsible for personal data in our possession or under our control. Certain parts of the Platform allow users to act as data controllers toward other users (e.g., sellers sharing NDA‑gated files with buyers). In those cases, we act as a data intermediary/service provider processing on their instructions.

2. Data We Collect

• Account & Identity: name, email, phone, company, role, verification artefacts (e.g., business registration or ID checks).
• Profile & Listings: venture details, documents, images, financial snapshots (sensitive items may be NDA‑gated).
• Usage & Communications: messages, offers, audit logs, support tickets.
• Technical: device/browser info, IP address, approximate location, cookies/SDK events, crash logs.
• Payments: billing contact, transaction metadata (processed via third‑party payment processors).

3. How We Use Data

• Provide and improve the Platform (account creation, verification, listings, messaging, offers, and dispute workflows).
• Protect users and Platform integrity (fraud prevention, abuse detection, security monitoring, audits).
• Communicate with you (service notifications, updates, support, marketing where permitted).
• Comply with legal obligations and enforce our Terms.

4. Legal Bases / Consent

We process data under applicable legal bases, including consent (e.g., marketing), contract (to provide the Platform), legitimate interests (e.g., safety, product improvement), and compliance with law. Where PDPA requires consent, we obtain it and provide withdrawal mechanisms.

5. NDA‑Gated Content

Sellers may place sensitive materials (e.g., P&L, customer lists, SOPs) behind an NDA. Buyers must accept the NDA and receive seller approval before access. Access may be time‑bound and is fully audited. You must not disclose or use NDA‑gated content beyond the permitted purpose.

Uploading personal data to NDA‑gated areas is your responsibility. Only share what is necessary for evaluation.

6. Sharing with Service Providers

We use carefully selected service providers (e.g., cloud hosting, analytics, payments, communications). They process data on our behalf under contracts that require confidentiality and security. We do not sell personal data.

7. International Transfers

Your data may be processed outside your country, including in data centres used by our providers. Where required, we implement appropriate safeguards to protect data in cross‑border transfers.

8. Data Retention

We retain data for as long as needed to provide the Platform and for legitimate purposes (e.g., security, legal compliance, accounting). When no longer necessary, we delete or anonymise data according to our retention schedules.

9. Security Measures

• Encryption at rest and in transit (e.g., AES‑256, TLS 1.2+).
• Access controls and least‑privilege role assignments.
• Audit logging, anomaly detection, and rate limiting.
• Backups and disaster recovery procedures.

No method of transmission or storage is 100% secure; we strive to protect your data with industry‑standard safeguards.

10. Your Rights

• Access / Correction: request a copy of your data or correct inaccuracies.
• Portability / Export: request an export of your data where technically feasible.
• Withdrawal of Consent: opt out of marketing or revoke consent where applicable.
• Deletion: request account deletion and removal of personal data subject to legal exceptions.

We may require identity verification to action rights requests and may deny vexatious or abusive requests as permitted by law.

11. Cookies & Similar Tech

We use cookies/SDKs to remember settings, keep you signed in, analyse usage, and improve the Platform. You can control cookies via your browser settings. Some features may not function without certain cookies.

Where required, we present a cookie notice and obtain consent for non‑essential cookies.

12. Children's Privacy

The Platform is not intended for individuals under 18. If you believe a child provided personal data, contact us to request deletion.

13. Changes to this Policy

We may update this Policy from time to time. Material changes will be notified via the Platform or by email when appropriate. Your continued use after changes means you accept the updated Policy.

14. Contact Us

For privacy questions or requests, email privacy@venturenex.sg. For security issues, contact security@venturenex.sg.