Privacy Notice

Effective Date: October 12, 2026

At VendoLink, we're committed to being transparent about how we collect, use, and protect your personal information. This Privacy Notice explains our data practices and outlines your rights regarding your information.

We encourage you to read this Privacy Notice in full to understand how we handle your data.

1. What does VendoLink do?

VendoLink is an e-commerce platform that enables sellers to create beautiful, customizable storefronts and connect with customers. Our platform helps you showcase your products, manage orders, and grow your online business with ease.

This Privacy Notice applies to our website and services at vendolink.app, including our mobile applications and related software or features (collectively referred to as the "Platform" or "VendoLink"). The Platform allows sellers to create personalized storefronts, manage products, process orders, and customers to browse and purchase products from these storefronts.

In this Privacy Notice, we collectively refer to the Platform and our related services as the "VendoLink Services." The storefronts that sellers create using VendoLink are referred to as "Seller Storefronts." Seller Storefronts are publicly accessible and discoverable.

2. How does this Privacy Notice apply to me?

This Privacy Notice applies to personal information we collect as a controller about:

Sellers who sign up to create and manage storefronts on VendoLink
Customers who browse storefronts and make purchases
Individuals who visit our website or interact with VendoLink services
Individuals who respond to our surveys or marketing materials

In this Privacy Notice, we refer to all of the above individuals collectively as "VendoLink Users."

When we act as a "controller," we determine the purpose and means of processing your personal information. We may also act as a processor on behalf of sellers for the order details a seller needs to fulfill your purchase. Vendolink is the controller for the payment it processes, for any problem report or cancellation request you open about an order (the messages and photos you send, what you ask for, the outcome, and the IP address and browser used to open it), and for your answers when a seller changes a made-to-order ship-by date. When we review a report, we may look at other reports made with the same email address, including reports about other stores. For questions about how a seller handles the order details it receives, please contact that seller.

3. Information we collect

The personal information that we may collect about you broadly falls into the following categories:

Information you provide voluntarily

Account Information: When you create a VendoLink account, we collect your email address, password, username, name, and profile information
Payment Information: If you're a seller, we collect payment processing details. If you're a customer, we collect billing information, shipping address, and payment method details through our third-party payment processor
Product Information: Sellers provide product names, descriptions, images, prices, and inventory details
Order Information: We collect information about purchases, including customer details, products ordered, quantities, and transaction records
Communication Data: When you contact us or communicate through the Platform, we collect your messages and contact information
Signup and Feedback Information: If you're a seller, we save the campaign code and source tags carried by the link you used to sign up, your answer when we ask how you heard about Vendolink, and, if you cancel your subscription, any reason and comment you choose to give. A cancellation reason and comment are also shared with our payment processor as part of the cancellation

Information we collect automatically

Usage Data: IP address, device type, browser type, operating system, and information about how you interact with VendoLink
Analytics Data: Pages viewed, links clicked, time spent on pages, referring website, and other usage patterns
Location Data: Approximate geographic location based on IP address
Cookies and Tracking: We use cookies and similar technologies to collect information about your browsing activity

Information from third parties

Payment Processors: Transaction confirmation and payment status information
Analytics Providers: Information about how users interact with our Platform
Social Media Platforms: If you choose to connect social accounts, we may receive basic profile information

4. How we use the information we collect

We use the information we collect for the following purposes:

To provide and deliver VendoLink Services, including processing orders and managing your account
To process payments and prevent fraud
To communicate with you about your account, orders, and updates to our services
To provide customer support and respond to your inquiries
To personalize and improve your experience on VendoLink
To analyze usage patterns and improve our Platform
To send marketing communications (with your consent where required)
To comply with legal obligations and enforce our Terms of Service
To protect against unauthorized access and ensure platform security

We process your personal information based on the following legal bases:

Performance of a contract: To provide VendoLink Services under our Terms of Service
Legitimate interests: To improve our services, ensure security, and operate our business
Consent: When we ask for your permission to use your information for specific purposes
Legal obligations: To comply with applicable laws and regulations

5. How and when we share information

We may share your information in the following ways:

Publicly available information

Seller Storefronts are publicly accessible by default and may appear in search engine results. Product listings, store names, and other storefront content are visible to anyone who visits the storefront.

Information shared between sellers and customers

When you make a purchase, we share your name, email address, shipping address, and order details with the seller to fulfill your order. If you open a problem report or cancellation request about an order, we share what you write, the photos you add, and what you ask for with the seller. We never share the IP address or browser used to open it.

Service providers

Payment processors to facilitate transactions
Cloud hosting providers to store data
Email service providers to send transactional and marketing emails
Analytics providers to help us understand platform usage
Customer support tools to provide assistance

Card issuers and payment disputes

If you dispute a charge with your card issuer, we may share the order record, including order details, shipping information, and any problem report or cancellation request, with the card issuer and our payment processor to respond to the dispute.

Legal requirements

We may disclose your information to law enforcement, regulatory agencies, or other third parties when required by law, to protect our rights, or to protect the safety of our users.

Business transfers

If VendoLink is involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction.

6. Payment processors

We use third-party payment service providers to process payments. We do not store or collect your payment card details; this information is provided directly to our payment processors, whose use of your personal information is governed by their privacy policies.

Our payment processors adhere to PCI-DSS standards to ensure secure handling of payment information.

7. Cookies and tracking technologies

Some cookies and browser storage are needed for Vendolink to work, such as keeping you signed in and remembering your cart. These are always on.

We use PostHog, an analytics provider that processes information on our behalf, to understand how people use Vendolink. When you first visit, we ask whether you accept cookies and session recordings for analytics.

If you accept

We and PostHog use cookies and your browser's local storage to recognize your visits and the pages you use
If you are signed in as a seller, we link this activity to your account by an internal account ID, never by your name or email address
We record your session, meaning how you move through and click on our pages, so we can find and fix problems. Recordings mask all text on the page and everything you type into forms, and hide photos shared through private links

If you decline or do not choose

We count your visits without setting analytics cookies or storing analytics data in your browser. PostHog turns details of each request, such as your IP address and browser, into a code that changes every day, so a visit can be counted without recognizing you from one day to the next. We do not record your session.

You can change your choice at any time with the "Cookie settings" link in the footer of our website, in the menu of any storefront, or on your seller settings page. We keep a record of your choice in your browser's local storage.

We also analyze our own business records in PostHog's data warehouse, such as order totals, product listings, and seller account and subscription details. These records do not include buyers' names, email addresses, or shipping addresses.

You can also control cookies through your browser settings. However, disabling cookies may affect your ability to use certain features of Vendolink.

8. Data retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Notice and to comply with legal, accounting, and reporting requirements.

When you delete your account, we will delete or anonymize your personal information within a reasonable timeframe, except where we are required to retain it by law.

9. Data security

We implement technical, administrative, and physical safeguards to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include:

Encryption of data in transit and at rest
Regular security assessments and audits
Access controls and authentication measures
Employee training on data protection
Incident response procedures

However, no system is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

10. Your privacy rights

Depending on your location, you may have the following rights regarding your personal information:

Access: Request a copy of the personal information we hold about you
Correction: Request correction of inaccurate or incomplete information
Deletion: Request deletion of your personal information
Portability: Request a copy of your information in a portable format
Objection: Object to our processing of your personal information
Restriction: Request restriction of how we process your information
Withdraw consent: Withdraw consent where we rely on it as our legal basis
Opt-out: Opt out of marketing communications at any time

To exercise these rights, please contact us at privacy@vendolink.app. We will respond to your request within the timeframe required by applicable law.

11. Children's privacy

VendoLink is not intended for use by children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete that information.

12. International data transfers

Your personal information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from your country.

We take appropriate safeguards to ensure your personal information remains protected in accordance with this Privacy Notice, including using standard contractual clauses and other approved transfer mechanisms.

13. Third-party links

VendoLink may contain links to third-party websites or services. This Privacy Notice does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

14. Changes to this Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in our practices or applicable laws. When we make material changes, we will notify you by email or through a notice on our Platform.

You can see when this Privacy Notice was last updated by checking the "Effective Date" at the top of this page.

15. Contact us

If you have questions about this Privacy Notice or our privacy practices, or if you would like to exercise your privacy rights, please contact us:

By email: privacy@vendolink.app
By mail: VendoLink, Inc., [Address]