Privacy Policy
Last updated 16 October 2026
Who we are
veno provides enquiry and booking software for renovation businesses. For enquiries submitted to a business, that business is the data controller and veno acts as its processor. For business account data, veno is the controller.
What we collect
Enquiry details you submit (name, email, phone, postcode, project details, preferred times, marketing consent), booking details, email delivery records, and account details for business staff (email address and sign-in data).
How we use it
To pass your enquiry to the business you contacted, send an acknowledgement and reminders about that same enquiry, let you book a consultation, and keep the service secure. We do not send marketing on behalf of businesses and we do not sell personal data.
Legal basis
We rely on taking steps at your request before a contract, legitimate interests in running and securing the service, and consent where required.
Google Calendar
When a business connects Google Calendar, veno reads free/busy times and creates consultation events on the calendar the business selects. Connection credentials are stored encrypted on our servers and never shown in the browser. Use of Google data follows the Google API Services User Data Policy, including its Limited Use requirements.
Gmail
When a business connects Gmail, veno asks only for permission to send email and to read the account's email address (so messages come from the business's real address). veno cannot read, search or delete any mail. Connection credentials are stored encrypted on our servers and never shown in the browser. Use of Google data follows the Google API Services User Data Policy, including its Limited Use requirements.
AI processing
If a business switches on AI, veno sends the project type, budget range, postcode area (first half only), preferred start date, project description and customer first name to an AI model provider, through Lovable's AI gateway, to summarise and prioritise the enquiry and draft replies. Email addresses, phone numbers and marketing preferences are never sent. veno sends these requests with provider storage switched off. AI drafts are checked against fixed safety rules and, unless the business turns this off, are approved by the business before sending.
Sharing
Data is shared only with the business you contacted and with service providers that host and run veno (hosting, database, email delivery, calendar).
Retention
Enquiry data is kept while the business keeps its account, unless the business deletes it sooner. You can unsubscribe from reminders at any time using the link in any email.
Your rights
Under UK GDPR you can ask to access, correct, delete or restrict your data, object to processing, or complain to the Information Commissioner's Office (ico.org.uk). For enquiry data, contact the business first; we will help them respond.
Security
Data is isolated per business, access is limited to authorised staff, and secrets are stored server-side.
Contact
Privacy questions: privacy@veno.work.