Privacy Policy

Account information you provide when you create a workspace, including business name, email address, and authentication credentials managed by our authentication provider.

Business content you enter into the platform, such as recipes, ingredient costs, supplier selections, inventory records, expense receipts, label configurations, and order details.

Customer information submitted through your public order-request portal, including names, contact details, event dates, and order descriptions.

Technical data generated automatically, such as log records, device and browser type, approximate region, and usage events needed to operate and secure the service.

To provide, maintain, and improve platform features including costing, inventory, labeling, and order management.

To authenticate users, secure accounts, prevent fraud or abuse, and enforce our Terms of Service.

To communicate service notices, transactional messages, and support responses.

To produce aggregated, de-identified analytics that help us understand feature usage. Aggregated data never identifies an individual vendor or customer.

Where required by applicable law, we process personal information on the basis of contractual necessity, legitimate business interests, legal obligation, or your consent. Where consent is the basis, you may withdraw it at any time without affecting processing performed before withdrawal.

We do not sell personal information. We share information only with service providers who process data on our behalf under contractual confidentiality obligations, including our hosting, database, storage, and payment processing vendors.

Payment card details are collected and processed directly by Stripe. VendorBatch does not store full card numbers or card security codes.

We may disclose information where required by law, valid legal process, or to protect the rights, safety, and property of VendorBatch, our users, or the public.

Data is transmitted over encrypted connections and stored in access-controlled systems with row-level authorization so that each vendor workspace is isolated from every other workspace. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain account and business records for as long as your workspace remains active and for a reasonable period afterward to satisfy legal, accounting, tax, or dispute-resolution requirements. You may request deletion of your workspace data at any time.

Depending on your jurisdiction, you may have the right to access, correct, export, restrict, or delete personal information we hold about you, and to object to certain processing. Submit requests through the contact details below; we may need to verify your identity before acting.

When your customers submit order requests, you act as the controller of that information and are responsible for using it lawfully, honoring customer privacy requests, and complying with any marketing and record-keeping rules that apply to your business.

We use strictly necessary cookies and browser storage to maintain sessions, remember workspace preferences, and support demo mode. Blocking this storage may prevent core features from functioning.

The service is intended for business use by adults. We do not knowingly collect personal information from children under 13, and we will delete such information if we learn we have collected it.

Information may be processed and stored in countries other than your own. Where required, we rely on appropriate safeguards for cross-border transfers of personal information.

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated effective date, and continued use of the platform after changes take effect constitutes acceptance of the revised policy.

Privacy questions and requests may be directed to the workspace owner contact listed in your VendorBatch account settings.