Privacy Policy

1. Introduction

Welcome to Vendly. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our service.

2. Information We Collect

We collect information you provide directly to us, including:

• Account information (name, email address, password)
• Product data you upload for listing generation, including product images, descriptions, attributes, and pricing
• Payment information (processed securely by Paddle.com — we do not store your credit card details)
• Communications you send to us
• Usage data such as listings generated and features used

We also automatically collect certain information, including:

• IP address and approximate geographic location
• Browser type, device information, and operating system
• Log data, error reports, and server request information

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Generate AI-powered product listings using your uploaded content
• Process transactions and send related information
• Send technical notices, updates, and support messages
• Respond to your comments, questions, and requests
• Monitor and enforce compliance with our Terms of Service, including prohibited content policies
• Detect, prevent, and address fraud, abuse, and security issues
• Comply with legal obligations

4. Image and Content Processing

When you upload product images and content to Vendly, you acknowledge and agree that:

• Your images and product data are transmitted to third-party AI services (including OpenAI) for processing and listing generation
• Images are processed on our servers and may be temporarily stored to facilitate AI analysis
• We may review uploaded content for compliance with our prohibited content policies (see our Terms of Service)
• Content flagged as potentially violating our policies may be retained for review and legal compliance purposes
• We do not sell your images or product data to third parties for marketing purposes

Third-party AI providers process your data according to their own privacy policies and data processing agreements. We recommend reviewing OpenAI's privacy policy for information on how they handle data transmitted through their API.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including encryption of data in transit and at rest, secure server infrastructure, and access controls. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

• Account data is retained for as long as your account is active
• Product images and listing data are retained while your account is active and may be deleted upon account closure
• Payment records are retained as required by tax and financial regulations
• Content removed for policy violations may be retained as necessary for legal compliance and to prevent repeat violations
• Upon account deletion, your personal data is deleted promptly, except where retention is required by law

7. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases as defined by the General Data Protection Regulation (GDPR):

• Contract performance — processing necessary to provide you with our service (e.g., account creation, listing generation, payment processing)
• Legitimate interest — processing necessary for our legitimate business interests (e.g., improving the service, fraud prevention, security monitoring), where these interests are not overridden by your rights
• Consent — where you have given explicit consent for specific processing activities (e.g., receiving marketing communications)
• Legal obligation — processing necessary to comply with applicable laws (e.g., tax record keeping, responding to legal requests)

You may withdraw your consent at any time by contacting us at support@vendlyapp.com. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

8. Your Rights

Depending on your location, you may have the right to:

• Access your personal data and receive a copy of it
• Correct inaccurate or incomplete data
• Request deletion of your data (subject to legal retention requirements)
• Object to or restrict processing of your data

To exercise any of these rights, please contact us at support@vendlyapp.com. We will respond to your request within 30 days.

9. Cookies

We use cookies and similar tracking technologies to track activity on our service and hold certain information. Types of cookies we use:

• Essential cookies — required for the service to function (authentication, session management, CSRF protection)

You can instruct your browser to refuse all cookies or indicate when a cookie is being sent. However, disabling essential cookies may prevent you from using certain features of the service.

10. Third-Party Services

We share data with the following third-party services to operate Vendly:

• OpenAI — processes your product data and images to generate AI-powered listings
• Paddle.com — processes payments as the Merchant of Record
• Resend — sends transactional emails (password resets, notifications)
• Render — hosts our application infrastructure

Each third-party service has its own privacy policy governing their processing of your data. We are not responsible for the privacy practices of these third parties. Our service may also contain links to third-party websites whose privacy practices we do not control.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our third-party service providers operate. These countries may have data protection laws that differ from your jurisdiction. By using Vendly, you consent to the transfer of your information to these countries.

12. Children's Privacy

Vendly is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that information promptly.

13. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we may also notify you via email. Your continued use of the service after changes are posted constitutes your acceptance of the revised policy.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to file a complaint, please contact us at support@vendlyapp.com

As a small business, we are not required to appoint a Data Protection Officer (DPO). For all privacy-related inquiries, please contact us at the email address above and we will address your concerns promptly.