Privacy Policy

Who this policy covers

VendOS provides software for consignment businesses. For questions about this policy or your information, contact info@vendos.space.

This policy covers the VendOS website and application. A store using VendOS remains responsible for the customer, consignor and staff information it chooses to put into its workspace. If your question concerns a transaction with that store, contact the store directly.

Information we handle

• Account information: your name, email address, authentication identifiers and profile information you provide.
• Workspace information: store settings, staff memberships, consignor and customer details, inventory, photos, documents, sales, payments, refunds, settlements and activity records entered by workspace users.
• Pre-launch subscription testing: account email, workspace identifiers and test checkout or subscription records when you use the enabled billing sandbox.
• Support information: the messages and information you send when you contact us.
• Technical information: connection and request information used by our hosting and authentication services, including IP addresses, browser details, timestamps and security logs.

Google sign-in

If you choose Continue with Google, Google provides your Google account identifier, email address, verification status and basic profile information, which can include your name and profile image. VendOS uses this information to authenticate you, associate your sign-in with your account and support your profile.

We request only the openid, email and profile permissions. We do not request access to your Gmail messages, Google Drive files, contacts or calendar. VendOS does not receive your Google password.

Authentication information and the profile information supplied through Google are processed and stored by our authentication provider, Supabase. Workspace display names can appear to authorized colleagues in profiles and activity records.

Google sign-in information is used for account access and the service described here, not for advertising or sale to data brokers. You can review or revoke the Google connection in your Google Account connections. Revoking the connection does not by itself delete your VendOS account or workspace records.

Why we use information

We use information to provide account access and workspace functions, maintain records requested by the business, respond to support requests, protect accounts and investigate errors or misuse. We also handle information when needed to meet applicable legal obligations.

Where data-protection law requires a legal basis, the relevant basis depends on the purpose: providing a requested service, meeting a legal obligation, protecting and operating the service where legally permitted, or your consent where required. Choosing Google sign-in authorizes the identity permissions shown by Google.

Who can receive information

Authorized workspace members can access information according to their workspace permissions. VendOS uses Supabase for authentication, database and file storage, and Netlify for application hosting and delivery. Google handles the Google authentication step when you choose it. These providers process the information needed for their respective functions.

Pre-launch subscription testing uses Paddle Sandbox. If you start a test checkout, VendOS sends your account email and workspace identifier to Paddle and stores related test transaction and subscription identifiers. Sandbox checkout is for testing; it does not take a live payment. Do not enter real card details in a sandbox checkout.

Information you email to VendOS is handled through the email services involved in that communication. We may disclose information when legally required or when necessary to address fraud, abuse or security incidents. We do not publish workspace records on this website.

Our providers may process information in locations outside your country. Applicable safeguards and provider terms depend on the processing involved; contact us for details about your use of the service.

Cookies and browser storage

The public information pages do not include advertising trackers or third-party analytics scripts. Hosting providers can still process technical request logs.

The application uses cookies and browser storage for its access gate, authenticated sessions, workspace selection and interface preferences. Sample-workspace information may be stored in your browser. Clearing browser storage can sign you out or remove local preferences, but does not delete server-side workspace records.

Retention, deletion and your choices

We keep account and workspace information while it is needed to provide the service and for applicable record-keeping, security or legal requirements. Transaction documents and activity history can have different retention needs from editable profile information; deletion of an account does not necessarily erase a store's transaction history.

Contact info@vendos.space to request access, correction, export or deletion, or to ask about retention for your account. We may need to verify your identity and authority over a workspace before acting. We will explain any information that must be retained and why. Backups and security logs may follow separate retention cycles.

Depending on the law that applies to you, you may also have rights to restrict or object to certain processing, withdraw consent, or complain to a relevant data-protection authority. Requests concerning a store's business records may need to be handled by that store.

Security and policy updates

VendOS uses authenticated access and workspace permissions to protect business information. No internet service can guarantee absolute security. If you suspect unauthorized access, contact info@vendos.space.

We may update this policy when the service or its data practices change. The date on this page identifies the current version. Changes to how Google information is used will be disclosed, and additional consent requested where required, before the new use begins.