Privacy policy

This Privacy Policy explains what data Vendora collects, how we use it, and the choices you have. By using Vendora you consent to the practices described below.

What we collect

• Account info. Name, email, and (for owners) password hash. We use this to authenticate you.
• Storefront content. Products, images, prices, and store settings you create. This is shown publicly on your storefront URL.
• Order data. Customer name, email, phone, shipping address, payment reference. Shared with the merchant who owns the store you ordered from.
• Operational logs. IP address, user agent, and timing of requests for rate limiting, security, and debugging.

How we use it

• To provide the platform and process orders.
• To send transactional email (verification, OTP codes, order updates) via our SMTP provider.
• To detect and prevent abuse.
• To comply with legal obligations.

Sharing

Vendora does not sell personal data. We share data only with: (1) the merchant whose store you ordered from, (2) our hosting + email + storage providers under contract, and (3) authorities where compelled by law.

Cookies

We set strictly-necessary cookies for sessions, cart state, and CSRF protection. We do not use third-party advertising trackers.

Your rights

You can request access, correction, or deletion of your personal data by emailing privacy@vendora.in. Deletion requests for storefronts you own are processed within 30 days; anonymized order records may be retained for accounting and audit.

Contact

Privacy questions — write to privacy@vendora.in.