Privacy Policy

This Privacy Policy explains what information Vendylio collects, how we use it, and the choices you have. It applies to Sellers, Buyers, and anyone else who uses Vendylio.

1. Information we collect

• Account information — email address, name, and password (stored as a secure hash, never in plain text) for Sellers and registered Buyers.
• Order information — for guest and registered checkouts: name, email, phone number, and delivery address, so a Seller (and courier, when delivery is used) can fulfill the order.
• Payment information — card payments are handled entirely by Stripe; Vendylio never receives or stores your full card number.
• Store information — for Sellers: store name, description, logo, and contact details displayed publicly on their storefront.
• Usage information — basic technical logs (IP address, browser type, timestamps) used for security, fraud prevention, and debugging.

2. How we use this information

• To create and secure your account, and to authenticate you when you log in.
• To process orders, payments, and deliveries.
• To send transactional emails (order confirmations, verification codes, receipts).
• To detect and prevent fraud or abuse of the platform.
• To improve and maintain the Vendylio service.

3. Who we share it with

• Stripe — for processing card payments and, for Sellers who opt in, payouts via Stripe Connect.
• Uber Direct — order pickup/delivery address and contact details, only for orders that use courier delivery.
• Resend — to deliver transactional emails.
• The Seller you order from — so they can fulfill and communicate about your order.

We do not sell your personal information to third parties.

4. Data retention

We keep account and order data for as long as your account is active, and for a reasonable period afterward to comply with tax, accounting, and fraud-prevention obligations. Verification codes and short-lived security tokens are automatically deleted shortly after they expire.

5. Your choices

• You can update your account information at any time from your dashboard.
• You can request deletion of your account by contacting us — some data (e.g. records needed for tax or dispute purposes) may be retained as required by law.

6. Cookies

Vendylio uses essential cookies to keep you signed in and to protect your account (session and CSRF-protection cookies). We do not use third-party advertising cookies.

7. Security

We use industry-standard measures (encrypted connections, hashed passwords, restricted internal access) to protect your data. No system is perfectly secure, and we cannot guarantee absolute security.

8. Changes to this policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date above when we do.

9. Contact

Questions about this policy or your data? Contact us at no-reply@vendylio.com.