Privacy Policy
✅ Vendou respects your privacy and is committed to protecting your personal data in accordance with applicable U.S. state privacy laws (including the California Consumer Privacy Act and similar state laws).
1. Data Controller
ZENTARA BUSINESS LLC — 175 Varick St, New York, NY 10014, USA — support@vendou.us
2. Information We Collect
Account information
- Full name
- Email address
- Password (encrypted)
- Profile photo (optional)
Transaction information
- Shipping address
- Purchase and sale history
- Payment information (processed by Stripe, not stored by Vendou)
Technical information
- IP address
- Browsing data (cookies)
- Login logs
3. How We Use Your Information
- Managing user accounts
- Processing transactions
- Sending notifications and transactional emails
- Improving our service
- Fraud prevention
- Complying with legal obligations
4. Legal Basis for Processing
- Contract performance: for data necessary to complete transactions
- Consent: for marketing communications
- Legal obligation: for tax record retention
5. Data Retention
- Active account: for the duration of your registration
- After account deletion: 3 years, for legal compliance purposes
- Transaction records: 7 years (tax and accounting obligations)
- Technical logs: 12 months
6. Data Sharing
Your data may be shared with:
- Stripe — payment processing
- Brevo — transactional email delivery
- Shipping carriers — package delivery
- Hetzner — data hosting
We do not sell your personal data to third parties for their own marketing purposes.
7. Your Privacy Rights
Depending on your state of residence, you may have the following rights:
- Right to know what personal data we collect and how it's used
- Right to access a copy of your personal data
- Right to correct inaccurate personal data
- Right to delete your personal data
- Right to opt out of the sale or sharing of personal data (Vendou does not sell personal data)
- Right to non-discrimination for exercising your privacy rights
To exercise these rights, contact us at support@vendou.us. We will respond within the timeframe required by applicable law.
8. Security
Vendou implements technical and organizational measures to protect your data: SSL/TLS encryption, hashed passwords (bcrypt), and restricted access to data.
9. Children's Privacy
Vendou is not intended for individuals under 18. We do not knowingly collect personal information from children under 13, in accordance with the Children's Online Privacy Protection Act (COPPA).
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated to users by email.