Privacy Policy
Last updated: January 1, 2026
1. Introduction
VendShift ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services. By using VendShift, you agree to the terms of this policy.
2. Information We Collect
Account Information
When you create an account, we collect your name, email address, company name, and any other details you provide. If you sign in via Google OAuth, we receive your Google profile information subject to your Google account permissions.
Business Data
We store data you upload or create within the platform, including brand pipeline data, supplier information, inventory records, purchase orders, and outreach campaign content.
Usage Data
We automatically collect certain technical data when you use our platform, including IP addresses, browser type, pages visited, and timestamps. This helps us improve the service and diagnose issues.
3. How We Use Your Information
- To provide and maintain the VendShift platform and its features
- To authenticate your identity and secure your account
- To process transactions and send related communications
- To send product updates, security alerts, and support messages
- To improve our AI models and platform performance (using anonymized data)
- To comply with legal obligations
We do not sell your personal data to third parties.
4. Cookies and Tracking
We use session cookies to keep you logged in and functional cookies to remember your preferences. We may also use analytics tools (such as Vercel Analytics) that collect anonymized usage data to help us understand how the product is used.
You can disable cookies in your browser settings, but this may affect the functionality of certain features.
5. Third-Party Services
We use trusted third-party services to operate VendShift:
- Neon / PostgreSQL — database hosting
- Vercel — platform hosting and deployment
- Stripe — payment processing (when billing is enabled)
- Google OAuth — optional social sign-in
- OpenAI — AI-generated outreach content
Each third party is subject to its own privacy policy. We share only the data necessary for these services to function.
6. Data Retention
We retain your account and business data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes such as fraud prevention.
7. Your Rights
Depending on your location, you may have the following rights:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict certain processing activities
- Data portability (receive your data in a machine-readable format)
To exercise any of these rights, contact us at legal@vendshift.com.
8. Security
We implement industry-standard security measures including HTTPS encryption, hashed passwords, and secure session management. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice within the platform. Continued use of VendShift after changes constitutes your acceptance of the updated policy.
10. Contact Us
If you have questions or concerns about this Privacy Policy, please contact us at: legal@vendshift.com