VANTA← Back to app

Privacy Policy

Effective Date: June 10, 2026

VANTA, operated by ThreeSixty Atlantic, is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. ThreeSixty Atlantic is the data controller for personal data processed through the Service. By using the Service, you agree to the practices described in this policy.

1. Information We Collect

1.1 Information You Provide

When you create an account or use the Service, we collect:

  • Name and email address (account registration)
  • Text descriptions you enter as LUT prompts
  • Images you upload as color references

1.2 Information Collected Automatically

  • IP address and approximate location (city/country level)
  • Browser type, device type, and operating system
  • Pages visited, features used, and time spent
  • Number of LUT generations

1.3 Information from Third Parties

We may receive information about you from authentication providers if you sign in via third-party login.

2. How We Use Your Information

  • Provide, operate, and improve the Service
  • Process your LUT generation requests via AI
  • Manage your account
  • Send transactional emails (receipts, password resets, plan updates)
  • Analyze aggregate usage patterns to improve the product
  • Comply with legal obligations

We do not sell your personal data to third parties. We do not use your data for advertising targeting on external platforms.

3. Your Uploaded Images

Images you upload as color references are transmitted to OpenAI's API solely for the purpose of analyzing color characteristics and generating your LUT parameters. We do not store your uploaded images beyond the duration of a single generation request. OpenAI's data handling is governed by their privacy policy at openai.com/privacy.

Do not upload images containing sensitive personal information, faces, or proprietary content you do not have the right to use.

4. Data Retention

We retain your account information for as long as your account is active. You may request deletion of your account and associated data at any time by contacting privacy@vantagrade.com.

5. Data Sharing

  • With OpenAI to process AI generation requests (text prompts and images)
  • With Supabase for account authentication and data storage
  • With law enforcement or legal authorities when required by applicable law
  • In connection with a merger, acquisition, or sale of assets (with advance notice to users)

All third-party processors are bound by data processing agreements and are required to handle your data in accordance with applicable privacy laws.

6. Cookies and Tracking

We use essential cookies to maintain your session and authentication state. We do not use third-party advertising cookies or behavioral tracking cookies. You may disable cookies in your browser settings, but this may affect your ability to log in or use the Service.

7. Security

We implement industry-standard security measures including encrypted data transmission (TLS), hashed password storage, and access-controlled infrastructure. Your OpenAI API calls are processed server-side — your API credentials, if any, are never exposed in the browser. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

  • Access: Request a copy of the data we hold about you
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your account and personal data
  • Portability: Request your data in a machine-readable format
  • Objection: Object to certain types of data processing

To exercise any of these rights, contact privacy@vantagrade.com. We will respond within 30 days. Canadian residents have rights under PIPEDA. If you are located in the European Economic Area, you have rights under GDPR.

9. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice within the Service. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the revised policy.

11. Contact

For privacy-related inquiries or to exercise your data rights, contact us at:
VANTA by ThreeSixty Atlantic
Toronto, Ontario, Canada
privacy@vantagrade.com