Privacy Policy

1. Who we are (data controller)

vendeu.store is the controller of the personal data of sellers who create an account, and of the technical data we collect when you use our website and dashboard. You can reach us about any privacy matter at oi@vendeu.store. For data that buyers share with a seller's store when placing an order, the seller is the controller and vendeu.store acts as a processor on the seller's behalf (see section 5).

2. Data we collect

• Account and seller data: your name, email address and sign-in credentials (passwords are never stored in plain text).
• Store content: store name, products, prices, settings and the WhatsApp contact number you choose to publish.
• Subscription data: plan status and billing references provided by our payment processor. We do not receive or store your full card number or banking credentials.
• Usage and technical data: IP address, device and browser type, pages viewed, timestamps and error logs, collected through the service and, where you allow it, cookies.
• Storefront visitor data: the items a visitor adds to an order and minimal technical browsing data. Conversations with customers take place on WhatsApp, outside our platform, under WhatsApp's own terms.

3. Why we use your data and our legal bases

Under GDPR Article 6, we rely on the following legal bases:

• Contract (Art. 6(1)(b)): to create and maintain your account and store, route orders to your WhatsApp, manage your subscription and send essential service emails such as sign-in confirmation and password reset.
• Legitimate interests (Art. 6(1)(f)): to keep the platform secure, prevent fraud and abuse, diagnose problems and improve the service, always balanced against your rights and expectations.
• Consent (Art. 6(1)(a)): for optional cookies and analytics and for any marketing messages. You can withdraw consent at any time without affecting past processing.
• Legal obligation (Art. 6(1)(c)): to meet accounting, tax, security and other legal requirements, and to respond to lawful requests from authorities.

We do not sell your personal data.

4. Who we share data with

We share personal data only as needed to run the service, and only with providers bound by confidentiality and data protection obligations:

• Paddle.com is our payment processor and Merchant of Record. It handles subscription billing, payment collection and applicable sales tax, and acts as an independent controller of the payment data you give it. Its use of that data is described in its own privacy notice.
• Infrastructure providers for hosting, database, authentication and email delivery, which process data on our instructions.
• Authorities and advisers where required by law, or to protect our rights, users or the public.
• A successor entity if vendeu.store is involved in a merger or sale of assets, with notice to you.

5. Buyers and sellers

Orders are placed between the buyer and the seller's store. The seller controls their customer relationships and the order information they receive, and is responsible for how they use it. vendeu.store processes that information on the seller's behalf to operate the storefront. Buyers who want to exercise their rights over order data should contact the seller first; we will help the seller respond where needed.

6. International data transfers

Our providers may process data in countries other than your own, including the United States and other countries that may not offer the same level of data protection as your home jurisdiction. When we transfer personal data from the European Economic Area, the United Kingdom or Switzerland, we rely on appropriate safeguards such as adequacy decisions, the European Commission's Standard Contractual Clauses, and contractual and technical protections such as encryption in transit. You can contact us at oi@vendeu.store for more information about these safeguards.

7. How long we keep data

We keep personal data while your account is active and for as long as needed to provide the service, meet legal, tax and accounting obligations, resolve disputes and enforce our agreements. After a store is canceled, associated data is deleted or anonymized according to our retention schedule, except where the law requires us to keep certain records for longer.

8. Your rights

Under GDPR Articles 15 to 22, you have the right to:

• Access the personal data we hold about you and receive a copy.
• Rectify data that is inaccurate or incomplete.
• Erase your data (the "right to be forgotten") where no overriding reason to keep it applies.
• Restrict processing in certain circumstances, for example while you contest accuracy.
• Data portability: receive your data in a structured, commonly used, machine-readable format and have it transmitted to another provider where feasible.
• Object to processing based on legitimate interests, and to direct marketing at any time.
• Withdraw consent at any time where processing is based on consent.
• Not be subject to solely automated decisions with legal or similarly significant effects. We do not make such decisions.

To exercise any of these rights, write to oi@vendeu.store. We may need to verify your identity first, and we will respond within one month, extendable where the law allows for complex requests.

9. Right to lodge a complaint

If you believe we have handled your personal data unlawfully, you have the right to lodge a complaint with the data protection supervisory authority in the country where you live, work or where the alleged infringement occurred. We would appreciate the chance to address your concern first, so please contact us at oi@vendeu.store.

10. Cookies

We use strictly necessary cookies to keep you signed in and the service secure. Optional cookies, such as analytics, are used only if you consent through our cookie notice, and you can change your choice at any time through that notice or your browser settings.

11. Security

We apply technical and organizational measures to protect personal data, including encryption in transit, access controls and separation of each store's data. No system is completely secure, but we work to prevent unauthorized access, loss or misuse.

12. Changes to this Policy

We may update this Policy from time to time. When we make material changes we will post the new version here and update the "Last updated" date, and where required we will notify you directly.

13. Contact

Questions about this Policy or your privacy: oi@vendeu.store.