Privacy

What the site and the app measure

• How they’re used. We use PostHog and OpenPanel to see how vendorbound.com and the app are used: the pages you visit, what you click, where your visit came from, and which features you use in the app. In the app this is tied to your account by an ID, never your email.
• Session recordings. PostHog also records how pages move and what is clicked, so we can find what’s confusing. Everything you type is hidden in those recordings, and so are your name, email and business name.

Meta’s pixel

• We advertise Vendorbound on Facebook and Instagram. To measure those ads, vendorbound.com and the app use Meta’s pixel. It tells Meta when you view a page, finish setting up your account, or start a paid plan.
• Meta may connect this to your Facebook or Instagram account, and uses it to choose who sees our ads and to tell us which ones worked. We don’t send Meta your name or email. Meta’s privacy policy covers what Meta does with it.

Your choices

• Your browser’s tracking protection or an ad blocker stops all of these.
• In your Facebook or Instagram settings, “Your activity off Meta technologies” shows what sites like ours send Meta, and lets you disconnect it.

Vendors’ websites

Vendors can publish a website with Vendorbound, at an address like yourname.vendorbound.site or on a domain they own. Each site belongs to the vendor who made it. This is what happens when you visit one.

• No cookies or trackers. Vendors’ sites don’t set cookies, keep anything in your browser, or load PostHog, OpenPanel or Meta’s pixel.
• Counting visits. When you open a vendor’s site, it tells our server the page you opened, the site that sent you there (only its name, like instagram.com), the campaign tags in the link if it has them (like utm_campaign), and whether you came from one of the vendor’s QR codes or emails. It also counts what you do on the page that the vendor wants to know about: tapping a buy button, adding to your bag, starting checkout, sending a form, signing up, tapping their phone number or email, opening directions, and following a link to another site. To count each visitor once a day without knowing who you are, our server mixes your IP address and your browser’s description (its user agent) with the vendor’s site and a random code that changes every day, and keeps only the scrambled result. Each day’s random code is deleted two days later, and with it any way to link that result back to you. From your browser’s description we keep only whether you used a phone, tablet or computer and which browser; from your IP address, only your country, as the host of the vendor’s site reports it. Your IP address and browser’s description themselves are never saved. The vendor sees counts per day, never a list of visitors.
• Messages and form answers go to the vendor. When you use a site’s contact form or one of the vendor’s forms (a custom order, a wholesale inquiry, a catering or event request, a preorder), we keep your name, your email, your phone number if the form asks for it, and your answers, with the page you sent them from and whether you arrived from the vendor’s booth sign or a link they shared. The vendor reads them in Vendorbound.
• The vendor’s contacts. Everyone who writes to a vendor, fills in one of their forms or signs up for their news becomes one contact in that vendor’s list: your name, email and phone, how you reached them, a tag for the kind of form you filled in (like Wholesale), and the tags and notes the vendor adds. A vendor can also add people from a list of their own, and merge two entries for the same person, which keeps both email addresses with that one contact. Each vendor sees only their own contacts.
• Replies. When the vendor answers from Vendorbound, the email comes from the vendor’s name at a Vendorbound sending address, and your reply goes to the vendor’s own email. We keep what they sent you with your message. Vendorbound may tell the vendor by email that you wrote, with your message in it.
• Signing up for a vendor’s email. When you sign up on a vendor’s site, we keep your email for that vendor, with when you signed up, the page you used, whether you came from their booth sign, and what you agreed to. We send you one email asking you to confirm, and the vendor can’t email you until you do. They can see their list and download it. Being in a vendor’s contacts without signing up doesn’t add you to their list.
• Emails from vendors. A vendor’s emails come from the vendor’s name at a Vendorbound sending address, through our email provider, and show the vendor’s mailing address. For each email we record whether it was delivered, bounced, or marked as spam, which our email provider tells us; when you clicked a link (every link passes through our server, which notes the click and sends you on, and links to the vendor’s site also carry tags its visit counts read); and whether the email’s images loaded, which counts as an approximate open, since some email apps load images on their own and others block them. The vendor sees totals for each email and how many people followed each link, not who.
• Unsubscribing. Every email has an unsubscribe link, and your email app may show its own Unsubscribe button. Either takes you off that vendor’s list at once. We keep a record that you left so you aren’t emailed again, and if your address bounces or you mark an email as spam, that vendor never emails it again. To come back, you sign up and confirm again.
• Reports go to us. When you report a site, Vendorbound’s team reads your report. The vendor isn’t told who reported it. Your email is optional, and we use it only to reply.
• Stopping floods. To limit how many messages, form answers, signups, reports and visit counts one person can send, our server holds a scrambled form of your IP address in memory for a few minutes. It isn’t saved.
• Deleting what you sent. Ask the vendor, or write to us at the address below, and we’ll delete your messages, form answers, signup or report. A vendor can delete you from their contacts, which deletes everything you sent them and your signup, or take you off their signup list and keep your messages.

Facebook and Instagram

In the Vendorbound app, you can connect your business’s Facebook Pages and Instagram professional accounts, and Vendorbound publishes the posts you schedule to them. You connect through Facebook, for your Pages and the Instagram professional accounts linked to them, or through Instagram, for an Instagram professional account without a Page.

• What you allow. Through Facebook, Vendorbound asks for pages_show_list, pages_read_engagement, pages_manage_posts, instagram_basic, instagram_content_publish, and business_management. Through Instagram, it asks for instagram_business_basic and instagram_business_content_publish. Vendorbound doesn’t read your insights, comments, messages, or followers.
• Your connection. We keep your Meta user ID and name, the permissions you granted, your access token, and your Pages’ access tokens. We store the tokens encrypted with AES-256-GCM, with a key reserved for Facebook and Instagram.
• Your Pages and accounts. For each one, we keep its ID, name, username, and profile picture address.
• Your posts. We keep what you write in Vendorbound: each post’s caption, photos, and time, and the Pages and accounts it goes to. When Vendorbound publishes a post, we keep the post ID and link Meta returns, and a log of each attempt. Tokens never go in that log.
• Your photos. We store them as JPEGs in Vendorbound’s image storage, at addresses no one can guess. They need a public address because Meta fetches each photo from one when it publishes.
• What it’s for. We use all of this only to publish the posts you write and schedule, at the time you pick, and to show you whether each one went out. We don’t use it for ads or sell it. Meta receives your posts when Vendorbound publishes them, and no one else receives any of it.
• How long we keep it. Your connection and its tokens stay until you remove the connection. Your posts and their history stay until you delete them, and deleting a post deletes its photos. Photos you upload but never save into a post are deleted after a day. The names and pictures of the Pages and accounts you connected stay beside your posts until you send a deletion request through Facebook or Instagram, or ask us.
• Removing it. Disconnecting in Vendorbound under Settings → Integrations, or removing Vendorbound in Facebook’s “Business Integrations” or Instagram’s “Apps and websites” settings, deletes your connection and its tokens and stops your scheduled posts. Posts already published stay on Facebook and Instagram. Delete your Facebook and Instagram data lists every way to remove it and what each one deletes.

If you connect your Etsy shop

A business owner can connect their Etsy shop in Vendorbound’s settings. Vendorbound then reads the shop through Etsy’s API for you, to show it next to your market season.

• What we read. Your shop’s details and settings, your listings with their photos, prices and stock, the last two years of orders and what was in them, your Etsy payments and fees, and your reviews. We read them again every few hours, and when Etsy tells us an order changed.
• About your buyers. For each order we keep the buyer’s city, state and country, so you can see where your Etsy sales go. We don’t keep buyers’ names, Etsy usernames, emails, street addresses or messages. For a personalized item we keep only that it was personalized. For a review we keep the rating, the words and any photo, not who wrote it.
• What it’s for. Showing your shop to you and anyone else on your business in Vendorbound, and making the changes you ask for. We don’t sell it, use it for ads, or share it with anyone else. Our own measuring records which Etsy features you use, never what’s in your shop: session recordings pause on your Etsy page.
• Changes you make. Vendorbound changes your shop only when you allow edits and then ask for a change, such as a new price or marking an order shipped. Each change goes to Etsy from your account and is noted in your business’s activity.
• How it’s kept. In Vendorbound’s database. Your Etsy access is stored encrypted.
• Disconnecting. Disconnect Etsy in settings and we delete everything we read from your shop, right away. You can also remove Vendorbound under Apps in your Etsy account settings. If Etsy stops accepting our access and nobody reconnects within 30 days, we delete the shop’s data then.
• If something goes wrong. If data from your shop is exposed, or we think it may have been, we’ll tell you and Etsy within 24 hours of finding out.

The term ‘Etsy’ is a trademark of Etsy, Inc. This Application uses Etsy’s API, but is not endorsed or certified by Etsy.

If you connect Google Calendar or Outlook

In the Vendorbound app, you can connect your Google Calendar or Outlook to your Vendorbound calendar. When you connect, you pick which of your calendars to sync, and where Vendorbound adds your events: one of your own calendars, or a separate calendar named “Vendorbound” that it makes for you. Each person on a business connects their own account, and nobody else on the business sees it.

• What you allow. On Google, Vendorbound asks to see the list of your calendars (calendar.calendarlist.readonly), to see and change events in calendars you own (calendar.events.owned), to make a calendar of its own (calendar.app.created), and to see when you’re busy (calendar.freebusy), plus your email address. It reads and changes events only in the calendars you pick, and can’t reach calendars other people share with you. On Microsoft, it asks for Calendars.ReadWrite, the narrowest access Outlook offers, and uses it the same way.
• What we read and keep. The names and colors of your calendars, to show you the list. From the calendars you pick, each event’s name, place, days, times and link, from two months back to a year and a half ahead. We don’t ask for who’s invited or the event’s notes. Your events that aren’t markets show on your Vendorbound calendar to you alone, and we keep them only while you sync that calendar. When you mark one as a market, or add an event to the calendar Vendorbound made, it becomes an event in your Vendorbound calendar, which everyone on your business sees, and moving, renaming or deleting it in one place does the same in the other. From your main calendar we also read the times you’re busy, never what the plans are, and keep them for five minutes.
• What we write. Your Confirmed and Applied events, with their names, places and days, and a link back to Vendorbound, into the calendar you picked. Changes to a market you marked go to its event in your calendar. Your notes and to-dos stay in Vendorbound.
• Your connection. We keep your account’s ID and email address, the calendars you picked, the permissions you granted, and your access tokens, stored encrypted with AES-256-GCM under a key reserved for calendars.
• What it’s for. Keeping your calendars in step, showing you your plans beside your markets, and showing you when you’re busy. We don’t sell it, use it for ads, use it to train AI models, or share it with anyone. Vendorbound’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
• Disconnecting. Stop syncing in Vendorbound under Settings → Integrations and we delete your tokens and the events we kept from your calendars, take back Google’s access, and remove the calendar Vendorbound made, if it made one. Events it added to your own calendars stay there, and your events stay in Vendorbound. You can also remove Vendorbound in your Google Account’s “Third-party apps & services” or your Microsoft account’s “Apps and services”.

The browser extension

The Vendorbound extension fills in event vendor applications with the answers you saved in your Vendorbound account.

What the extension handles

• Your saved application. Your name, contact details, business details, what you sell, your setup, and document numbers, as you entered them in Vendorbound. The Vendorbound app gives them to the extension when you are signed in at app.vendorbound.com.
• Forms on the pages you visit. To offer “Fill with Vendorbound” on an organizer’s application, the extension checks each page you open for a vendor application form: its questions, headings and title. This check runs in your browser. The page and your browsing are not sent anywhere.
• The form you ask it to fill. When you click “Fill with Vendorbound”, its toolbar button, or its shortcut, the extension reads the questions and options on that form to decide what goes where.
• What you type on a form it filled. After a fill, the extension watches the questions it read as lasting facts about your business, such as a permit number or an emergency contact. When you type one that your application doesn’t have, or change one it filled, it saves that answer to your application.

Where the extension keeps it

Your saved answers stay in your browser’s extension storage on your device. Removing the extension deletes them.

What the extension sends

• The questions on a form you fill. When you fill a form, the extension sends its questions to Vendorbound: their wording, answer type, and options. This happens while you’re signed in. Vendorbound uses TypeSafe (typesafe.ai) to work out what each question asks. It keeps the result, so a question it has read before isn’t sent to TypeSafe again.
• Your answers for questions it can’t place for certain. What it can place for certain, such as your email in an email box or your city in a city box, it fills on your device. For other questions, such as what you sell or a permit number, the extension sends the saved answers that might answer each one to Vendorbound, with your business name and how and what it sells. Vendorbound uses TypeSafe to check which answer fits, or which of the form’s options, and doesn’t keep them.
• Answers you add on a form. When the extension saves an answer you typed, it sends that one answer to your Vendorbound application and shows “Saved for next time” on the page. It never saves an answer about one event (your dates, booth, or power), a signature, an upload, or a sensitive number: Social Security, bank, card, date of birth, driver’s license, or passport. You can change or remove a saved answer in your application on Vendorbound.
• Nothing else. Your browsing stays on your device. The extension does not use analytics.

What the extension never does

It never submits a form. It never signs, agrees to terms or enters payment details for you.

Contact

Vendorbound is operated by Agustin Garcinuno, a sole proprietorship doing business as Monadiko Studio.

Questions: gus@vendorbound.com