Privacy Policy

We (VendOS Inc.) collect the data we need to run VendOS TCG for you: your account, your inventory, your sales. We do not sell it, share it with marketers, or use it to train ad models. You can download it or delete it anytime from Settings → Security.

Most of what is below is your data: your inventory, your sales, your shop. We hold it so the app works for you across your devices and survives a lost or stolen phone, the same way a cloud notebook keeps your notes. It is not a pool we mine. We do not read, analyze, or sell your individual business data, and nobody on our side browses your books. The only times a person on our team would open your data: when you ask us to while helping you with a support issue, or when we are strictly required to keep the service running, secure, or compliant with the law.

• Account: email, password (hashed, never stored in plain text), business name, optional phone, optional profile photo.
• Your vendor data: every inventory row, transaction, show, expense, and survey response you create. This is yours. We store it on your behalf so you can reach it from any device, and you can export or delete all of it anytime.
• Photos and camera: photos you take or upload for inventory items, plus card images you capture with the scanner. We ask for camera and photo-library access only when you use these features.
• Imports: if you import a spreadsheet (CSV), the rows you upload are processed to match cards to your inventory.
• Payment data: when you subscribe, our payment processors handle your card or store-account details. We never see or store full card numbers. We keep a record of your subscription status only.
• Technical data: IP address and user agent are logged by our hosting providers for security and abuse prevention.
• Two-factor authentication: if enabled, the TOTP secret is stored encrypted at our authentication provider.

• To run the product features you signed up for.
• To authenticate you on every visit.
• Card recognition: when you use the scanner or import a spreadsheet, the card image or rows are sent to Google's Gemini API to identify the card and fill in details. Per Google's API terms, this content is not used to train their models.
• Pricing: card identifiers (name, number, set) are sent to TCGplayer and PriceCharting to look up market prices. No personal data is included.
• To improve the product based on aggregate usage. We use analytics tools for page-level performance and product usage, which includes occasional, sampled session replays of how the app's interface is used. Every piece of on-screen text is masked: prices, profit totals, card values, names, and anything you type are blanked out and never recorded. We only see anonymized interface activity (taps, scrolling, navigation), and we honor your browser's “Do Not Track” setting to switch this off entirely. We do not run advertising trackers and we do not sell your data.
• To communicate with you about your account (password resets, security alerts).

We work with a small set of trusted service providers who process data on our behalf, only as needed to run the app and never for their own purposes:

• Hosting and infrastructure: to securely store your data and run the app. Encrypted in transit and at rest.
• Payments and subscriptions (Stripe, Apple, Google Play, RevenueCat): to process billing. Card and store-account details are handled directly by these providers; we never receive your full card number.
• Card recognition (Google Gemini): to identify cards from photos and imported files. This content is not used to train their AI models.
• Product analytics: to understand how features are used so we can improve the app. Includes sampled session replays with all on-screen text and numbers masked, so no private detail is ever readable, and honors “Do Not Track”.
• Pricing (TCGplayer, PriceCharting): to look up market prices. We send only card identifiers (name, number, set), never your personal data.

We do not sell vendor data. We do not share it with advertisers, data brokers, or model training pipelines. If law enforcement compels disclosure with a valid legal order, we will comply and notify you unless legally prohibited.

• Access / export: download a full JSON copy of your data from Settings → Security.
• Deletion: delete your account and every row tied to it from Settings → Security. Cannot be undone.
• Correction: edit your profile and inventory directly. For anything you can't edit yourself, email us.
• Portability: the export is plain JSON. Open it in anything.

If you live in California or a state with a similar privacy law, you have the right to know what personal information we hold, to correct it, to delete it, and to opt out of its sale or sharing. We make that last one easy: we do not sell or share personal information with anyone, for any purpose, so there is nothing to opt out of. The know, correct, and delete rights are built into the app (Settings → Security), or email us and we'll handle it. We will never treat you differently for exercising them.

We keep your data for as long as your account is active. When you delete your account, every row tied to it is removed immediately, and backups roll off within 30 days. Records we're legally required to keep (like subscription billing history) are retained only as long as the law requires.

VendOS TCG uses HTTPS for everything, encrypted-at-rest databases, row-level security so vendors can never read each other's data, and optional two-factor authentication. Our threat model is a small SaaS, not a bank, but we take real precautions and review them as we grow.

If a breach ever affects your personal information, we will notify you promptly by email with what happened, what was involved, and what we're doing about it, and we'll notify regulators where the law requires.

VendOS TCG is operated from the United States, and your data is stored and processed there. If you use the app from Canada or anywhere else, you're sending your information to the US, protected by everything described in this policy.

VendOS TCG is not directed at anyone under 13. If you believe a child has created an account, contact us and we'll delete it.

When the policy changes, we update the date at the top and surface a notice in-app. Material changes that reduce your rights will include a 30-day notice before taking effect.

Questions, deletion requests we couldn't process automatically, or anything privacy-adjacent: vendoroshelp@gmail.com.