Legal

Privacy Policy

Last updated · May 1, 2026

Vendra Commerce, Inc. (“Vendra,” “we,” “us”) operates the Vendra commerce platform and the storefronts hosted on it. This policy describes what we collect when you visit a Vendra-powered store, how we use it, and the controls you have.

Overview

We collect the minimum information needed to operate the storefront you’re visiting, fulfill your orders, and improve the platform. Customer data lives in isolated tenants per merchant and is never sold.

Data we collect

Account information you provide: name, email, phone, addresses, password, and (where you choose) saved payment methods. Payment card numbers are tokenized by our PCI DSS Level 1 processor and never stored on Vendra systems.

Order and shopping activity: products viewed, items in cart, orders placed, returns requested, reviews submitted, and support messages.

Device and session signals: IP address, browser type, referring URL, timestamps, and (with your consent) cookies for analytics and marketing personalization.

How we use it

To operate your account, fulfill orders, send transactional notifications, prevent fraud, comply with legal obligations, and — only with your consent — to send marketing communications.

We use aggregated, anonymized signals to improve the platform and to power AI features such as recommendations and search ranking. Personally identifying information is never sent to third-party AI models.

When we share

With the merchant operating the storefront where you place an order — they need your delivery address and order details to fulfill the purchase.

With service providers under contract: payment processors (Stripe), shipping carriers (UPS, FedEx, USPS, DHL), email and SMS providers (SES, Twilio), tax engines (TaxJar), and analytics tooling.

With government authorities when legally required, or to protect the safety of our customers and merchants.

Your rights

You can request a copy of your data, correct inaccuracies, or delete your account at any time from Account → Profile. EU and UK residents have additional rights under GDPR; California residents under CCPA. To exercise any right, email privacy@vendra.com.

Retention

We keep account and order data for as long as your account is active. Once deleted, transactional records are retained for 7 years for tax and accounting compliance, after which they are anonymized.

Children’s privacy

Vendra is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact privacy@vendra.com and we will delete it.

Changes

We may update this policy from time to time. Material changes are communicated via email and a notice on the storefront at least 30 days before they take effect.

Contact us

Vendra Commerce, Inc. · 250 W 39th Street, Floor 12 · New York, NY 10018 · United States.
privacy@vendra.com

Privacy Policy · Vendra