Privacy Policy

Last Updated: December 2025

‍

This Privacy Policy (“Policy”) explains how Vendro AI, Inc. (“Vendro,” “we,” “us”) collects, uses, and safeguards certain user and usage data when an individual or organization accesses the Vendro AI product (the “Product”) under non-commercial, internal, or trial-use conditions.

‍

This Policy is intended to align with the Vendro AI Terms of Service and applies to all individuals or entities granted access to the Product under internal evaluation, limited-use test, or pilot conditions. Use of the Product constitutes your consent to the practices described in this Policy.

‍

1. Information We Collect

‍

We collect data related to your access and use of the Vendro AI product. Technical and usage data may include browser type, operating system, device type, IP address, access timestamps, clickstream behavior, navigational patterns, feature interaction logs, workflow audit trails, performance crashes, latency, or error telemetry. This information helps diagnose issues, improve performance, assess engagement, and ensure secure operation of the Product.

‍
If access is provided through workspace-based credentials, we may collect personal identifiers such as name, email address, assigned workspace or organization, and workspace roles or permissions. We do not collect passwords directly unless custom provisioning is being tested, and no third-party credential integrations are accessed without clear notice.

‍
If you upload documents, enter prompts, generate AI output, or store company-related information within the Product, we may store these inputs in your dedicated environment (“Customer Data”). Customer Data may be analyzed in de-identified form for performance benchmarking but is not accessed by Vendro personnel without your consent except for support, debugging, or abuse prevention.

‍

2. How We Use Collected Data

‍
Vendro uses collected data to operate, maintain, and improve the Product, understand feature usage, resolve technical issues, support onboarding, ensure platform security and integrity, and meet legal or auditing obligations. We do not sell or share data for marketing or resale purposes.

‍

3. Data Retention

‍
Unless specified in a commercial agreement, activity logs and usage data are retained only as long as needed for internal review and product improvement, typically up to twelve months after access ends. Customer-provided content may be deleted upon written request.

‍

4. Confidentiality

‍
All data associated with your Product use is treated as confidential in line with our Terms of Service. Vendro employs technical and organizational safeguards against unauthorized access, copying, or misuse.

‍

5. Data Sharing
‍

We may share data only with your organization or workspace administrator, with subprocessors bound by confidentiality, when required by law, or to protect Vendro’s rights and prevent abuse. All subprocessors operate under data processing terms consistent with this Policy.

‍

6. Information Security
‍

Vendro uses industry-standard administrative, technical, and physical security measures, including encrypted endpoints, isolated tenant environments, role-based access controls, activity logs, and incident monitoring. While we maintain strong protections, no internet or storage system is entirely secure, and use of the Product is at your discretion.

‍

7. Your Rights & Controls

‍
You may request deletion of non-essential activity data, termination of access credentials, documentation of subprocessors supporting your environment, or provide feedback regarding data practices. Requests should be directed to support@vendro.ai.

‍

8. Changes to This Policy
Vendro may update this Policy periodically to reflect platform or legal changes. Revised versions will include an updated Effective Date, and continued use of the Product will signify acceptance of those updates.

‍

9. Contact Us
For any questions about this Privacy Policy or Vendro’s privacy and security practices, please contact support@vendro.ai.