← Vendor Vault
Legal

Privacy Policy

Effective: February 2026

Vendor Vault ("we", "us") respects your privacy. This Policy explains what we collect and why.

1. What we collect

  • Account data: email, name, hashed password.
  • Business data you enter: products, variants, sales, events, photos.
  • Connected service tokens: encrypted OAuth tokens for Square and Shopify, used only to call those APIs on your behalf.
  • Billing data: handled entirely by Stripe — we only store your Stripe customer/subscription IDs, never card numbers.
  • Operational data: server logs, error reports, IP addresses for security purposes.

2. How we use it

To provide the Service, send transactional email (receipts, invites, password resets, verification), keep the platform secure, and improve performance. We do not sell your data. We do not use it to train AI models.

3. Third-party processors

  • Stripe — payments & subscriptions.
  • Square — when you connect, for in-person payments.
  • Shopify — when you connect, for catalog sync.
  • Resend — transactional email delivery.
  • MongoDB Atlas & Emergent — application hosting.

4. Your rights

You can export all your data from /billing, request deletion of your account (purges everything within 30 days), or contact us with any request at support@vendorvaultonline.com.

If you're in the EU/UK, you have GDPR rights of access, rectification, erasure, restriction, portability, and objection. If you're in California, you have CCPA rights of know, delete, and non-discrimination.

5. Retention

We keep your data while your account is active. After deletion, we purge it within 30 days, except as required by law (e.g. tax records may need to be retained longer).

6. Security

Passwords are bcrypt-hashed. OAuth tokens are stored encrypted at rest in our database. We use TLS in transit. No system is 100% secure — please report any vulnerabilities to security@vendorvaultonline.com.

7. Children

Vendor Vault is not directed at children under 16. We do not knowingly collect data from them.

8. Changes

If we change this Policy materially, we'll email you. Continued use means acceptance.

9. Contact

Questions? support@vendorvaultonline.com

Terms of ServiceHome