Privacy policy

Who controls your data

For sellers (people running a store on Vendoria), Vendoria is the data controller for account and platform-usage data. Vendoria has no billing for sellers and holds no seller payment details.

For buyers (people shopping on a seller's storefront), the seller is the primary data controller for order and contact information; Vendoria acts as a data processor on the seller's behalf.

What we collect

• Account info: name, email, hashed password, business/storefront name, currency and locale preferences.
• Order data: items purchased, prices, shipping/pickup details, buyer name, email, phone (when provided), shipping address.
• Payment data: processed by Stripe. We store a Stripe customer/payment-intent identifier and the order amount; we do not store full card numbers or CVCs.
• Channel-integration data: when you connect eBay, we store encrypted OAuth tokens and the order and listing data eBay returns for your store. Links you paste to the same item on Mercari or Facebook Marketplace are stored as plain links; we do not connect to those sites.
• Communications: messages sent through buyer-seller chat, AI buyer assistant questions, and transactional emails/SMS/WhatsApp we deliver on your behalf.
• Item photos and listings: photos you upload, and the title, description and price you write. When you ask Add Item to draft a listing from a photo, that photo is sent to Anthropic to write the draft.
• Operational logs: the server's own log of errors and warnings, which can include the IP address or eBay username involved, and short-lived rate-limit counters kept in memory by IP address. We do not use an outside error-reporting service.

How we use it

• Operate your storefront and process orders end-to-end.
• Send transactional notifications (order confirmations, shipping updates, abandoned-cart reminders to buyers who provided an email at checkout).
• Sync inventory and orders between your Vendoria store and connected channels (eBay, etc.).
• Provide product analytics, CRM features, and an optional AI buyer assistant to sellers.
• Detect abuse, prevent fraud, and meet legal obligations.

We do not sell your data. Campaign email and texts go only to contacts who opted in; buyers who reached a store through a channel such as eBay are left out of campaigns until they opt in directly.

Sub-processors we use

• Stripe: payment processing
• Twilio: SMS and WhatsApp messaging
• Microsoft: transactional email delivery (Microsoft Graph)
• Cloudflare: DNS, edge networking, and bot protection
• Anthropic: drafting a listing from a photo when you ask for it, and the AI buyer chat on storefronts (when enabled)
• eBay: price checks send the item's search words to eBay's public search; your account data goes to eBay only when you connect it
• USPS: shipping rate quotes, which send the origin and destination ZIP codes and the package weight and size
• Google, Microsoft: only when you choose to sign in with them
• PirateShip: when you open a shipping label from an order, the buyer's shipping address goes to PirateShip in that link
• MinIO / S3-compatible storage: product photo hosting

Cookies and storage

Signing in sets an httpOnly session cookie. The app also keeps your sign-in token and basic account details (name, email, store) in your browser's localStorage so you stay signed in; signing out removes them.

Your browser also keeps, on your device only: your cart for each store, the last store you visited, the name and email you gave a store's assistant chat, your language (a cookie), your light or dark theme, and which tips you closed. We do not use third-party advertising trackers.

Data retention

Order, contact, and listing data are retained while your account is active. When a seller asks us to close their account (see Delete my data), we delete the account, contacts, and listings by hand and confirm by email. Records the law requires us to keep, such as tax and payment records, are kept only for as long as it requires.

Your rights

You have the right to access, correct, export, or delete your personal information. Email [email protected]with your request; a person reads every request and replies by email. If you are a buyer who wants their data removed from a specific seller's storefront, contact that seller directly first; we can assist if they do not respond.

Residents of California (CCPA), the EEA/UK (GDPR), and other jurisdictions with applicable privacy laws have additional rights, including the right to lodge a complaint with a supervisory authority.

Marketplace account deletion (eBay et al.)

For sellers who connect their eBay account: when eBay sends us a notice, signed with eBay's key, that one of your buyers has deleted their eBay account, we remove that buyer's personal data from your Vendoria customer list and eBay orders as soon as the notice arrives. Order records are retained in pseudonymized form for tax compliance.

Security

We encrypt data in transit (TLS) and channel OAuth tokens at rest (AES-256-GCM). Passwords are hashed with bcrypt. No system is perfectly secure.

Changes to this policy

We may update this policy from time to time. Changes are posted on this page with a new "Last updated" date above.

Contact

Questions or requests: [email protected].