Privacy Policy
Effective date: July 29, 2026  ·  Last updated: July 29, 2026
This Privacy Policy explains how Vendimark collects, uses, stores, and shares information about you when you use our platform. We are committed to handling your information responsibly.

1. Who We Are

Vendimark operates a B2B supply marketplace connecting independent businesses with suppliers and distributors. When we say "Vendimark," "we," "us," or "our," we mean the Vendimark platform and its operator. When we say "you," we mean any person or business that creates an account or uses our platform.

2. Information We Collect

2.1 Information You Provide Directly

InformationWhy we collect it
Full name and contact nameAccount identification and communication
Business nameAccount registration and marketplace display
Email addressAccount login, notifications, and communication
Business addressBusiness verification and delivery logistics
Employer Identification Number (EIN)Business verification for Buyer accounts
Business typePersonalizing your marketplace experience
Password (hashed)Account security — we never store passwords in plain text

2.2 Information Generated Through Platform Use

InformationWhy we collect it
Order history and detailsOrder management, invoicing, and dispute resolution
Product listings (Suppliers)Displaying inventory in the marketplace
Payment transaction recordsFinancial reconciliation and compliance
Notifications and activity logsPlatform functionality and audit trail
Team member invitations and rolesMulti-user account management

2.3 Payment Information

Vendimark does not store payment card numbers, bank account numbers, or other sensitive financial credentials on our servers. All payment processing is handled by Square, Inc. When you enter card information on Vendimark, it is transmitted directly and securely to Square. We receive only non-sensitive confirmation data (last 4 digits of card, card brand, expiration month/year) to display to you for convenience.

Supplier bank account connections are established directly through Square's OAuth authorization flow. Vendimark stores only the Square Merchant ID and an access token issued by Square — we never see or store your actual bank account details.

2.4 Technical Information

Our platform and infrastructure providers (Supabase, Cloudflare) may collect standard technical data including IP addresses, browser type, device type, and usage logs for security and performance purposes. We do not use this data for advertising or profiling.

3. How We Use Your Information

We do not sell your personal information to third parties. We do not use your information for behavioral advertising.

4. How We Share Your Information

4.1 With Other Platform Users

When a Buyer places an order, certain information is shared with the Supplier fulfilling that order — specifically: business name, order details, delivery address or instructions, and any notes included with the order. Suppliers do not receive Buyer payment information.

When a Supplier lists products, their business name and product details are visible to all approved Buyers on the marketplace.

4.2 With Service Providers

We share information with the following service providers who help us operate the platform:

ProviderPurposeWhat they receive
SupabaseDatabase and authentication infrastructureAll account and order data stored on the platform
Square, Inc.Payment processing and bank connectionsPayment details, merchant connection data
CloudflareHosting and content deliveryWeb traffic and technical logs

Each of these providers has their own privacy policy and data practices. We encourage you to review Square's Privacy Policy and Supabase's Privacy Policy for details on how they handle data.

4.3 Legal Requirements

We may disclose your information if required to do so by law, court order, or government authority, or if we believe disclosure is necessary to protect the rights, property, or safety of Vendimark, our users, or the public.

5. Data Storage and Security

Your data is stored in Supabase's cloud database infrastructure, hosted in the United States. We implement row-level security controls to ensure that users can only access data they are authorized to view.

We take reasonable technical and organizational measures to protect your information from unauthorized access, loss, or disclosure. However, no system is completely secure. You are responsible for keeping your account credentials confidential.

6. Data Retention

We retain your account information for as long as your account is active. Order history and transaction records are retained for a minimum of 7 years to comply with financial record-keeping requirements. If you close your account, we will delete or anonymize your personal information within 90 days, except where retention is required by law.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

To exercise any of these rights, contact us at admin.vendimark@gmail.com. We will respond within 30 days.

8. Cookies and Tracking

Vendimark uses browser session storage to maintain your login state and cart contents during a session. We do not use third-party advertising cookies or tracking pixels. We do not participate in cross-site behavioral advertising networks.

9. Children's Privacy

Vendimark is a business-to-business platform intended for use by registered businesses and adults. We do not knowingly collect information from individuals under 18 years of age. If we become aware that a minor has created an account, we will terminate it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to active users via email or in-platform notification with at least 14 days notice. Continued use of the platform after the effective date constitutes acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy, please contact us at:

Vendimark
admin.vendimark@gmail.com

Note: This Privacy Policy is a first draft for review purposes. Vendimark recommends having this policy reviewed by a licensed attorney familiar with applicable privacy law (including CCPA, NY SHIELD Act, and other relevant regulations) before accepting real users or processing real transactions.