Privacy policy
PART 2: DATA PRIVACY POLICY
Last Updated: August 31, 2026
Vendr is operated by Lorenzo Martin trading as Vendr ("Vendr," "we," "our," or "us"), with contact email privacy@vendr.app. We respect your privacy. This Data Privacy Policy explains how we collect, use, store, and disclose information when you use our SaaS platform.
1. INFORMATION WE COLLECT
Account & Identity Data: Name, business name, store location, email address, and authentication identifiers.
Store & Inventory Data: SKUs, custom pricing, stock quantities, trade desk logs, purchase order histories, and ledger cash-flow entries entered into your POS.
Technical & Usage Data: IP addresses, browser types, device identifiers, system logs, error reports, and interactions with our user interface.
Payment & Billing Data: When you purchase a subscription, financial payment data is collected and processed exclusively by Paddle (our Merchant of Record). Vendr does not collect, store, or process raw credit card numbers or bank account details on our servers. We only receive transaction metadata (e.g., subscription status, order IDs, and invoicing timestamps).
2. HOW WE USE YOUR INFORMATION
We use collected data to:
Provide, maintain, and secure the Vendr POS, trade desk, and database mirroring infrastructure.
Synchronize multi-tenant inventory tables and prevent concurrency errors or stock overselling.
Anonymize and aggregate transaction pricing and inventory velocity data to construct market price analytics, valuation models, and industry pricing benchmarks.
Communicate administrative notices, system updates, security alerts, and support responses.
Comply with legal, tax, and accounting obligations.
3. DATA SHARING & THIRD-PARTY PROCESSORS
We share personal data only with the categories of recipients necessary to operate the Service:
Merchant of Record: Paddle.com Market Limited / Paddle.com Inc. receives the data required to complete your purchase, manage subscriptions, process payments, handle tax compliance, and issue invoices.
Service Providers & Subprocessors: Hosting, database, authentication, error-reporting, and support-tooling providers that process data on our behalf under contractual data-protection obligations.
Professional Advisers: Legal, accounting, and compliance advisers where disclosure is necessary.
Authorities: Regulators, law enforcement, or courts where disclosure is required by applicable law.
We do not sell your personal data to third parties.
4. DATA RETENTION & SECURITY
We implement industry-standard technical and organizational security measures (including row-level security in PostgreSQL, token-based authentication, and atomic transaction guards) to protect your data against unauthorized access or modification. Store Data is retained for as long as your account remains active or as needed to comply with legal ledger obligations.
5. YOUR PRIVACY RIGHTS (GDPR / CCPA / GLOBAL)
Depending on your jurisdiction, you have the right to:
Access & Portability: Request an export of your store inventory and transaction ledgers in a structured digital format (e.g., CSV or JSON).
Rectification: Correct inaccurate personal or business account information via your store dashboard.
Erasure ("Right to Be Forgotten"): Request the deletion of your account and associated Store Data, subject to standard backup cycles and legally mandated accounting retention periods.
Withdraw Consent: Opt out of non-essential operational communications at any time.
6. COOKIES AND SIMILAR TECHNOLOGIES
We use cookies and similar technologies for two distinct purposes. Strictly necessary cookies keep you signed in, maintain your session, and secure the application; the Service cannot function without them. Advertising cookies are described in Section 7 and are only ever set on the surfaces named there.
Most browsers allow you to refuse or delete cookies through their settings. Blocking strictly necessary cookies will prevent you from signing in and using the Service.
7. ADVERTISING
Vendr shows third-party advertising to stores on the Free plan, and on the public storefront pages of stores on the Free plan. Paid plans, active trials and post-cancellation grace periods do not display advertising, and the advertising provider's script is not loaded at all on pages that carry no ads. Advertising is never shown on the point-of-sale screen, at checkout, or on anything printed.
Advertising on Vendr is served by Google, using Google AdSense. Third party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to users based on their visit to this site and/or other sites on the Internet.
Google may use a device identifier, IP address, approximate location, and browsing activity to select and measure the ads it serves. Vendr does not share your account details, store data, inventory records, customer records or transaction history with any advertising provider, and advertising is not targeted using data you enter into the Service.
You may opt out of personalised advertising by Google by visiting Google Ads Settings at https://myadcenter.google.com. You may opt out of the use of cookies for personalised advertising by many third-party vendors at https://www.aboutads.info/choices, at https://www.youronlinechoices.eu if you are in Europe, or through the Network Advertising Initiative at https://optout.networkadvertising.org. Opting out does not remove advertising; it makes the advertising you see less specific to you.
Where consent is required for advertising cookies — including for visitors in the European Economic Area and the United Kingdom — advertising cookies are set only after consent is given through the consent notice presented on the site, and you may withdraw that consent at any time through the same notice.
Advertising can be removed entirely from a store and from its public storefront by upgrading that store to a paid plan.
To exercise your privacy rights, contact us at: privacy@vendr.app (or your designated legal contact email).