Still in developmentAccess the demos for a preview and apply to be a beta tester
Book a call

Privacy

Privacy policy

The information Venditory collects, the reason for each item, who else handles it, how long it is kept and how to see, export, correct or delete it. Last updated October 13, 2026.

Scope

Coverage

This policy covers venditory.com and the hosted products Command, Outbound Sales, Store Front and Studio, run by Venditory in Austin, Texas. A custom build is covered by its own written agreement, which says where it runs and who can reach its records.

Venditory never sells personal information, never shares it for advertising and never uses a business's records to build anything for anyone else.

Information collected

Information collected, and the reason for each item

Account details

  • Name, email address, phone number, role and sign-in details for each person with a login
  • Reason: to sign people in, send account notices and show who did what

Business details

  • Business name, legal name, store locations, plan and settings
  • Reason: to run the account, bill the right plan and work out sales tax

Staff records

  • Names, roles, schedules, time clock entries and the sales made under each login
  • Reason: for timesheets, payroll exports and a name on every sale and void

Customer records a shop keeps

  • Customer names, contact details, purchases, gift cards, appointments and consignor records
  • Reason: held for the shop, on its instructions: the shop decides what is kept

Leads

  • Business names, addresses, phone numbers, visit notes and do-not-contact flags
  • Reason: for Outbound Sales: routes, calls, emails and follow-ups

Posts

  • Drafts, images, captions, schedules and approvals
  • Reason: for Studio: writing, approving and publishing posts

Connected platform tokens

  • Access tokens for the social accounts and online stores a business connects, stored encrypted
  • Reason: to post and sync on the business's behalf; deleted the moment the account is disconnected

Usage and error logs

  • Screens opened, actions taken, error reports, IP address and browser type
  • Reason: to keep the service running, find faults and detect misuse

Website messages

  • Name, email, phone number, business name, topic and message from the contact form, and the reply method chosen
  • Reason: to answer the message, and nothing else

Payments

Payment processor: MiCamp

Card and bank details

  • Card numbers and bank account details are entered into and held by MiCamp, never by Venditory
  • This covers a business paying for Venditory and a shop's own customers paying at the register or online
  • Venditory receives only the result of a payment: the amount, the date, whether it succeeded and a reference number

Merchant accounts

  • A shop that takes cards through Store applies for its merchant account with MiCamp
  • The application, ownership, bank and identity details stay with MiCamp under its own privacy policy
  • Venditory stores only the merchant ID needed to route the shop's payments, visible to the owner alone

Tax information

Tax information collected from a business

Collected for invoices and sales tax

  • Legal business name, for invoices
  • Billing address. Texas charges sales tax on software subscriptions as a data processing service, on 80 percent of the price (Texas Tax Code section 151.351 exempts the other 20 percent), and the billing address decides which state and local rate applies
  • An EIN or other tax ID, only when an invoice must show one
  • A resale or exemption certificate, only from a business claiming an exemption

Subprocessors

Subprocessors

These companies handle information for Venditory, each only for the job named.

Cloudflare

Hosting, network security and sending email from venditory.com

Supabase

The database that stores account records

MiCamp

Card and bank payments, merchant accounts and payouts

Google Fonts

The typefaces on this website

Platforms a business connects

Facebook, Instagram, Threads, TikTok, YouTube, LinkedIn, Pinterest, Bluesky, Telegram, Discord, Mastodon, WordPress, Shopify and WooCommerce, only when the business connects them, and only what a post or sync needs

Retention

Retention periods

Retention by record type

  • An open account: for as long as the account is open
  • A closed account: kept for 6 months after closing, so a business can come back without losing anything, then deleted
  • Delete my data: deletion starts at once instead of waiting the 6 months (see data deletion)
  • Payment, invoice and tax records: kept for as long as tax law requires, even after an account is deleted
  • Connected platform tokens: deleted the moment the account is disconnected
  • Website messages: kept while the conversation is open, and deleted on request

Security

Security measures

  • Every connection to Venditory is encrypted
  • Each business's records are fenced off from every other business inside the database
  • Access follows each person's role, and every change is written to an audit log
  • Platform tokens are stored encrypted, and card details never reach Venditory
  • More detail on the security page

Your rights

Access, export, correction and deletion

Access and export

  • An owner can see and export the business's records from inside each product
  • A full copy of everything held is sent on request

Correction

  • Most details can be corrected directly in the product settings
  • Anything else is corrected on request

Deletion

  • Delete my data, after signing in, at any time
  • The data deletion page lists what is deleted and what is kept

A shop's own customers

  • A shop's customer asking about their record is helped by the shop, which controls the record
  • Venditory assists the shop with any such request

Other information

Cookies, children and changes

Cookies

  • This website sets one cookie: the light or dark theme choice
  • The products set a sign-in cookie so a session stays signed in
  • No advertising or tracking cookies

Children

  • Venditory is business software and is not directed at children under 13
  • Information about a child under 13 is deleted as soon as it is found

Changes

  • Changes are posted on this page with a new date
  • Account owners are emailed before a significant change takes effect

Contact

Privacy questions

Email [email protected] with the subject Privacy, or use the contact form. A reply follows within 1 business day.