Privacy Policy

1. Introduction

Vendify ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

By using Vendify, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when using our Platform:

• Account Information: Email address, organization name, contact name, phone number
• Event Information: Event details, descriptions, dates, locations, pricing
• Booking Information: Vendor name, business name, email, phone number
• Payment Information: Processed and stored by Stripe (we do not store credit card numbers)

2.2 Automatically Collected Information

When you access our Platform, we automatically collect:

• Device Information: IP address, browser type, operating system
• Usage Data: Pages visited, time spent, clickstream data
• Cookies: Small data files stored on your device (see Cookie Policy below)

3. How We Use Your Information

We use collected information for:

• Service Delivery: Processing bookings, facilitating payments, managing events
• Communication: Sending booking confirmations, event updates, important notices
• Platform Improvement: Analyzing usage patterns, fixing bugs, developing new features
• Security: Detecting fraud, preventing abuse, enforcing our Terms of Service
• Legal Compliance: Meeting legal obligations, responding to lawful requests
• Marketing: Sending promotional emails (you can opt out at any time)

4. Information Sharing and Disclosure

4.1 With Event Organizers

When you book a table, we share your vendor information (name, email, phone, business name) with the event organizer to facilitate the booking.

4.2 With Service Providers

We share information with third-party service providers:

• Stripe: Payment processing (subject to Stripe's Privacy Policy)
• Supabase: Database and authentication services
• Vercel: Hosting and deployment

4.3 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or to protect our rights, property, or safety.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

4.5 With Your Consent

We may share your information for other purposes with your explicit consent.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• SSL/TLS encryption for data transmission
• Secure authentication via Supabase
• Row-level security policies in our database
• Payment data handled exclusively by Stripe (PCI DSS compliant)
• Regular security audits and updates

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations (e.g., tax records, financial reporting)
• Resolve disputes and enforce agreements
• Maintain business records

When data is no longer needed, we will securely delete or anonymize it.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

7.1 Access and Portability

Request a copy of the personal information we hold about you.

7.2 Correction

Request correction of inaccurate or incomplete information.

7.3 Deletion

Request deletion of your personal information (subject to legal retention requirements).

7.4 Opt-Out

Unsubscribe from marketing emails via the unsubscribe link in any email.

7.5 Restriction

Request restriction of processing of your information in certain circumstances.

To exercise these rights, contact us at support@vendify.com

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain your session and authentication
• Remember your preferences
• Analyze platform usage and performance
• Improve user experience

You can control cookies through your browser settings. Note that disabling cookies may affect platform functionality.

9. Third-Party Links

Our Platform may contain links to third-party websites (e.g., Stripe, event organizer websites). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

10. Children's Privacy

Our Platform is not intended for children under 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws. By using our Platform, you consent to such transfers.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of sale of personal information
• Right to deletion
• Right to non-discrimination for exercising CCPA rights

Note: We do not sell your personal information to third parties.

13. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including:

• Right to access your data
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

14. Do Not Track

Some browsers have "Do Not Track" features. Our Platform does not currently respond to Do Not Track signals.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy with a new "Last updated" date. Your continued use after changes constitutes acceptance of the updated policy.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: