Legal
Privacy Policy
Effective date: June 23, 2026 · Last updated: June 23, 2026
The short version: we collect only what we need, we don't sell your data, and you can ask us to delete it at any time.
This Privacy Policy describes how VendPass ("we," "us," or "our") collects, uses, and protects your personal information when you use our website at vendpass.app and our mobile application (collectively, the "Service"). We are committed to protecting your privacy in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy law.
1. Information We Collect
We collect information in two ways: information you provide directly, and information collected automatically.
Information you provide:
- Name — provided when you request early access.
- Email address — used to contact you about your access request and product updates.
- Instagram handle — optionally provided when requesting early access, used to identify your community presence.
- App usage data — deal logs, inventory entries, and financial records you create within the app. This data is yours and is used solely to provide the Service to you.
Information collected automatically:
- Analytics data — we use PostHog to collect anonymized usage analytics, including page views, session duration, and feature interactions. This helps us improve the product. PostHog data is processed in accordance with PostHog's privacy policy.
- Device and browser information — standard technical data such as browser type, operating system, and IP address, collected automatically when you visit our website.
2. How We Use Your Information
- To process and respond to your early access request.
- To communicate with you about the Service, including updates, changes, and your beta access status.
- To provide, maintain, and improve the Service.
- To understand how the Service is used and to make product decisions.
- To comply with legal obligations.
3. How We Share Your Information
We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following limited circumstances:
- Service providers — we use Netlify to host our website and collect form submissions, and PostHog for analytics. These providers process data on our behalf under appropriate data processing agreements.
- Legal requirements — we may disclose information if required by law, court order, or governmental authority.
- Business transfers — in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
4. Data Retention
We retain your personal information for as long as necessary to provide the Service and fulfill the purposes described in this policy. Early access form submissions are retained in our Netlify Forms dashboard. You may request deletion at any time by contacting us.
5. Your Rights
Under PIPEDA and applicable law, you have the right to:
- Access the personal information we hold about you.
- Request correction of inaccurate or incomplete information.
- Withdraw consent to our use of your information (subject to legal or contractual restrictions).
- Request deletion of your personal information.
- File a complaint with the Office of the Privacy Commissioner of Canada if you believe your rights have been violated.
To exercise any of these rights, contact us at vendpass.app@gmail.com.
6. Cookies and Tracking
Our website uses cookies and similar tracking technologies for analytics purposes (via PostHog). You may disable cookies in your browser settings, though this may affect certain features of the site. We do not use advertising cookies or sell data to advertisers.
7. Security
We take reasonable technical and organizational measures to protect your personal information against unauthorized access, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
8. Children's Privacy
The Service is not directed at individuals under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, contact us and we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of material changes by updating the effective date above. Continued use of the Service after changes constitutes acceptance of the updated policy.
10. Contact
For privacy-related questions, requests, or complaints, contact us at:
VendPass
vendpass.app@gmail.com