Privacy Policy

Last updated: 22 October 2026

Overview

Vantage Plan is built on a simple principle: your project data belongs on your computer, not on our servers. We do not collect, store, or analyse your project data. This privacy policy explains what limited data we do handle, why, and how to contact us.

Who we are

Vantage Plan is built and operated by Ventaja Group Pty Ltd (ABN 77 701 847 798), based in Orange, NSW, Australia. You can contact us at [email protected].

What data we collect

Data we do NOT collect

• Your project data. Tasks, schedules, costs, journals, notes, spotlight items, settings and attachments are stored in a database inside the app on your Mac, iPhone or iPad. If you turn on iCloud sync, a copy is kept in your own iCloud account so your devices stay up to date. That copy is held by Apple under your Apple ID, and we cannot read it. If you share a project, the people you invite can see and edit that project through iCloud. We have no servers that store, mirror or sync your project data.
• Telemetry or usage analytics. The app does not phone home, does not record what features you use, and does not track how often you open it. There are no analytics SDKs, no tracking pixels, no third-party telemetry libraries embedded in the app.
• Crash and freeze reports. The app records freeze reports on your Mac only. We receive one only if you choose to email it to us, or send a bug report. If you have turned on "Share with App Developers" in your device's privacy settings, Apple may also pass us crash reports for Vantage Plan; Apple decides what those contain, and they do not include your project data.

Data we do collect

• Purchases in the App Store: when you buy Basic, Pro or the Full Suite inside the app, Apple handles the payment and keeps the record of what you own. The app asks Apple what you own each time it opens. We do not receive your name, email or payment details from these purchases; Apple gives us sales totals and reports. Apple's privacy policy applies: https://www.apple.com/legal/privacy/.
• Purchase information (when you buy directly from us, not via the Mac App Store):
  Processed entirely by Lemon Squeezy, our payment provider and Merchant of Record. Lemon Squeezy collects the information needed to complete the transaction and to comply with global tax law: name, billing address, email, payment details, and tax-relevant fields. We receive a record of the transaction (your name, email, country, what you bought, when) so we can deliver your licence and provide support. We do not receive your payment-card details. Lemon Squeezy's privacy policy: https://www.lemonsqueezy.com/privacy.
• Email and support correspondence: if you email [email protected] or [email protected], we keep your message and our reply for as long as is reasonably needed to provide support and improve the product.
• Newsletter / waitlist signup: if you give us your email through a form on this website, we use it to send you updates about Vantage Plan. You can unsubscribe at any time using the link in any email. We do not share, rent, or sell this list.
• Web server logs: our website server keeps standard access logs (IP address, request URL, timestamp, user agent) for security and abuse prevention. These logs are deleted after no more than 90 days, or sooner if the log store reaches its size cap.

Optional features that involve a network request

• Google Calendar sync (opt-in only): if you connect Vantage Plan to your Google Calendar, the app communicates directly with Google's servers using OAuth. Calendar data flows between your Mac and Google. Vantage Plan's servers are not in this path. Your Google credentials are never stored by the app — only an OAuth token managed by Google's SDK on your Mac and protected by the macOS Keychain. You can disconnect at any time from within the app, which revokes the OAuth token. Google's privacy policy: https://policies.google.com/privacy.

  Scope requested: https://www.googleapis.com/auth/calendar.events — the narrowest scope that lets Vantage Plan create, read, update, and delete events on calendars you explicitly choose. We do not request read access to your full calendar list, contacts, Drive, Gmail, or any other Google data.

  Who we share Google user data with: No one. Calendar events fetched from or written to your Google account stay between your Mac and Google. Vantage Plan does not transmit, copy, or relay Google user data to its own servers, to any third party, to any analytics provider, to any AI provider, or to any subcontractor. The only parties that ever see this data are you, Google, and Apple (only if you also opt into Apple Calendar sync, in which case events you choose to mirror traverse Apple's EventKit on your Mac).

  Vantage Plan's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. See the dedicated section below.

• Apple Calendar sync (opt-in only): if you connect Vantage Plan to Apple Calendar, the app uses Apple's EventKit framework to read and write calendar events on your Mac. Data stays within Apple's ecosystem and syncs via iCloud only if you have iCloud Calendar enabled. Vantage Plan's servers are not in this path.

• AI Assistant (opt-in, on the Mac): when you use the in-app AI Assistant, the prompt and the relevant context you choose to send are forwarded directly from your Mac to the AI provider you have configured in settings. Supported providers and their privacy policies:

  • Anthropic (Claude) — https://www.anthropic.com/privacy
  • OpenAI (ChatGPT / GPT models) — https://openai.com/privacy
  • Google (Gemini) — https://ai.google/privacy

  Your API key is stored in your Mac's Keychain and is never transmitted to Vantage Plan's servers. We do not store, log, or have access to your AI prompts or responses — they go directly between your Mac and your chosen provider. The AI provider's own privacy and retention terms apply to those exchanges. You may also choose to run a model on your own computer instead of using any of these providers — see "Local AI models" below.

• Local AI models (opt-in, on the Mac): instead of a cloud provider, you may choose to run a language model on your own computer using third-party software such as LM Studio. When you select this option:

  • Your prompt and the context you send are addressed to your own machine (127.0.0.1) and do not leave your computer. No cloud AI provider is contacted, and no internet connection is needed for the AI to answer.
  • There is no API key, because no external service is involved. The only setting stored is the address and port of the local server, which is not secret and is kept in the app's ordinary preferences rather than the Keychain.
  • We do not supply, bundle, host, install, or recommend any model. You install the local server software yourself and you choose which model to run. That software and that model are governed by their own licences and terms, not by this policy.
  • Because the exchange happens entirely on your machine, we cannot see it, log it, or reach it — and neither can anyone on the internet.
  • If you configure the feature to reach a model server on another computer on your own network rather than on this Mac, that traffic travels across your local network and is not encrypted. macOS will ask your permission the first time this happens. If this matters to you, keep the server on this Mac, which is the default.

• Account Login (opt-in, on the Mac): instead of an API key, you can use your own Claude or ChatGPT subscription. This needs Vantage Plan Helper, a separate free app you download from our website and install yourself, and the AI company's own command-line tool, signed in with your account. Your messages go from your Mac to Anthropic or OpenAI through that tool, under your account and their terms. The Helper never sees or stores your password, and it only talks to Vantage Plan on your own Mac.

• Cloud voices (opt-in, on the Mac): if you choose an OpenAI or Google voice to read replies aloud, the text being read is sent to that provider. While Data Protection is on, the app uses the voice built into your Mac instead, unless you agree otherwise.

• Web search and web pages (opt-in, on the Mac): if you ask the assistant to search the web, your search words are sent from your Mac to DuckDuckGo. If you ask it to read a web page, your Mac fetches that page directly. We do not see or keep either.

• Data Protection (on the Mac): when you turn it on, names, email addresses, company names and project details are replaced on your Mac before anything is sent to a cloud AI provider, and amounts are scaled by a secret factor. The provider works with stand-ins, and the app turns its answer back into your real details on your Mac.

Features that look networked but aren't

• "Notify Team" / meeting reminders: Vantage Plan can generate a standard .ics calendar file for a task or meeting and open it in your default email client as a draft. The app does not send emails directly — it prepares a draft for you to review and send yourself. No data leaves your Mac via Vantage Plan in this flow.
• Data export: you can export your project data at any time as a .pproj file (a ZIP archive containing your database and attachments). The file is saved wherever you choose, locally on your Mac. No copy is uploaded anywhere.

How we use your data

• To deliver the product: support replies to your questions, and licence details for any purchase made directly from us.
• To communicate with you: newsletter updates if you've opted in, transactional messages about purchases or licences.
• To comply with law: invoicing and tax records as required by Australian and other applicable law (handled in practice by Lemon Squeezy as our Merchant of Record for global purchases).

We do not use your data to train AI models. We do not sell or rent your data to anyone.

Where your data is stored

• Project data: on your devices, and in your own iCloud account if you turn on iCloud sync. Shared projects are also stored in the iCloud accounts of the people you share them with. We hold no copy.
• Local AI model data: if you use the local AI model option, your prompts, the context sent with them, and the model's replies stay on your Mac. Nothing is uploaded anywhere.
• Purchase records: with Lemon Squeezy (United States; transfers governed by their data agreements) and in our own records (Australia).
• Email and support correspondence: in a Google Workspace mailbox. Google stores Workspace data across its global infrastructure; transfers outside the European Economic Area or the United Kingdom rely on the Standard Contractual Clauses in Google's data processing terms.
• Newsletter list: in Ghost, our publishing platform, on our own server (Hostinger, United States). We use Ghost's built-in newsletter; no separate mailing-list provider holds your address.
• Web server logs: on our hosting provider's servers (Hostinger, United States).
• Server backups: Hostinger stores automated backups of the website server in India. A backup is a full copy of the server, so it contains whatever the server held at the time — subscriber email addresses and access logs included.

This website (vantageplan.app)

Everything above describes the Vantage Plan app, which runs on your own computer. This section covers the website you are reading now, which is a separate thing with separate data handling.

The site is deliberately minimal. It carries no advertising, no third-party trackers, and no data brokers. But it is a website, so a few things do happen.

What is stored on your device

The ePrivacy Directive covers anything stored on your device, not just cookies. This is the complete list.

If you only read the site and never sign in, the two ghost-members-ssr cookies are never set. As of the last review, browsing vantageplan.app sets no cookies at all.

You can change your choice at any time using the Cookie settings link in the footer of every page. Refusing is one click and the site behaves identically.

Who else sees your visit

Loading any web page means your browser contacts a server, and that server necessarily sees your IP address. These are the parties involved when you visit this site.

We do not use Meta Pixel, advertising networks, or any tool that follows you between websites.

Two analytics tools are planned and are not active as of this version of the policy. When we switch either on, it will load only after you accept Analytics in the cookie banner, and this policy will be updated on the same day with the exact cookie names and durations.

Refusing Analytics, or withdrawing consent later via Cookie settings in the footer, keeps both tools off. Cloudflare Web Analytics is different: it sets nothing on your device and needs no consent, as described above.

Newsletter and account signup

If you give us your email address to subscribe or to create an account, that address is stored by Ghost on our own server. We use it only to send what you asked for. Every email carries a one-click unsubscribe, and unsubscribing is honoured immediately. We do not sell, rent, or share subscriber lists.

Purchases

When paid licences open, purchases will be handled by Lemon Squeezy as Merchant of Record. They collect the billing details needed to process payment and comply with tax law, under their own privacy policy. We receive the order confirmation and your email address; we never see or store your full card number.

Where the website's data is stored

The website runs on a Hostinger virtual server in the United States. Hostinger stores automated backups of that server in India. Cloudflare and jsDelivr operate global networks and may serve your request from a location near you.

For visitors in the European Economic Area or the United Kingdom, both the United States and India are outside those areas and neither currently has an adequacy decision. Those transfers rely on the Standard Contractual Clauses, which Hostinger incorporates into its Data Processing Agreement (Module Two, controller to processor) and which take effect on acceptance of its terms. Cloudflare's transfers are covered by the equivalent clauses in its own data processing terms.

How long the website keeps things

Our lawful bases, in plain terms

How we protect your data

We hold very little of your data in the first place — the strongest protection we offer is structural, not procedural. Concretely:

• Your project data stays with you. It lives in a database inside the app's sandboxed container on each device. If you use iCloud sync or sharing, it travels to your iCloud account encrypted, through Apple's CloudKit service. It goes to an AI provider only when you use a cloud AI feature, as described above. We have no servers that hold it, so there is no copy for an attacker to reach by attacking us.
• OAuth tokens are stored in the macOS Keychain, not in plain files, not in the app's preferences, and never on our servers. This applies to the Google Calendar OAuth token and to any AI-provider API key you configure. macOS controls Keychain access at the operating-system level.
• All network traffic that leaves your device is encrypted in transit. Calls to Apple's services, Google's APIs, cloud AI providers and our website use HTTPS with TLS 1.2 or higher, and the app refuses unencrypted connections to any internet server. There is one exception, and it exists only if you switch it on. The optional local AI model feature connects to a model server on your own Mac at 127.0.0.1, a connection that never travels over a network, so transport encryption does not apply. If you point that feature at another computer on your own network instead, that connection is not encrypted. See "Local AI models" above.
• No analytics, telemetry, or crash-reporting SDKs are embedded in the app. There is no third-party code path through which project data, calendar data, or AI prompts could leak.
• No cross-service data combination. Google Calendar data is never mixed with newsletter data, support correspondence, or purchase records. Each data category sits in a separate system with a separate purpose.
• Web infrastructure (Ghost, our hosting provider, Cloudflare) is configured with HTTPS-only access, modern TLS, automatic security updates, and minimum-privilege firewall rules. Server access logs are deleted after no more than 90 days, or sooner if the log store reaches its size cap.
• Support correspondence and newsletter data are held in established providers (Google Workspace and our newsletter provider) under their own security controls, which include encryption at rest and in transit.
• Retention is minimised. Web logs: no more than 90 days, or sooner if the log store reaches its size cap. Backups: four kept on a rolling basis. Support correspondence: as long as needed to provide support. Purchase records: as required by Australian and applicable tax law. We do not retain Google user data on our servers at all, because it never reaches them.
• A documented contact path. Security or privacy concerns can be raised at [email protected] and will be answered directly by our team.

Google API Services User Data Policy — Limited Use Compliance

The use and transfer of raw or derived user data received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In practical terms, this means:

1. We only use Google user data to provide the features you asked for. Calendar events fetched via the calendar.events scope are used solely to render, create, update, and delete events inside Vantage Plan, on calendars you have explicitly selected.
2. We do not transfer Google user data to others, except as necessary to provide or improve the user-facing features you have asked for, to comply with applicable law, or as part of a merger, acquisition, or sale of assets — in which case we will continue to apply these Limited Use commitments, and we will notify users if any such transfer occurs.
3. We do not use Google user data for serving advertisements, including retargeting, personalised, or interest-based advertising.
4. We do not allow humans to read Google user data unless: (a) we have your specific, written consent to do so for a specific message or item; (b) it is necessary for security purposes such as investigating abuse; (c) it is required to comply with applicable law; or (d) the data has been aggregated and anonymised and is used only for internal operations.
5. We do not use Google user data to train, develop, or improve generalised or non-personalised AI or machine-learning models. Google user data is never sent to any AI provider through Vantage Plan.

Questions about this statement can be sent to [email protected].

Your rights

Wherever you live, you can:

• Ask what data we hold about you.
• Ask for a copy of that data.
• Ask us to correct inaccuracies.
• Ask us to delete your data, subject to legal record-keeping obligations.
• Withdraw consent at any time — including the cookie choice, via Cookie settings in the site footer, and any emails from us.

Email [email protected]. We respond within 30 days. There is no charge, and you do not have to explain why.

If you are in the European Union or the United Kingdom

Under the GDPR and UK GDPR you have these rights in full, and we answer within one month of your request:

You are also entitled not to be subject to decisions made purely by automated means that have a legal or similarly significant effect on you. We make no such decisions.

Data controller: Ventaja Group Pty Ltd (ABN 77 701 847 798), Orange, NSW, Australia, [email protected]. We have not appointed a Data Protection Officer; we are not required to, as we conduct no large-scale monitoring and process no special-category data.

Complaints: you may complain to your national data protection authority at any time, without contacting us first. In Ireland that is the Data Protection Commission; in the UK, the Information Commissioner's Office. A full list is published by the European Data Protection Board. We would rather you told us first, but that is your choice and not a condition.

If you are in California

The CCPA and CPRA give you the right to know what personal information is collected, to have it deleted, to correct it, and to opt out of its sale or sharing. We do not sell or share personal information, and never have. We will not discriminate against you for exercising any of these rights. The same email address handles these requests.

If you are in Australia

The Australian Privacy Principles under the Privacy Act 1988 govern access to and correction of your personal information. Complaints can be made to the Office of the Australian Information Commissioner.

Children

Vantage Plan is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided information to us, please contact [email protected] and we will delete it.

Changes to this policy

We will update this policy from time to time. The "Last updated" date at the top reflects the most recent change. Material changes will be communicated by email to active customers and announced on this page.

Contact

Email: [email protected]
Postal: available on request.