Privacy Policy
VendBuddy is a software platform for vending machine operators. This policy describes what data we collect when you use vendbuddy.io, how we use it, and your rights over it.
1. What we collect
Account data (when you sign up)
- Email address
- Password (stored only as a salted hash; we never see or store plaintext passwords)
- If you sign in with Google: your Google-verified email and display name
Usage data (as you use the product)
- ZIP codes and locations you search in the Lead Finder
- Machines, routes, pipeline records, contracts, and notes you create inside the app
- Business profile information you choose to add (company name, ZIP, service area)
- IP address, browser user-agent, and an anonymous device fingerprint (used for fraud prevention and anti-abuse rate limiting)
- Referral codes if you arrived through a partner link
Billing data
Credit card and bank details are handled entirely by Stripe — they never touch our servers. We store only: your plan, credits remaining, Stripe customer ID, and payment status.
Analytics and advertising
- Google Analytics (pageviews, session length, referring source)
- Meta Pixel and Meta Conversions API (PageView, Lead, and Purchase events to measure ad performance)
- Cloudflare Turnstile (invisible CAPTCHA tokens to block bot signups)
2. How we use your data
- To deliver the features you signed up for (lead lookup, route planning, contract generation, and related tools)
- To send service emails (verification codes, billing notices, critical product updates)
- To improve the product based on aggregate usage patterns
- To prevent fraud, abuse, and credit-farming
- To measure the performance of advertising campaigns that refer users to VendBuddy
We do not sell your personal data, and we do not share it with advertising networks beyond the analytics and attribution uses described above.
3. Who we share data with
We use third-party processors to run the service. Each receives only the minimum data needed for their role:
- Supabase — database hosting (stores your account and product data)
- Resend — transactional email delivery
- Stripe — payment processing
- Apollo.io — B2B contact enrichment for leads you look up
- Google Places, US Census Bureau APIs — location and demographic data
- Meta (Facebook) and Google Analytics — ad attribution and product analytics
- Cloudflare Turnstile — CAPTCHA / bot protection
- Railway — server infrastructure
4. Your rights
- Access: request a copy of everything we have on file by emailing hello@vendbuddy.io
- Correct: update your details in the app or by email
- Delete: request full deletion of your account — see our Data Deletion page
- Portability: request your data in a machine-readable format
- Opt out of marketing email: use the unsubscribe link in any marketing message; service emails (billing, verification) will still be delivered
5. Data retention
- Active accounts: data is retained for as long as the account is open
- Deleted accounts: data is removed from primary systems within 30 days of the deletion request
- Backups: data is purged from backup systems within 90 days
- Analytics and server logs: retained for up to 13 months, then aggregated or deleted
- Billing records required for tax and accounting: retained for 7 years as required by applicable law
6. Cookies and similar technologies
We use a small number of cookies:
vb_session_token— keeps you signed in (required for the app to function)_ga,_gid— Google Analytics_fbp,_fbc— Meta Pixel for ad attribution
You can block cookies in your browser settings, but the app will not function without vb_session_token.
7. Children
VendBuddy is a business tool not directed at children. We do not knowingly collect data from anyone under 18.
8. International users
VendBuddy is operated from the United States. If you use the service from outside the US, your data is processed in the US. By using the service you consent to that transfer.
9. Changes to this policy
We will notify active users by email at least 30 days before any material change takes effect. The Last updated date at the top of this page always reflects the most recent revision.
10. Contact
Privacy questions, requests, or complaints: hello@vendbuddy.io