Privacy Policy

Variantea is a business-to-business software service operated under the Variantea trade name. This Privacy Policy explains how personal information and service data are handled when you visit Variantea websites, use the Variantea application, participate in invite-only Early Access, or contact Variantea.

Variantea Early Access is intended for business use. Access is currently invite-only and uses email magic-link authentication.

1. Information we collect

We collect information that you or your organization provide to use Variantea, including:

• account and authentication information, such as your work email address, account identifiers, and authentication/session information;
• workspace information, such as workspace name and membership information;
• campaign and marketing-work information you enter into the service, such as campaign names, objectives, base content, offers, calls to action, guidance, language choices, and related context;
• audience information you enter, such as audience names, descriptions, criteria, lifecycle or journey context, motivations, barriers, and available data signals;
• brand and product information that you choose to add to a workspace;
• generated or edited content, analyses, versions, review states, and other work product created or stored through the service;
• usage and operational information needed to provide and administer Early Access, including generation-usage records, safety-limit records, and feedback you submit;
• communications you send to Variantea, including support, privacy, access, export, correction, account-closure, or deletion requests; and
• technical information generated when the service is used, such as request metadata, IP address, browser or device information, timestamps, and server or authentication logs that may be processed by our hosting and infrastructure providers.

Please do not submit personal information that is unnecessary for your use of the service, or information that you are not authorized to provide.

2. How we use information

We use information to:

• provide, operate, maintain, and improve Variantea;
• authenticate approved Early Access users and maintain sessions;
• create and manage workspaces, campaigns, audiences, content, outputs, reviews, and related product functionality;
• provide AI-assisted generation, analysis, and personalization-related functionality requested by users;
• maintain service reliability, prevent abuse, enforce Early Access safety limits, and troubleshoot technical issues;
• respond to support and privacy requests;
• communicate about the service and its operation; and
• comply with applicable legal obligations and protect the service, users, and others.

Variantea does not replace marketer judgment. Users remain responsible for the context, review, approval, and lawful use of content and data submitted to or produced through the service.

3. AI processing

Variantea uses OpenAI to provide AI-assisted features. When you use those features, relevant content and context from your request may be sent to OpenAI for processing. This may include campaign content, audience context, brand or product context, instructions, and other information needed to produce the requested result.

Do not submit confidential, regulated, sensitive, or personal information to AI-assisted features unless you are authorized to do so and it is appropriate for your use case.

4. Service providers

Variantea uses third-party service providers to operate Early Access. Current providers include:

• Supabase for authentication and application backend/database services;
• OpenAI for AI-assisted generation and analysis;
• Vercel for hosting and delivery of the Variantea website and application; and
• Resend for transactional email delivery, including authentication-related email.

These providers may process information on Variantea’s behalf as needed to provide their services. Their own terms and privacy practices also apply to their processing.

PostHog is not listed as a current Production service provider in this version because Production use has not been verified for this publication package.

5. Cookies and session technologies

Variantea uses cookies or similar technologies where needed for authentication, session management, security, and core service operation. The Early Access application relies on session information so approved users can remain signed in and use their workspace.

6. How we share information

We may share information:

• with the service providers described above when needed to operate Variantea;
• within a user’s workspace as necessary to provide shared workspace functionality;
• when required by law, legal process, or a valid governmental request;
• when reasonably necessary to protect rights, safety, security, or the integrity of the service; or
• as part of a business reorganization, transfer, or similar transaction, subject to applicable law.

We do not describe data as being sold to advertisers, and Early Access does not depend on advertising.

7. International processing

Variantea is available to approved business users in multiple locations. Variantea and its service providers may process information in countries other than the country where you are located. Applicable legal protections may differ by location.

8. Security

Variantea uses technical and organizational measures intended to protect the service and information processed through it. No system, transmission method, or storage environment can be guaranteed to be completely secure.

We do not make claims in this policy about certifications, compliance frameworks, or security guarantees that have not been implemented and verified.

9. Retention

Account and workspace data are generally retained while the service and the applicable Early Access relationship remain active and as needed to provide the service.

Variantea does not currently promise a fixed deletion period for backups, logs, or copies maintained by external service providers.

If a verified deletion request is accepted, Variantea will take reasonable operator-assisted steps to delete or de-identify data under its control that is appropriate to delete, subject to legal, security, fraud-prevention, backup, operational, and recordkeeping needs. Some information may remain in backups, logs, or provider systems for variable periods.

Closing or disabling access does not necessarily cause immediate deletion of all associated information.

10. Access, correction, export, deletion, and account closure

Early Access does not currently provide self-service data export, self-service account deletion, or self-service workspace deletion.

Requests for access, correction, export, account closure, or deletion are handled through an operator-assisted process. To make a request, contact:

privacy@variantea.com

We may need to verify the requester’s identity, authority, workspace relationship, or other information before acting on a request. What rights apply, and whether we can fulfill a particular request, may depend on applicable law and the nature of the data.

11. Business customers and authorized users

If you use Variantea for or through an organization, your organization may control or be responsible for information submitted to the service. You should follow your organization’s policies and only submit information you are authorized to use.

12. Children

Variantea Early Access is a business service offered through invitation and is not directed to children. Users should not provide children’s personal information through the service unless there is a lawful, authorized business reason to do so and the organization is responsible for that use.

13. Third-party links and services

Variantea may link to third-party websites or services. Their privacy practices are governed by their own policies, not this Privacy Policy.

14. Changes to this Privacy Policy

Variantea may update this Privacy Policy as the service evolves. Material changes will be reflected in the published policy and its version date. Where appropriate, we may provide additional notice to Early Access users.

15. Contact

For privacy questions or requests, contact:

privacy@variantea.com