Privacy Statement

1. Introduction & Scope

This Privacy Statement applies to all products, software, hardware, websites, and APIs operated by Vendify, Inc. (“Vendify,” “we,” “our,” or “us”). Whether you are an entrepreneur launching an independent storefront, a multi-location retailer utilizing our POS systems, or a shopper purchasing goods through a Vendify-powered merchant app, this policy governs your personal information.

By registering for an account, accessing our dashboard, installing our mobile software, or using any Vendify hardware terminal, you acknowledge that you have read and understood the practices described herein.

2. Information We Collect

We collect information necessary to deliver full-stack commerce features, process secure payments, prevent financial fraud, and comply with regulatory requirements. The categories of data we collect include:

A. Information You Provide to Us

• Account Registration: Name, business name, physical street address, corporate tax ID or EIN, email address, and phone number.
• Financial & Payout Data: Bank account routing numbers, account numbers, and beneficial ownership verification records required for merchant payment settlements.
• Catalog & Store Setup: Product catalogs, inventory counts, pricing variants, brand assets, packaging options, and store location hours.
• Communications: Messages, inquiries, or feedback submitted through our customer care desk, phone helplines, or sales consultations.

B. Information Collected Automatically

• Hardware & Terminal Data: Serial numbers, firmware revisions, battery health, network connectivity status, and peripheral connection logs from Vendify POS readers.
• Usage & Telemetry: Log data, feature interaction events, screen navigation latency, error reports, and dashboard performance metrics.
• Device & Connection: IP address, operating system version, browser attributes, and approximate geographic location derived from IP addresses.

C. Customer & Transaction Information

When end customers complete transactions at a Vendify terminal or through a merchant's branded app:

• Payment Tokens: Cryptographically masked cardholder details and payment network tokens (raw credit card numbers are never stored on our servers).
• Order Details: Items purchased, order totals, discount codes, fulfillment preferences (pickup or delivery), and delivery destination addresses.

3. How We Use Your Information

We process collected personal data for specific business purposes and under lawful bases, including:

• Service Delivery: Managing merchant accounts, maintaining real-time inventory counts across branches, and generating digital receipts.
• Payment Processing & Settlement: Authorizing credit card, debit card, and contactless payments and routing payout funds to verified merchant accounts.
• Security & Fraud Prevention: Continuously screening transactions for fraud indicators, suspicious card testing, account takeovers, and compliance violations.
• Platform Enhancements: Analyzing feature performance, troubleshooting software errors, and optimizing hardware battery and connectivity efficiency.
• Customer Support: Assisting merchants with terminal setup, inventory imports, menu management, and technical troubleshooting.

4. How We Share & Disclose Data

Vendify does not sell your personal data or merchant customer records to data brokers. We share information only under strict operational safeguards:

5. Data Security & Encryption Standards

We maintain bank-grade physical, administrative, and technical safeguards designed to protect personal and payment data against unauthorized access, destruction, or disclosure.

• PCI-DSS Level 1 Compliance: Vendify is certified to the highest industry payment card standard. All payment hardware supports end-to-end encryption (E2EE).
• Data in Transit & at Rest: All web and API traffic is encrypted using TLS 1.3. Merchant databases and credentials are encrypted using AES-256.
• Access Governance: Employee access to production infrastructure is strictly restricted according to least-privilege principles and protected by hardware multi-factor authentication.

6. Data Retention Policies

We retain personal data for as long as your merchant account remains active. After account closure, we retain transaction logs, tax records, and payout histories for up to seven (7) years in compliance with applicable federal, state, and international banking regulations and tax accounting statutes. Non-essential telemetry is routinely aggregated or deleted.

7. Your Privacy Rights & Choices

Depending on your jurisdiction (such as California under CCPA/CPRA, the European Economic Area under GDPR, or other applicable state regulations), you may have the following rights:

• Right of Access: You can request a summary and copy of personal data we maintain about you.
• Right of Rectification: You can update inaccurate account, store, or payout information through the Vendify dashboard at any time.
• Right of Erasure: You can request deletion of personal information, subject to mandatory legal, fraud prevention, and financial retention requirements.
• Marketing Communications: You may opt out of promotional emails by clicking the “unsubscribe” link in any marketing message.

8. Cookies & Tracking Technologies

We use strictly necessary cookies to keep you securely signed in to the merchant portal, preserve session state, and protect against cross-site request forgery attacks. We also utilize privacy-preserving analytics cookies to measure platform uptime and identify software bottlenecks. You can manage cookie preferences via your web browser settings.

9. Contact Us

If you have questions, concerns, or requests regarding this Privacy Statement or our data handling practices, please contact our dedicated privacy team: