Privacy Policy

1. Information we collect

Vendetrics only collects the data strictly necessary to operate the service:

• Email address — for account creation and authentication
• Password — stored hashed (bcrypt), never in plain text
• Usage data — number of scans performed, subscribed plan, language preference
• Analysis data — results of your Amazon, eBay and Walmart product scans, and your custom sellability criteria
• Data you enter — the suppliers and notes you voluntarily add in your Suppliers CRM
• Amazon Ads connection (optional) — if you connect your Amazon advertising account (PPC module), we store an authorization token (refresh token) to read your campaigns on your behalf; it is deleted as soon as you disconnect

We do not ask for any other personal data (name, postal address, phone). Payment card details never pass through our servers — they are handled exclusively by Stripe.

2. How we use your data

The data collected is used exclusively to:

• Authenticate and manage your user account
• Count and limit scan-credit usage according to your plan
• Process payments via Stripe (card details handled exclusively by Stripe)
• Improve the quality of the service

3. Data sharing

We never sell or rent your data. It is only shared with the technical subprocessors strictly necessary to operate the service:

• Render — hosting of the application and database (see section 4 for location)
• Stripe — secure payment processing
• SerpAPI and Rainforest API — retrieval of public marketplace data (the scanned product's identifier is sent to them)
• Sakana AI — artificial-intelligence analysis: the review text and scanned product data, as well as your messages to the Vendy assistant, are sent to it to generate the analysis
• Resend — sending transactional emails (e.g. password reset)

Each of these providers acts as a subprocessor and only uses your data to deliver its service to Vendetrics.

4. Storage, location and retention

Passwords are hashed with bcrypt and all communications are encrypted via HTTPS/TLS. Your account and analysis data are hosted on Render's infrastructure, on servers located in the United States; this transfer outside the European Union takes place under the contractual safeguards provided by our host. Your data is retained for as long as your account is active, and deleted upon an account-deletion request (see section 6).

5. Chrome extension

The Vendetrics extension accesses Amazon, eBay and Walmart pages only when you click the "Scan" button. It does not read your browsing data, does not collect your history, and transmits no data without your explicit action.

Session data (email, token) is stored locally via chrome.storage.local and is never shared.

6. Your rights (GDPR)

In accordance with the GDPR, you have the following rights:

• Right of access to your data
• Right to rectification
• Right to erasure (account deletion) — self-service anytime from Settings > Danger zone in your dashboard
• Right to data portability — self-service from Settings, full JSON export of your data

To exercise the other rights, contact us at: support@vendetrics.io

7. Cookies and local storage

Vendetrics uses no tracking or advertising cookies. To keep you signed in, your email and a session token are stored locally in your browser (via localStorage), not in a cookie. This information stays on your device and is cleared when you sign out.

8. Contact

For any question about this privacy policy:
support@vendetrics.io