Privacy Policy

Vendyr is a community-maintained directory and knowledge base for vendor markets and events. This policy explains what we collect, why, who we share it with, and the choices you have. We try to keep it readable — if anything is unclear, email us and we’ll explain.

1. Information we collect

• Account identity — when you sign in with Google, we receive your name, email address, Google account identifier, and profile photo. We use this to create and secure your account and to contact you about it.
• Vendor profile — anything you choose to add, such as business name, product categories, bio, links, photo, and an optional home ZIP code used to sort markets by distance.
• Contributions — markets you submit, edits you suggest, organizer claims, and any reports or flags you file. See “Your contributions” below.
• Favorites & preferences — the markets you save and basic settings that personalize your experience.
• Technical data — limited information your browser sends automatically, such as IP address, device and browser type, and approximate region, used to keep the service running securely and to understand how it’s used.

2. Signing in with Google

We use Google OAuth for authentication, so we never see or store your Google password. Google shares a limited profile (name, email, photo, and an account ID) with us when you approve the sign-in. Your use of Google sign-in is also governed by Google’s own privacy policy. You can revoke Vendyr’s access at any time from your Google account’s security settings.

3. Cookies & analytics

We use cookies and similar technologies that are necessary to keep you signed in and to remember your preferences. We may also use privacy-respecting analytics to understand which features are used and to improve the product. Analytics data is used in aggregate and is not sold. Where required, we honor your browser’s “Do Not Track” and consent signals. You can block non-essential cookies through your browser, though some features may stop working.

4. Your contributions

Vendyr’s market records are collaboratively maintained. When you submit a market, suggest an edit, or claim an organizer role, that contribution may be reviewed by organizers or admins and merged into the community-maintained record. Public contributions (like market details that are accepted into a listing) are visible to others and attributed using a display name you control.

Because Vendyr is a shared knowledge base, accepted contributions may remain on the platform as part of the historical record even after you delete your account, though they will be de-identified from your account where practical. See “Data retention” below.

5. How we use your information

• To operate the directory — showing markets, your profile, and your saved favorites.
• To review and merge contributions and to moderate content.
• To support organizer claims and the organizer editing workflow.
• To keep the service secure, prevent abuse, and debug problems.
• To communicate with you about your account or important changes.

We do not sell your personal information.

6. Who we share it with

We share data with service providers who help us run Vendyr, only as needed to provide the service:

• Supabase — database, authentication, and file storage.
• Vercel — application hosting and content delivery.
• Google — sign-in (OAuth) and authentication.
• Analytics provider(s) — aggregate product analytics.

These providers process data on our behalf under their own terms and security commitments. We may also disclose information if required by law, to protect our users, or as part of a business transfer (for example, a merger or acquisition).

7. Data retention

We keep your account data while your account is active. Contributions that have been merged into community-maintained records may be retained as part of the historical record even after account deletion, de-identified from your account where practical. Technical logs are kept for a limited period for security and debugging. When data is no longer needed, we delete or anonymize it.

8. Deleting your account

You can permanently delete your account at any time from your profile. Deletion removes your profile, favorites, account settings, and personal identifiers, and de-identifies records you created about other content. As noted above, contributions already merged into the shared directory may remain as part of the historical record. Deletion cannot be undone.

9. Exporting your data

You can download a machine-readable export of your data from your profile. If you have trouble, email us and we’ll help you get a copy.

10. Your privacy rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. These reflect protections under laws like the EU/UK GDPR and the California Consumer Privacy Act (CCPA).

• Access & portability — request a copy of your data, or export it yourself.
• Correction — fix inaccurate profile information.
• Deletion — delete your account and personal data.
• Object / restrict — ask us to limit certain uses of your data.
• No sale of data & no discrimination — we don’t sell your personal information, and we won’t treat you differently for exercising your rights.

To exercise any of these, use the tools in your profile or email us. We may need to verify your identity before acting on a request.

11. Children

Vendyr is intended for adults running or exploring vendor businesses and is not directed to children under 13 (or the minimum age in your country). We don’t knowingly collect data from children; if you believe a child has used Vendyr, contact us and we’ll remove the data.

12. International data

Our providers may process and store data in the United States and other countries. Where required, we rely on appropriate safeguards for cross-border transfers.

13. Changes to this policy

We may update this policy as Vendyr grows. If we make material changes, we’ll update the “Last updated” date and, where appropriate, notify you in the app or by email. Your continued use after an update means you accept the revised policy.

14. Contact us

Questions or privacy requests: privacy@vendyr.app (placeholder — confirm before launch). See also our Terms of Service.